Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa
File:                     d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa (raw, json)
Hash identifier:          RDPiyvGkxSzefCzdUvLZpSP/KfFtPTr/Uq83OLD4Ads=
Subject key identifier:   A6:08:F0:74:AE:7A:D0:92:C4:0E:60:05:7E:27:D9:4C:10:85:BF:6F
Certificate issuer:       /CN=9b2dd4d6-06da-4602-9071-aee92968f31a
Certificate serial:       010D0C9F4328584EA78861DA8EBE97274DD64C00
Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400596
IP address blocks:        23.132.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:61:da:8e:be:97:27:4d:d6:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=095bba19-cf15-42e9-803f-354441059d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:4e:00:a0:e9:7f:c9:63:c5:6a:b5:8d:44:
                    53:f8:5c:ee:bb:ec:c4:07:99:ce:6b:5b:c8:8a:4b:
                    e0:18:6e:0c:48:48:25:10:f2:1c:84:51:b9:10:24:
                    3b:1a:cf:68:2a:1a:e5:23:05:23:60:e4:a5:ae:cf:
                    5e:65:a1:00:d0:50:b2:d2:9a:51:c2:78:ca:88:3c:
                    b8:12:95:e2:ee:cf:4f:12:09:ea:50:92:74:53:79:
                    e6:76:c0:e2:a8:22:93:a1:00:33:4d:f0:09:47:35:
                    8d:82:96:ce:7e:7a:d8:4d:bc:8e:13:a2:67:d9:9f:
                    76:f2:ce:78:cb:3b:31:c8:fe:ed:d3:40:0f:a9:16:
                    21:ed:fb:18:63:80:29:09:66:e2:36:f7:04:ca:1a:
                    3a:06:d8:a8:fb:9e:32:a9:b9:43:27:92:37:97:f6:
                    77:51:49:a4:ee:c9:e0:9c:bc:70:5f:f7:14:6b:17:
                    f4:ca:2b:df:4a:72:67:ec:12:d9:8e:59:f7:e4:2d:
                    3c:71:f4:72:3f:9a:ae:23:0f:e2:cb:27:67:00:cd:
                    be:55:81:12:a8:d2:78:8a:3b:1b:1a:70:d3:e8:8c:
                    63:a3:5d:15:b5:84:11:63:a9:42:e1:70:ef:8d:c6:
                    26:3d:18:83:7c:bf:84:4f:89:02:92:52:74:43:c9:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:08:F0:74:AE:7A:D0:92:C4:0E:60:05:7E:27:D9:4C:10:85:BF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/d0e0f4cc-d7b0-3133-ba73-50a3162092fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl

            X509v3 Authority Key Identifier:
                keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:42:1b:73:92:5d:f6:a3:22:6b:fd:76:66:34:98:c5:a5:
         ce:25:90:a9:a7:db:e3:36:ef:51:15:d4:b1:4a:05:c3:10:b7:
         19:25:8a:d4:f0:fd:d4:8f:62:1f:46:72:06:d3:6f:59:0e:af:
         45:bb:fa:81:8c:2e:47:97:f8:f3:46:2b:f2:3d:08:90:dc:d5:
         13:ac:76:65:9e:74:89:71:44:a7:5a:51:2a:eb:c1:8d:ab:18:
         38:a1:5a:1e:bf:c0:ab:af:21:dc:d9:15:58:cf:f2:3d:48:1f:
         89:0e:49:6b:3a:d8:88:b6:df:25:43:e6:6d:27:b0:86:52:96:
         4b:3d:e7:02:a4:ea:cf:07:f5:b4:d3:d7:73:d3:34:60:1d:2f:
         26:01:2e:78:83:15:37:5c:52:70:54:fd:53:11:bc:25:5f:2e:
         9f:b8:ea:50:18:c4:16:20:42:2b:9a:c6:ec:ab:80:91:67:41:
         30:49:b5:c9:ab:a4:6e:dc:37:77:81:ca:e5:ae:0d:17:ea:56:
         16:55:3f:c6:c9:f4:af:33:c4:f8:a9:bd:90:e8:13:76:52:64:
         d6:84:0c:92:3f:17:08:f4:24:8e:7a:b6:b7:ec:09:79:70:d6:
         f7:f1:a1:b1:11:72:79:07:6b:d0:b4:cd:70:7d:74:85:a9:62:
         f9:74:27:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGHajr6XJ03WTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZGQ0ZDYtMDZkYS00NjAyLTkwNzEtYWVlOTI5Njhm
MzFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDk1YmJhMTktY2YxNS00MmU5LTgwM2YtMzU0NDQxMDU5ZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGtOAKDpf8ljxWq1jURT+Fzuu+zEB5nOa1vI
ikvgGG4MSEglEPIchFG5ECQ7Gs9oKhrlIwUjYOSlrs9eZaEA0FCy0ppRwnjKiDy4
EpXi7s9PEgnqUJJ0U3nmdsDiqCKToQAzTfAJRzWNgpbOfnrYTbyOE6Jn2Z928s54
yzsxyP7t00APqRYh7fsYY4ApCWbiNvcEyho6Btio+54yqblDJ5I3l/Z3UUmk7sng
nLxwX/cUaxf0yivfSnJn7BLZjln35C08cfRyP5quIw/iyydnAM2+VYESqNJ4ijsb
GnDT6Ixjo10VtYQRY6lC4XDvjcYmPRiDfL+ET4kCklJ0Q8lS/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKYI8HSuetCSxA5gBX4n2UwQhb9vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85YjJk
ZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5Mjk2OGYzMWEvZDBlMGY0Y2MtZDdiMC0z
MTMzLWJhNzMtNTBhMzE2MjA5MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWIyZGQ0ZDYtMDZkYS00NjAyLTkw
NzEtYWVlOTI5NjhmMzFhLzliMmRkNGQ2LTA2ZGEtNDYwMi05MDcxLWFlZTkyOTY4
ZjMxYS5jcmwwHwYDVR0jBBgwFoAUhttI55ulqKaIWlTVYBPNgnRyiYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85YjJkZDRkNi0wNmRhLTQ2MDItOTA3MS1hZWU5
Mjk2OGYzMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPdQhtzkl32oyJr/XZmNJjFpc4lkKmn2+M271EV1LFKBcMQtxklitTw
/dSPYh9GcgbTb1kOr0W7+oGMLkeX+PNGK/I9CJDc1ROsdmWedIlxRKdaUSrrwY2r
GDihWh6/wKuvIdzZFVjP8j1IH4kOSWs62Ii23yVD5m0nsIZSlks95wKk6s8H9bTT
13PTNGAdLyYBLniDFTdcUnBU/VMRvCVfLp+46lAYxBYgQiuaxuyrgJFnQTBJtcmr
pG7cN3eByuWuDRfqVhZVP8bJ9K8zxPipvZDoE3ZSZNaEDJI/Fwj0JI56trfsCXlw
1vfxobERcnkHa9C0zXB9dIWpYvl0J8k=
-----END CERTIFICATE-----
Generated at Tue Aug 25 10:18:15 2026 by rpki-client