Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/038a93d3-7983-3fd7-a081-a00fcdf750ae.roa
File:                     038a93d3-7983-3fd7-a081-a00fcdf750ae.roa (raw, json)
Hash identifier:          mDV0t5B/ifiNhE6lyHAnulzWyxaV9N5mqlsIAbRWvC8=
Subject key identifier:   E2:0B:45:A3:4F:10:9F:71:A8:AC:13:31:9D:98:B9:1A:6E:7D:6A:4B
Certificate issuer:       /CN=8661935e-ae6c-488e-9f2d-5b3b4daaf1f6
Certificate serial:       010D0C9F4328584E5FDF64B43F2C455D121CDFC0
Authority key identifier: AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/038a93d3-7983-3fd7-a081-a00fcdf750ae.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     395297
IP address blocks:        23.130.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:64:b4:3f:2c:45:5d:12:1c:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8661935e-ae6c-488e-9f2d-5b3b4daaf1f6
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=38f48415-1222-4b27-ba02-6dc0ec19627e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:7d:8b:c1:b3:1f:26:90:d0:fd:3d:e9:5e:
                    a3:05:60:55:f3:32:c0:7a:58:3b:07:5b:86:19:e9:
                    19:83:7d:a6:49:b5:12:b0:8d:67:3c:18:9c:25:29:
                    ea:8d:9b:f2:ee:46:20:09:08:91:b2:ea:4b:f5:19:
                    21:3f:a7:2a:19:7b:1b:6c:ac:5c:36:b2:10:d0:26:
                    ee:bf:9a:15:c4:99:a1:d5:b4:04:be:d8:cd:12:84:
                    29:3a:9f:10:9e:d4:ab:34:52:80:55:38:46:cd:1a:
                    8e:99:03:b2:1a:5c:2e:6a:56:6d:74:da:d0:73:97:
                    d0:ac:0e:96:a5:20:bf:a6:c3:05:83:e3:a6:d3:9a:
                    97:cb:3c:83:67:53:44:c1:75:39:4e:20:7e:e5:b8:
                    d9:cb:0a:25:8b:6e:7f:6f:c3:b4:68:30:ba:8c:db:
                    fd:9f:d2:84:0e:db:b5:fb:eb:cb:0e:95:98:9b:ef:
                    d2:1c:03:5c:36:62:ba:cb:8d:53:ae:3f:bd:aa:15:
                    0e:55:58:f5:c6:bc:32:17:9c:c4:4a:dc:ea:fa:92:
                    bd:f5:2d:91:33:0a:6a:26:a8:59:17:3d:fc:7f:5e:
                    83:78:83:2f:03:ee:eb:3a:49:8c:c2:44:77:e2:4a:
                    69:9a:5a:44:0b:94:4a:f5:a6:ee:6b:26:21:1c:96:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0B:45:A3:4F:10:9F:71:A8:AC:13:31:9D:98:B9:1A:6E:7D:6A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/038a93d3-7983-3fd7-a081-a00fcdf750ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.crl

            X509v3 Authority Key Identifier:
                keyid:AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:00:64:92:25:d8:f7:80:79:d5:ec:8a:7e:04:36:bf:a0:
         9d:f3:04:34:23:82:92:a5:23:de:ff:3e:05:07:a5:ef:0e:8e:
         a3:b3:d6:6a:16:76:91:50:52:6e:3c:de:51:ad:95:98:21:86:
         0b:0e:a0:c2:f9:2c:e7:43:63:d5:9d:f7:33:e3:63:27:2c:a9:
         e3:b1:87:f1:b5:26:30:bf:01:bd:25:41:0b:cc:46:09:00:3b:
         51:0d:0a:ee:ee:3e:bf:33:ac:59:42:87:1f:39:e4:9a:c8:42:
         cf:94:41:0c:bd:09:af:f9:bc:76:d7:cc:31:a5:ec:2f:c1:13:
         f7:03:3d:bc:33:eb:f3:4f:45:39:16:b9:bf:b5:59:62:c2:d8:
         6e:76:e8:6b:c3:23:f0:39:83:6c:ce:0f:8b:fa:09:0e:70:9e:
         1e:e6:d0:88:3c:62:d7:d8:e9:b6:85:3d:9e:b5:b5:cc:a6:70:
         49:7d:45:86:d4:83:9c:00:b3:bd:4b:98:5d:d2:fe:d4:eb:35:
         c6:ff:3c:8f:ea:c7:fd:f2:60:9d:e3:82:0b:42:51:c5:12:fc:
         cf:e4:e2:70:25:e0:fa:ac:26:32:57:e0:6d:6b:bd:e5:35:fe:
         5a:57:13:80:d5:0f:1a:8d:60:4d:db:86:c6:1b:67:46:8c:77:
         df:f2:67:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32S0PyxFXRIc38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODY2MTkzNWUtYWU2Yy00ODhlLTlmMmQtNWIzYjRkYWFm
MWY2MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
MzhmNDg0MTUtMTIyMi00YjI3LWJhMDItNmRjMGVjMTk2MjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt19i8GzHyaQ0P096V6jBWBV8zLAelg7B1uG
GekZg32mSbUSsI1nPBicJSnqjZvy7kYgCQiRsupL9RkhP6cqGXsbbKxcNrIQ0Cbu
v5oVxJmh1bQEvtjNEoQpOp8QntSrNFKAVThGzRqOmQOyGlwualZtdNrQc5fQrA6W
pSC/psMFg+Om05qXyzyDZ1NEwXU5TiB+5bjZywoli25/b8O0aDC6jNv9n9KEDtu1
++vLDpWYm+/SHANcNmK6y41Trj+9qhUOVVj1xrwyF5zEStzq+pK99S2RMwpqJqhZ
Fz38f16DeIMvA+7rOkmMwkR34kppmlpEC5RK9abuayYhHJamOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOILRaNPEJ9xqKwTMZ2YuRpufWpLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjYx
OTM1ZS1hZTZjLTQ4OGUtOWYyZC01YjNiNGRhYWYxZjYvMDM4YTkzZDMtNzk4My0z
ZmQ3LWEwODEtYTAwZmNkZjc1MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODY2MTkzNWUtYWU2Yy00ODhlLTlm
MmQtNWIzYjRkYWFmMWY2Lzg2NjE5MzVlLWFlNmMtNDg4ZS05ZjJkLTViM2I0ZGFh
ZjFmNi5jcmwwHwYDVR0jBBgwFoAUrxW9LA2jyrbCzhuXr/0q1MONOnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjYxOTM1ZS1hZTZjLTQ4OGUtOWYyZC01YjNi
NGRhYWYxZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAC7AGSSJdj3gHnV7Ip+BDa/oJ3zBDQjgpKlI97/PgUHpe8OjqOz1moW
dpFQUm483lGtlZghhgsOoML5LOdDY9Wd9zPjYycsqeOxh/G1JjC/Ab0lQQvMRgkA
O1ENCu7uPr8zrFlChx855JrIQs+UQQy9Ca/5vHbXzDGl7C/BE/cDPbwz6/NPRTkW
ub+1WWLC2G526GvDI/A5g2zOD4v6CQ5wnh7m0Ig8YtfY6baFPZ61tcymcEl9RYbU
g5wAs71LmF3S/tTrNcb/PI/qx/3yYJ3jggtCUcUS/M/k4nAl4PqsJjJX4G1rveU1
/lpXE4DVDxqNYE3bhsYbZ0aMd9/yZ4g=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:19 2026 by rpki-client