Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
File:                     569d1a29-a9c7-33f8-beae-2aece4ea2526.roa (raw, json)
Hash identifier:          wN2OIRQci1sPfikW2e/2UXl8w7BwOfMISMei5WXEUD0=
Subject key identifier:   7D:3E:69:40:CC:FB:B1:04:D2:F3:C8:2C:AB:FB:64:78:A1:F5:6D:E5
Certificate issuer:       /CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
Certificate serial:       010D0C9F4328584EE0C2147E13BA147FD96F1CF0
Authority key identifier: FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     46664
IP address blocks:        23.172.112.0/24 maxlen: 24
                          23.172.113.0/24 maxlen: 24
                          23.172.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:14:7e:13:ba:14:7f:d9:6f:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8de71a-67d9-43ce-bbb9-c7974f6f8b23
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=0b448354-ffe7-444f-aa3b-207747578fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:1a:ac:67:98:93:d7:96:2b:fa:76:d1:74:
                    3c:25:be:31:4a:03:45:cc:b3:8f:28:e3:e8:1e:04:
                    bf:8d:85:91:a9:32:9e:d6:00:c8:d1:7a:e7:e3:5a:
                    8b:46:98:85:bc:83:ec:3f:43:e9:09:6f:e8:6e:e8:
                    15:9f:2f:ed:28:51:7b:d8:43:f1:14:15:43:3a:b2:
                    37:cf:51:79:45:5a:d2:3d:4a:9f:92:8b:3c:3b:bd:
                    9f:8c:ae:c1:bc:f3:70:c7:91:18:1f:e8:3a:16:84:
                    bc:bc:a1:38:2c:e9:c4:52:89:5c:d8:84:0f:e2:fd:
                    09:a6:ce:ee:2c:0d:40:02:ef:4a:d0:c1:f9:be:af:
                    c9:20:7f:4e:44:50:c9:0f:a4:87:8c:e5:f2:5a:65:
                    85:1b:83:75:44:59:97:32:97:c2:15:d4:08:27:c4:
                    ad:07:b7:27:48:81:e8:66:86:35:14:48:9a:7a:53:
                    9c:2a:84:c6:b4:16:c1:0f:21:fd:5a:bf:99:1d:dd:
                    e7:49:97:38:b8:f2:23:ea:77:ab:50:1e:65:2d:26:
                    b4:b4:c2:bf:a9:4c:8d:14:17:e6:63:41:3c:31:89:
                    4e:16:52:c0:7a:53:3f:dc:47:f5:ee:29:90:b7:ea:
                    f9:c0:4f:8a:95:d8:5e:11:9a:37:59:00:9f:a5:ba:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3E:69:40:CC:FB:B1:04:D2:F3:C8:2C:AB:FB:64:78:A1:F5:6D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/569d1a29-a9c7-33f8-beae-2aece4ea2526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.crl

            X509v3 Authority Key Identifier:
                keyid:FE:BC:48:C5:C5:67:DF:6F:50:F2:F7:3B:5C:CD:4D:90:27:8B:E7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed8de71a-67d9-43ce-bbb9-c7974f6f8b23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.112.0-23.172.114.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:65:63:36:b8:c7:55:82:4c:f0:3f:62:4c:bb:5f:14:86:8c:
         ca:7e:9f:42:76:5b:5d:ca:ed:bb:df:d5:59:f0:55:29:32:99:
         45:cd:36:ad:67:e5:04:94:b5:a3:66:dd:77:a1:24:2f:aa:84:
         3d:e7:f0:87:d4:8e:a4:52:82:cc:dc:b7:b1:ff:17:79:40:65:
         da:49:7b:34:21:37:d0:6f:22:17:a6:45:2c:6a:2b:d6:ac:54:
         b0:10:98:e9:57:ff:5a:a8:95:01:c5:de:97:4b:a7:14:35:16:
         66:a5:3a:94:d2:db:d0:24:6f:79:3f:7c:b1:0d:dd:d4:49:8c:
         90:f5:a3:60:cc:a4:32:df:41:80:97:01:54:f5:ef:e2:6f:c7:
         33:e5:73:47:21:bb:11:af:a0:92:22:31:3d:43:e7:dd:ef:c3:
         d9:7f:66:bb:fc:0b:fb:85:2d:fd:db:e4:1e:40:cc:5a:c9:b3:
         1f:9a:c8:a1:45:7b:fc:94:30:17:70:8e:10:20:0c:40:7c:07:
         1b:8b:e2:bb:69:01:77:ea:56:ff:1d:71:32:04:85:67:f8:c9:
         7a:7e:48:2f:64:2a:f3:7c:96:8b:d3:fa:91:5a:89:13:e5:a8:
         d7:a4:15:15:0f:87:e8:57:ee:65:73:e6:a4:14:fd:42:50:64:
         6b:f6:3e:90
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7gwhR+E7oUf9lvHPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4ZGU3MWEtNjdkOS00M2NlLWJiYjktYzc5NzRmNmY4
YjIzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
MGI0NDgzNTQtZmZlNy00NDRmLWFhM2ItMjA3NzQ3NTc4ZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKEarGeYk9eWK/p20XQ8Jb4xSgNFzLOPKOPo
HgS/jYWRqTKe1gDI0Xrn41qLRpiFvIPsP0PpCW/obugVny/tKFF72EPxFBVDOrI3
z1F5RVrSPUqfkos8O72fjK7BvPNwx5EYH+g6FoS8vKE4LOnEUolc2IQP4v0Jps7u
LA1AAu9K0MH5vq/JIH9ORFDJD6SHjOXyWmWFG4N1RFmXMpfCFdQIJ8StB7cnSIHo
ZoY1FEiaelOcKoTGtBbBDyH9Wr+ZHd3nSZc4uPIj6nerUB5lLSa0tMK/qUyNFBfm
Y0E8MYlOFlLAelM/3Ef17imQt+r5wE+KldheEZo3WQCfpbq3wQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH0+aUDM+7EE0vPILKv7ZHih9W3lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDhk
ZTcxYS02N2Q5LTQzY2UtYmJiOS1jNzk3NGY2ZjhiMjMvNTY5ZDFhMjktYTljNy0z
M2Y4LWJlYWUtMmFlY2U0ZWEyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ4ZGU3MWEtNjdkOS00M2NlLWJi
YjktYzc5NzRmNmY4YjIzL2VkOGRlNzFhLTY3ZDktNDNjZS1iYmI5LWM3OTc0ZjZm
OGIyMy5jcmwwHwYDVR0jBBgwFoAU/rxIxcVn329Q8vc7XM1NkCeL524wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDhkZTcxYS02N2Q5LTQzY2UtYmJiOS1jNzk3
NGY2ZjhiMjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQXrHAD
BAAXrHIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAmGVjNrjHVYJM8D9iTLtfFIaMyn6fQnZbXcrtu9/VWfBV
KTKZRc02rWflBJS1o2bdd6EkL6qEPefwh9SOpFKCzNy3sf8XeUBl2kl7NCE30G8i
F6ZFLGor1qxUsBCY6Vf/WqiVAcXel0unFDUWZqU6lNLb0CRveT98sQ3d1EmMkPWj
YMykMt9BgJcBVPXv4m/HM+VzRyG7Ea+gkiIxPUPn3e/D2X9mu/wL+4Ut/dvkHkDM
WsmzH5rIoUV7/JQwF3COECAMQHwHG4viu2kBd+pW/x1xMgSFZ/jJen5IL2Qq83yW
i9P6kVqJE+Wo16QVFQ+H6FfuZXPmpBT9QlBka/Y+kA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:34:23 2026 by rpki-client