Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
File:                     143a0d57-0f9f-393b-bc63-7c750f27a196.roa (raw, json)
Hash identifier:          xo6oVYkyCHaBlyDrsO+D3hWtKITm2g0/2iu/Tgi2TD0=
Subject key identifier:   53:F1:1B:5F:8D:9D:5C:AF:F7:D7:17:2C:5A:5E:04:67:06:AA:44:3C
Certificate issuer:       /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
Certificate serial:       010D0C9F4328584E104EE1D9DF3ED79E283B4AC0
Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     399861
IP address blocks:        23.133.196.0/24 maxlen: 24
                          2602:f705::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e1:d9:df:3e:d7:9e:28:3b:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=975e60f1-6897-4f11-a691-4060cb3c65f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:cc:c5:03:46:6d:ed:47:1e:69:10:61:e5:
                    7a:ca:e4:68:97:44:4d:e7:06:2a:73:4f:8a:fe:78:
                    22:70:78:1c:45:96:b0:ff:81:be:79:d0:39:3f:a7:
                    ac:9c:fc:91:a5:af:88:37:4c:66:21:e4:c0:78:85:
                    42:30:04:10:8d:6e:1c:e8:88:44:96:3e:bc:48:c3:
                    61:d7:94:ce:f2:66:4e:a1:09:a1:4f:1a:0b:5b:f3:
                    6a:8e:e9:9b:4f:49:d6:ea:cc:d8:f5:84:db:fe:fc:
                    cf:fb:66:1c:53:85:01:8e:30:be:a1:0f:e1:6e:b0:
                    e1:23:8f:79:b9:d9:8c:62:1a:93:6e:05:9d:b7:f0:
                    13:d5:66:ad:39:32:8d:85:67:c4:04:e4:32:a0:f9:
                    dd:2d:25:85:2a:8b:d0:5d:cc:81:aa:47:44:b5:51:
                    5a:d0:17:3a:fa:9f:e7:a4:c4:4f:55:09:78:d9:9a:
                    27:0d:f4:3a:68:f8:fc:f7:72:78:5e:08:56:31:26:
                    31:24:99:50:da:c0:6c:14:89:80:c0:49:18:52:5e:
                    59:65:20:24:ce:10:6a:98:a4:f6:8d:4a:90:45:b9:
                    1e:1a:b1:35:f7:27:d3:87:aa:d6:5c:83:69:37:51:
                    62:a4:23:7c:f4:4d:0c:12:4a:e9:2b:85:ee:98:64:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:1B:5F:8D:9D:5C:AF:F7:D7:17:2C:5A:5E:04:67:06:AA:44:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl

            X509v3 Authority Key Identifier:
                keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.196.0/24
                IPv6:
                  2602:f705::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0b:d9:16:18:50:8e:75:61:56:8b:bb:7c:27:53:c5:81:ae:
         df:e1:8d:9b:53:52:ca:79:65:90:39:26:14:15:ce:f8:6b:23:
         87:bc:54:1b:82:9d:71:42:b4:a6:41:34:d0:12:28:1e:45:85:
         a5:cb:04:84:9c:72:de:cc:64:55:0e:bf:d4:bb:90:1e:6d:48:
         85:90:e1:c1:36:9e:3c:73:5a:4e:65:79:e2:6a:1a:ad:51:21:
         67:ab:ab:10:39:41:d2:08:a4:d1:6f:71:44:a4:02:be:33:3b:
         24:eb:e8:7b:51:66:12:ef:93:bc:ed:ef:c3:ab:0c:55:fc:4b:
         4e:18:34:4d:67:c2:bb:94:72:8e:0c:d2:cd:90:97:7b:fd:97:
         0e:56:2d:74:68:0e:c8:46:8d:18:cd:42:69:83:dc:1b:e8:4b:
         87:92:38:f1:20:15:06:dd:fe:1f:b3:18:0b:20:28:77:a8:d4:
         72:25:2f:a0:c7:aa:c2:b0:02:3c:f9:97:db:bf:57:23:bf:d1:
         21:0b:11:68:81:06:11:8e:58:ce:08:32:21:a7:14:11:dc:d3:
         db:21:d1:57:86:e9:3b:d9:45:1a:40:19:b8:67:5d:64:e0:c9:
         65:e9:ff:5b:80:8d:de:16:30:65:de:67:69:4d:dc:71:d8:fb:
         d0:8f:ac:13
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4QTuHZ3z7Xnig7SsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZkZDc0ZTYtN2U2NS00MmQ0LWE0OWEtMDdlMGNjMThj
MWVmMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
OTc1ZTYwZjEtNjg5Ny00ZjExLWE2OTEtNDA2MGNiM2M2NWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNHMxQNGbe1HHmkQYeV6yuRol0RN5wYqc0+K
/ngicHgcRZaw/4G+edA5P6esnPyRpa+IN0xmIeTAeIVCMAQQjW4c6IhElj68SMNh
15TO8mZOoQmhTxoLW/NqjumbT0nW6szY9YTb/vzP+2YcU4UBjjC+oQ/hbrDhI495
udmMYhqTbgWdt/AT1WatOTKNhWfEBOQyoPndLSWFKovQXcyBqkdEtVFa0Bc6+p/n
pMRPVQl42ZonDfQ6aPj893J4XghWMSYxJJlQ2sBsFImAwEkYUl5ZZSAkzhBqmKT2
jUqQRbkeGrE19yfTh6rWXINpN1FipCN89E0MEkrpK4XumGRnhQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFPxG1+NnVyv99cXLFpeBGcGqkQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNmRk
NzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2UwY2MxOGMxZWYvMTQzYTBkNTctMGY5Zi0z
OTNiLWJjNjMtN2M3NTBmMjdhMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDZkZDc0ZTYtN2U2NS00MmQ0LWE0
OWEtMDdlMGNjMThjMWVmLzA2ZGQ3NGU2LTdlNjUtNDJkNC1hNDlhLTA3ZTBjYzE4
YzFlZi5jcmwwHwYDVR0jBBgwFoAUYi13yGYulJlhcXxC8kNoQfFqT1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNmRkNzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2Uw
Y2MxOGMxZWYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4XEMA4E
AgACMAgDBgQmAvcFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOC9kWGFCOdWFWi7t8J1PFga7f4Y2bU1LK
eWWQOSYUFc74ayOHvFQbgp1xQrSmQTTQEigeRYWlywSEnHLezGRVDr/Uu5AebUiF
kOHBNp48c1pOZXniahqtUSFnq6sQOUHSCKTRb3FEpAK+Mzsk6+h7UWYS75O87e/D
qwxV/EtOGDRNZ8K7lHKODNLNkJd7/ZcOVi10aA7IRo0YzUJpg9wb6EuHkjjxIBUG
3f4fsxgLICh3qNRyJS+gx6rCsAI8+Zfbv1cjv9EhCxFogQYRjljOCDIhpxQR3NPb
IdFXhuk72UUaQBm4Z11k4Mll6f9bgI3eFjBl3mdpTdxx2PvQj6wT
-----END CERTIFICATE-----
Generated at Fri Jun 5 21:01:56 2026 by rpki-client