Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
File:                     c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json)
Hash identifier:          FE/SkD0s8Nish054pww1GZ9jF4P4i179KqjCkLVznKE=
Subject key identifier:   4A:88:57:D5:56:BC:1B:87:39:FC:52:22:BF:D6:ED:B4:F2:9E:ED:A2
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584F57E7D4EBB146B68BC64C4640
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
Signing time:             Wed 30 Sep 2026 05:17:53 +0000
ROA not before:           Wed 30 Sep 2026 05:17:53 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11611
IP address blocks:        23.158.112.0/24 maxlen: 24
                          2602:fd61::/36 maxlen: 36
                          2602:fd61:1000::/36 maxlen: 36
                          2602:fd61:2000::/36 maxlen: 36
                          2602:fd61:3000::/36 maxlen: 36
                          2602:fd61:4000::/36 maxlen: 36
                          2602:fd61:5000::/36 maxlen: 36
                          2602:fd61:6000::/36 maxlen: 36
                          2602:fd61:7000::/36 maxlen: 36
                          2602:fd61:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:e7:d4:eb:b1:46:b6:8b:c6:4c:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Sep 30 05:17:53 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6c3a49f-cada-4128-828b-182722566493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:e3:1c:f2:d7:e2:62:5a:77:06:f4:ec:7b:
                    32:a8:8d:0b:f3:73:ce:0e:f6:21:7a:d5:26:5e:ae:
                    68:1a:6b:e8:42:2c:98:13:86:e2:9b:48:81:d0:80:
                    49:b9:a7:92:92:c6:c4:f3:ce:2e:67:6b:1e:f1:ec:
                    b1:28:e8:4e:5e:5f:9d:47:29:6a:85:5c:fb:ab:a2:
                    d7:fa:58:34:55:c4:9c:83:32:81:ff:36:90:e2:5a:
                    3e:2b:a3:83:d1:65:35:f0:6b:7e:2f:06:52:74:e8:
                    24:e0:f4:68:28:e1:92:d6:18:22:cb:4c:46:2d:06:
                    62:62:13:f3:7d:37:30:f2:63:52:c1:7c:59:e8:94:
                    2a:41:13:f8:19:57:94:81:e0:f0:5e:f7:3b:96:95:
                    d5:0e:99:73:79:18:ed:2a:88:86:a4:86:fc:d1:5a:
                    19:31:b7:cb:ea:4b:fd:7c:91:3d:6a:9e:61:62:96:
                    33:aa:de:61:42:2b:d8:be:de:ab:6d:b7:e8:33:42:
                    c8:dc:d2:01:cd:21:a1:88:24:f4:3c:34:e3:de:99:
                    1d:0d:17:46:1a:76:92:38:15:ea:f9:d3:de:23:c5:
                    06:72:00:c9:bb:e6:c3:70:c3:1c:a8:ec:cf:8e:42:
                    f9:b3:fa:54:9b:d3:93:1a:c7:f3:19:ee:73:52:65:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:57:D5:56:BC:1B:87:39:FC:52:22:BF:D6:ED:B4:F2:9E:ED:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.112.0/24
                IPv6:
                  2602:fd61::-2602:fd61:8fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:c3:17:23:b5:f0:2e:38:04:ea:81:53:61:f4:5e:66:e9:
         9a:79:b5:39:22:30:8a:77:91:8d:5f:0f:99:64:03:c1:c5:b8:
         69:12:7c:d7:0a:42:84:69:16:dc:0e:33:55:0a:16:84:73:43:
         1a:28:2f:0e:f7:c6:23:75:73:d5:7e:3c:0e:0e:70:a2:4b:d9:
         40:b3:a0:cb:e8:75:e4:42:a2:8c:76:6c:a2:96:53:0a:e9:62:
         ec:b3:90:21:f9:58:bb:52:d4:0f:2b:59:67:bb:9b:91:39:f0:
         4b:62:bc:90:d8:50:53:16:24:6c:7f:b5:76:0c:a0:88:2b:9a:
         bb:f8:aa:3e:75:12:62:bf:72:2e:d9:91:7b:3f:05:f8:96:ae:
         e1:a0:ab:2b:2d:34:88:4e:a3:68:40:77:07:ec:c8:f3:2e:af:
         3a:34:45:32:45:11:a0:08:91:fa:96:cd:86:91:e2:ac:31:00:
         11:aa:2a:21:6b:c7:82:0f:20:ba:fc:d2:2b:76:b9:96:e4:1b:
         f6:ec:52:1f:cd:c6:2e:e3:2f:7b:01:24:8e:89:5c:a1:ff:d9:
         7a:cc:49:70:c9:a6:3f:19:6b:ec:55:4f:e7:45:84:55:cf:1c:
         e8:62:88:ff:03:0f:aa:eb:97:37:04:68:51:e9:90:b0:77:08:
         76:b0:60:8f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9X59TrsUa2i8ZMRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBiMWI2MmUtOWFiYS00NzMzLTlkOTYtOWI3YzU5ZGQ5
NTY5MB4XDTI2MDkzMDA1MTc1M1oXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjZjM2E0OWYtY2FkYS00MTI4LTgyOGItMTgyNzIyNTY2NDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWHjHPLX4mJadwb07HsyqI0L83PODvYhetUm
Xq5oGmvoQiyYE4bim0iB0IBJuaeSksbE884uZ2se8eyxKOhOXl+dRylqhVz7q6LX
+lg0VcScgzKB/zaQ4lo+K6OD0WU18Gt+LwZSdOgk4PRoKOGS1hgiy0xGLQZiYhPz
fTcw8mNSwXxZ6JQqQRP4GVeUgeDwXvc7lpXVDplzeRjtKoiGpIb80VoZMbfL6kv9
fJE9ap5hYpYzqt5hQivYvt6rbbfoM0LI3NIBzSGhiCT0PDTj3pkdDRdGGnaSOBXq
+dPeI8UGcgDJu+bDcMMcqOzPjkL5s/pUm9OTGsfzGe5zUmXLKwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFEqIV9VWvBuHOfxSIr/W7bTynu2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMGIx
YjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlkZDk1NjkvYzAwZWYxNTUtODVjNC0z
NmZhLTk4YjEtZTEyZmU5NjI1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzBiMWI2MmUtOWFiYS00NzMzLTlk
OTYtOWI3YzU5ZGQ5NTY5L2MwYjFiNjJlLTlhYmEtNDczMy05ZDk2LTliN2M1OWRk
OTU2OS5jcmwwHwYDVR0jBBgwFoAU2IOrpvrW+CVSJ/cFIGamIHys7YMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05Yjdj
NTlkZDk1NjkuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQAF55wMBcE
AgACMBEwDwMFACYC/WEDBgQmAv1hgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBu6MMXI7XwLjgE6oFTYfRe
ZumaebU5IjCKd5GNXw+ZZAPBxbhpEnzXCkKEaRbcDjNVChaEc0MaKC8O98YjdXPV
fjwODnCiS9lAs6DL6HXkQqKMdmyillMK6WLss5Ah+Vi7UtQPK1lnu5uROfBLYryQ
2FBTFiRsf7V2DKCIK5q7+Ko+dRJiv3Iu2ZF7PwX4lq7hoKsrLTSITqNoQHcH7Mjz
Lq86NEUyRRGgCJH6ls2GkeKsMQARqioha8eCDyC6/NIrdrmW5Bv27FIfzcYu4y97
ASSOiVyh/9l6zElwyaY/GWvsVU/nRYRVzxzoYoj/Aw+q65c3BGhR6ZCwdwh2sGCP
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:13 2026 by rpki-client