Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/6dc4dff7-6f9d-3500-88b1-861af67e8eaa.roa
File:                     6dc4dff7-6f9d-3500-88b1-861af67e8eaa.roa (raw, json)
Hash identifier:          1mHVGoriARKGQcMLyr/iGewvXYTMeKPOE/WzJjPZ3Xo=
Subject key identifier:   86:CA:B7:87:03:1A:11:FF:72:27:DA:BF:8D:3B:6C:64:46:9B:2B:27
Certificate issuer:       /CN=247878e6-bf13-46a9-bbca-d4574efc3fb5
Certificate serial:       010D0C9F4328584EA786F8B7047731CCF79E8900
Authority key identifier: FD:15:60:46:05:23:A5:89:5F:EC:83:AD:3C:A8:CF:3E:03:89:04:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/6dc4dff7-6f9d-3500-88b1-861af67e8eaa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4766
IP address blocks:        23.134.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/247878e6-bf13-46a9-bbca-d4574efc3fb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/247878e6-bf13-46a9-bbca-d4574efc3fb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f8:b7:04:77:31:cc:f7:9e:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247878e6-bf13-46a9-bbca-d4574efc3fb5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cbf394f6-0e59-423e-8211-6abe0d75440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:2c:41:ea:44:f4:a6:5c:02:3a:9b:97:c1:
                    d6:b2:7c:eb:77:77:03:be:41:50:bb:c1:01:a5:2b:
                    b6:0f:0e:14:a3:b8:24:97:ce:c1:0d:23:d3:5f:3a:
                    89:27:93:8b:b6:a0:bf:28:36:ac:4d:d1:29:c3:7e:
                    29:9a:7f:d3:8c:b9:86:2b:bf:4d:bd:08:b2:47:aa:
                    46:36:60:65:42:a1:0b:09:9a:bc:7c:c4:ec:b1:ad:
                    19:d6:6e:55:df:ad:a7:74:62:d8:bd:b5:b1:1b:7e:
                    ec:f3:81:4e:f8:34:fa:61:7a:25:de:9e:99:c9:aa:
                    08:07:e0:b6:63:10:6d:86:b2:e2:8e:47:2d:5b:db:
                    56:75:41:f5:b6:49:76:72:53:39:40:3a:d2:1e:88:
                    73:d7:23:5c:46:18:3e:c7:a7:d1:eb:23:4c:9f:c5:
                    01:2f:d8:e5:81:0f:c0:33:34:93:e0:91:e1:98:86:
                    4b:fb:17:00:59:2b:52:9f:fa:c4:d5:e8:3b:49:ac:
                    66:88:88:c4:63:ef:e6:d5:7e:0c:aa:0f:16:c2:58:
                    d2:39:19:9b:8c:6b:eb:a0:f1:e2:e9:b8:7d:8b:f2:
                    e4:8a:e1:b6:9a:cd:7a:65:e8:91:3a:a0:1e:2b:22:
                    a2:41:a2:d1:2f:c1:76:ba:91:fb:0a:6d:84:41:29:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CA:B7:87:03:1A:11:FF:72:27:DA:BF:8D:3B:6C:64:46:9B:2B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/6dc4dff7-6f9d-3500-88b1-861af67e8eaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5/247878e6-bf13-46a9-bbca-d4574efc3fb5.crl

            X509v3 Authority Key Identifier:
