Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa
File:                     a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa (raw, json)
Hash identifier:          GT33UHSVa6/dyislByMneZRM43+AskQe30alyn057Pg=
Subject key identifier:   29:DB:4D:44:6D:B6:B7:20:AF:55:0F:57:C6:84:2C:47:F8:BD:3B:72
Certificate issuer:       /CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef
Certificate serial:       010D0C9F4328584E46BF2978245B8CC881E600C0
Authority key identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        23.134.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:29:78:24:5b:8c:c8:81:e6:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=89a66ddb-2881-4434-add8-17ad0b672908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:ca:ed:03:f9:aa:e5:26:98:80:e6:23:05:
                    15:05:6f:10:ac:f0:57:54:fd:89:b2:95:90:93:7d:
                    12:83:ad:6e:06:41:97:57:12:b7:e9:b9:d2:14:4a:
                    10:1b:50:ac:03:af:27:67:0d:64:46:b5:64:10:f3:
                    04:d0:83:33:e7:b1:8a:a9:44:99:9f:fd:41:7c:09:
                    d5:1d:96:d9:2e:4d:e2:98:9b:14:eb:4a:46:61:d8:
                    8f:d0:17:34:bb:d0:03:c6:63:c7:4a:34:5e:ff:a0:
                    65:d3:56:99:22:27:07:17:53:b6:e8:27:18:00:f1:
                    18:0f:fe:06:45:1e:42:76:97:66:4a:13:91:1f:b9:
                    51:ee:17:37:18:86:b4:7f:59:1f:49:cf:45:7e:78:
                    86:40:15:cd:e8:e4:01:12:1a:4b:09:2e:ec:22:2d:
                    31:1d:5b:25:79:b7:c4:64:e0:6f:fe:99:4a:52:9d:
                    ae:7d:a0:38:c8:e3:3d:ee:7f:21:73:6d:bb:1e:8f:
                    9c:c5:d0:23:b8:04:65:79:eb:a0:9d:9d:af:14:4d:
                    69:9f:de:64:5e:13:66:af:b7:6f:99:ef:ce:fd:b1:
                    18:38:d6:26:e7:a0:94:69:1c:80:63:59:59:4c:e3:
                    ce:f3:80:52:d4:bc:e2:bc:0e:36:62:74:5b:bd:3c:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:4D:44:6D:B6:B7:20:AF:55:0F:57:C6:84:2C:47:F8:BD:3B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:02:b3:a4:5e:32:cf:62:89:3a:67:96:a2:aa:b3:06:54:
         de:39:d4:0b:09:08:8a:49:01:a9:bb:96:ef:85:1c:5f:6d:7a:
         28:45:2b:de:85:e8:d8:18:b6:ba:3a:c0:fe:ec:44:1e:db:9a:
         09:03:ae:3d:3c:e3:55:c9:9d:29:34:62:21:45:54:39:a7:94:
         34:a6:52:e8:cb:48:91:c6:f3:67:f1:5c:a3:07:47:17:ec:9c:
         29:39:d4:80:fe:e4:29:54:09:36:e2:4a:e7:7a:13:ff:3c:70:
         cc:5b:f9:f3:8f:86:49:0a:fe:1b:6e:b0:9a:57:85:99:02:13:
         82:6a:d7:4a:9d:a3:25:4e:6a:ab:28:4e:85:07:60:63:3f:8d:
         48:19:7e:5b:16:fd:e0:c0:5b:4c:01:e0:dd:96:07:08:5a:47:
         67:d3:59:ef:dd:c7:95:ca:ec:cc:79:01:c1:cf:df:7f:5a:e2:
         b5:16:a1:16:fb:9c:5e:f7:f2:b4:60:6b:5d:2f:4b:6a:c6:cf:
         0e:59:bb:f4:25:ea:4d:36:2d:57:40:97:0b:2a:b6:7a:c7:f1:
         c2:3a:28:66:1c:3e:0d:13:2a:ec:2e:5f:26:04:39:78:00:fd:
         e6:a7:d1:d2:12:1f:b6:f9:12:48:59:79:81:e6:ef:95:30:44:
         43:43:0b:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Gvyl4JFuMyIHmAMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhNTM4YWUtZmEyNS00YTM4LWIxZjEtMzIwZTJlOWYx
NmVmMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk
ODlhNjZkZGItMjg4MS00NDM0LWFkZDgtMTdhZDBiNjcyOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3K7QP5quUmmIDmIwUVBW8QrPBXVP2JspWQ
k30Sg61uBkGXVxK36bnSFEoQG1CsA68nZw1kRrVkEPME0IMz57GKqUSZn/1BfAnV
HZbZLk3imJsU60pGYdiP0Bc0u9ADxmPHSjRe/6Bl01aZIicHF1O26CcYAPEYD/4G
RR5CdpdmShORH7lR7hc3GIa0f1kfSc9FfniGQBXN6OQBEhpLCS7sIi0xHVslebfE
ZOBv/plKUp2ufaA4yOM97n8hc227Ho+cxdAjuARleeugnZ2vFE1pn95kXhNmr7dv
me/O/bEYONYm56CUaRyAY1lZTOPO84BS1LzivA42YnRbvTxukwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnbTURttrcgr1UPV8aELEf4vTtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1
MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5ZjE2ZWYvYTM4NzFmNTYtZjI1ZS0z
NmZiLTk3Y2EtNmIwZGJhNTE2MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTZhNTM4YWUtZmEyNS00YTM4LWIx
ZjEtMzIwZTJlOWYxNmVmL2U2YTUzOGFlLWZhMjUtNGEzOC1iMWYxLTMyMGUyZTlm
MTZlZi5jcmwwHwYDVR0jBBgwFoAUtyyMyJ51ztdTHmylketyq4EsCrowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBl
MmU5ZjE2ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4YcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXmArOkXjLPYok6Z5aiqrMGVN451AsJCIpJAam7lu+FHF9teihFK96F
6NgYtro6wP7sRB7bmgkDrj0841XJnSk0YiFFVDmnlDSmUujLSJHG82fxXKMHRxfs
nCk51ID+5ClUCTbiSud6E/88cMxb+fOPhkkK/htusJpXhZkCE4Jq10qdoyVOaqso
ToUHYGM/jUgZflsW/eDAW0wB4N2WBwhaR2fTWe/dx5XK7Mx5AcHP339a4rUWoRb7
nF738rRga10vS2rGzw5Zu/Ql6k02LVdAlwsqtnrH8cI6KGYcPg0TKuwuXyYEOXgA
/ean0dISH7b5EkhZeYHm75UwRENDC3g=
-----END CERTIFICATE-----
Generated at Thu Jul 9 21:05:02 2026 by rpki-client