Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa
File:                     0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa (raw, json)
Hash identifier:          L6oUCXJyxY2TGmGtjKqr+u5MDGG6MEtBT91dr2ciyUA=
Subject key identifier:   9B:94:2A:2D:89:14:9E:AE:D8:24:48:25:71:02:1B:77:65:DB:68:E5
Certificate issuer:       /CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
Certificate serial:       010D0C9F4328584EB2B1FC11BF775D25DE1053BC
Authority key identifier: 28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     401561
IP address blocks:        23.130.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fc:11:bf:77:5d:25:de:10:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d299820b-c679-4c6f-a4de-fc9b11c710bc
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=10ed28c4-a0c7-4020-b570-1063e1f449a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:7d:23:5f:3a:58:b8:5d:ef:c1:b7:8d:bc:
                    14:bd:5c:5b:80:da:fb:d3:d5:39:a6:03:4c:0f:d5:
                    c2:6f:55:50:f4:b6:4f:de:d9:af:dd:c8:f5:d6:24:
                    3c:24:df:78:ef:08:aa:d4:9e:5d:82:34:15:73:ca:
                    00:c4:3d:f8:74:aa:e2:a2:b3:1f:a9:48:13:42:87:
                    0d:60:10:59:6b:39:ed:24:76:16:0a:ba:cc:28:f0:
                    57:ed:98:c2:6e:d5:54:83:ae:79:66:1e:df:a2:82:
                    68:2b:a0:48:92:b0:9e:e2:36:3c:b8:12:59:b7:f7:
                    88:90:0d:c8:a8:e0:46:c3:2d:9a:83:af:d0:20:c8:
                    b3:ce:d3:3c:d6:cf:c7:17:8f:ec:dd:ef:f8:55:03:
                    7c:e6:41:ca:d6:36:75:f9:1a:04:11:58:c4:14:22:
                    d3:eb:14:f2:c0:69:4f:28:13:24:16:dd:b3:04:21:
                    5c:c6:77:cc:f5:43:40:55:09:3b:a5:ea:53:0b:4d:
                    05:38:3c:45:d2:05:c9:a7:58:2f:9f:4f:7f:3a:47:
                    2f:0f:57:24:1f:8b:18:8a:d6:e1:6e:8e:4a:61:4b:
                    ac:0e:a9:e0:08:cd:30:0e:8c:39:26:29:cc:ac:80:
                    db:3c:b5:1b:a2:e6:90:a7:a9:9b:34:11:bf:51:4e:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:94:2A:2D:89:14:9E:AE:D8:24:48:25:71:02:1B:77:65:DB:68:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/0e88bb26-c724-3bc1-823a-0cc9cb6a7df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc/d299820b-c679-4c6f-a4de-fc9b11c710bc.crl

            X509v3 Authority Key Identifier:
                keyid:28:CB:33:A6:97:89:2D:35:5E:91:19:C1:60:78:CE:7E:36:7D:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d299820b-c679-4c6f-a4de-fc9b11c710bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4b:db:84:90:92:2e:37:e0:6e:54:6c:50:3d:65:ff:9c:55:
         15:91:f2:80:87:5c:bd:e0:c8:24:95:87:d6:78:62:1e:1f:bd:
         1c:f6:86:f1:13:10:57:8c:27:72:47:6d:a9:33:3d:16:3f:87:
         cc:2b:51:de:1b:4b:25:b9:f1:cf:4f:b1:a7:28:48:5c:a9:63:
         f0:6e:cf:6e:48:1b:72:0c:73:00:55:6f:9f:d0:83:b1:10:9d:
         a1:92:47:f8:4e:77:17:65:41:2b:f0:d3:b2:e1:c7:bc:d1:90:
         57:d5:48:70:1a:9e:1b:e7:24:ae:20:6f:03:65:28:dd:6e:c5:
         16:12:d8:13:a8:c0:1c:6b:df:e4:34:d1:38:f7:b4:c8:47:0d:
         68:07:5c:24:b4:01:26:4e:bc:7f:a2:cb:32:ff:7f:d2:0f:65:
         21:6b:ff:c0:11:30:2f:23:4a:5c:2f:e1:2c:57:be:94:fe:24:
         a7:02:75:c4:22:be:2c:02:5b:6e:af:38:d5:8e:cd:f6:d7:82:
         f2:1e:9d:96:ef:43:73:1d:45:a2:24:ad:44:93:b9:d7:22:59:
         a0:48:76:f0:29:b8:f0:e5:7b:35:ef:20:28:2e:3e:74:ea:69:
         23:c6:81:11:bc:fa:21:3e:47:bf:c5:56:15:a7:ef:70:dc:23:
         9d:4a:a0:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfwRv3ddJd4QU7wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDI5OTgyMGItYzY3OS00YzZmLWE0ZGUtZmM5YjExYzcx
MGJjMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MTBlZDI4YzQtYTBjNy00MDIwLWI1NzAtMTA2M2UxZjQ0OWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojx9I186WLhd78G3jbwUvVxbgNr709U5pgNM
D9XCb1VQ9LZP3tmv3cj11iQ8JN947wiq1J5dgjQVc8oAxD34dKriorMfqUgTQocN
YBBZazntJHYWCrrMKPBX7ZjCbtVUg655Zh7fooJoK6BIkrCe4jY8uBJZt/eIkA3I
qOBGwy2ag6/QIMizztM81s/HF4/s3e/4VQN85kHK1jZ1+RoEEVjEFCLT6xTywGlP
KBMkFt2zBCFcxnfM9UNAVQk7pepTC00FODxF0gXJp1gvn09/OkcvD1ckH4sYitbh
bo5KYUusDqngCM0wDow5JinMrIDbPLUbouaQp6mbNBG/UU7rOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuUKi2JFJ6u2CRIJXECG3dl22jlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMjk5
ODIwYi1jNjc5LTRjNmYtYTRkZS1mYzliMTFjNzEwYmMvMGU4OGJiMjYtYzcyNC0z
YmMxLTgyM2EtMGNjOWNiNmE3ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDI5OTgyMGItYzY3OS00YzZmLWE0
ZGUtZmM5YjExYzcxMGJjL2QyOTk4MjBiLWM2NzktNGM2Zi1hNGRlLWZjOWIxMWM3
MTBiYy5jcmwwHwYDVR0jBBgwFoAUKMszppeJLTVekRnBYHjOfjZ9ZMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMjk5ODIwYi1jNjc5LTRjNmYtYTRkZS1mYzli
MTFjNzEwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4K8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhL24SQki434G5UbFA9Zf+cVRWR8oCHXL3gyCSVh9Z4Yh4fvRz2hvET
EFeMJ3JHbakzPRY/h8wrUd4bSyW58c9PsacoSFypY/Buz25IG3IMcwBVb5/Qg7EQ
naGSR/hOdxdlQSvw07Lhx7zRkFfVSHAanhvnJK4gbwNlKN1uxRYS2BOowBxr3+Q0
0Tj3tMhHDWgHXCS0ASZOvH+iyzL/f9IPZSFr/8ARMC8jSlwv4SxXvpT+JKcCdcQi
viwCW26vONWOzfbXgvIenZbvQ3MdRaIkrUSTudciWaBIdvApuPDlezXvICguPnTq
aSPGgRG8+iE+R7/FVhWn73DcI51KoHE=
-----END CERTIFICATE-----
Generated at Fri Sep 11 20:37:47 2026 by rpki-client