                keyid:FD:15:60:46:05:23:A5:89:5F:EC:83:AD:3C:A8:CF:3E:03:89:04:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/247878e6-bf13-46a9-bbca-d4574efc3fb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:f9:e2:7a:9a:d8:3a:6e:78:6d:bb:13:f0:0e:25:27:fb:
         46:78:c0:cd:fc:c2:d6:78:84:b6:1f:db:43:be:e7:c7:f2:a6:
         f4:39:54:d1:a0:85:b4:8c:75:9a:40:80:92:83:2c:40:06:a1:
         55:4e:bb:fe:c6:e3:82:ca:ab:cd:44:05:d5:ff:70:83:b7:eb:
         fb:e1:a7:67:70:3a:75:6f:b9:eb:c7:60:1e:d6:09:9e:1f:c6:
         42:c7:68:30:04:e6:a7:91:f4:9a:74:42:91:88:6a:aa:91:69:
         98:23:b6:de:8c:21:5e:b2:60:a5:e3:d6:ae:85:ff:7d:c3:8a:
         1f:7e:44:85:67:9c:da:4d:79:40:35:d0:c1:5c:75:f6:82:4d:
         7a:29:96:c6:22:ac:9b:c9:50:e2:a1:0b:d8:da:07:71:66:f6:
         56:61:8a:2e:70:42:3d:6e:d3:2d:4c:b6:b8:77:50:87:d4:4c:
         7a:f6:7e:3e:98:21:48:cb:46:06:ad:7b:a9:57:34:87:f9:65:
         bc:a6:a7:49:63:f1:22:17:d2:06:2b:19:ef:36:c3:14:fb:01:
         e5:d3:78:c0:20:0e:37:37:fe:a8:67:90:18:82:f8:e1:dd:96:
         76:04:cb:dc:f1:8b:0a:75:30:98:a8:32:a5:b9:fd:42:35:4f:
         71:ec:60:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvi3BHcxzPeeiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ3ODc4ZTYtYmYxMy00NmE5LWJiY2EtZDQ1NzRlZmMz
ZmI1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2JmMzk0ZjYtMGU1OS00MjNlLTgyMTEtNmFiZTBkNzU0NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BQsQepE9KZcAjqbl8HWsnzrd3cDvkFQu8EB
pSu2Dw4Uo7gkl87BDSPTXzqJJ5OLtqC/KDasTdEpw34pmn/TjLmGK79NvQiyR6pG
NmBlQqELCZq8fMTssa0Z1m5V362ndGLYvbWxG37s84FO+DT6YXol3p6ZyaoIB+C2
YxBthrLijkctW9tWdUH1tkl2clM5QDrSHohz1yNcRhg+x6fR6yNMn8UBL9jlgQ/A
MzST4JHhmIZL+xcAWStSn/rE1eg7SaxmiIjEY+/m1X4Mqg8WwljSORmbjGvroPHi
6bh9i/LkiuG2ms16ZeiROqAeKyKiQaLRL8F2upH7Cm2EQSkREwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbKt4cDGhH/cifav407bGRGmysnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNDc4
NzhlNi1iZjEzLTQ2YTktYmJjYS1kNDU3NGVmYzNmYjUvNmRjNGRmZjctNmY5ZC0z
NTAwLTg4YjEtODYxYWY2N2U4ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjQ3ODc4ZTYtYmYxMy00NmE5LWJi
Y2EtZDQ1NzRlZmMzZmI1LzI0Nzg3OGU2LWJmMTMtNDZhOS1iYmNhLWQ0NTc0ZWZj
M2ZiNS5jcmwwHwYDVR0jBBgwFoAU/RVgRgUjpYlf7IOtPKjPPgOJBEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNDc4NzhlNi1iZjEzLTQ2YTktYmJjYS1kNDU3
NGVmYzNmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4YEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6L+eJ6mtg6bnhtuxPwDiUn+0Z4wM38wtZ4hLYf20O+58fypvQ5VNGg
hbSMdZpAgJKDLEAGoVVOu/7G44LKq81EBdX/cIO36/vhp2dwOnVvuevHYB7WCZ4f
xkLHaDAE5qeR9Jp0QpGIaqqRaZgjtt6MIV6yYKXj1q6F/33Dih9+RIVnnNpNeUA1
0MFcdfaCTXoplsYirJvJUOKhC9jaB3Fm9lZhii5wQj1u0y1Mtrh3UIfUTHr2fj6Y
IUjLRgate6lXNIf5Zbymp0lj8SIX0gYrGe82wxT7AeXTeMAgDjc3/qhnkBiC+OHd
lnYEy9zxiwp1MJioMqW5/UI1T3HsYC4=
-----END CERTIFICATE-----
Generated at Tue Aug 25 21:58:06 2026 by rpki-client