Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa
File:                     b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa (raw, json)
Hash identifier:          xsyHoYYQCAUjd5ZMwSuQsEe60SRHdlmDBV5e7+/fPtc=
Subject key identifier:   94:83:15:3A:CC:8A:64:CE:A5:9D:44:E0:B8:E7:5A:48:96:4F:66:D6
Certificate issuer:       /CN=52b7befd-7af4-4967-b841-7b95a02b0967
Certificate serial:       010D0C9F4328584D5AF78EE3ABA3C2C9BBA20080
Authority key identifier: 83:74:47:C0:F1:D0:9C:4D:37:D7:AA:A5:90:67:3F:7B:7F:2B:A9:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa
Signing time:             Tue 31 Mar 2026 22:03:08 +0000
ROA not before:           Tue 31 Mar 2026 22:03:08 +0000
ROA not after:            Mon 29 Jun 2026 22:03:08 +0000
asID:                     402344
IP address blocks:        23.155.108.0/24 maxlen: 24
                          2605:8e80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:f7:8e:e3:ab:a3:c2:c9:bb:a2:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b7befd-7af4-4967-b841-7b95a02b0967
        Validity
            Not Before: Mar 31 22:03:08 2026 GMT
            Not After : Jun 29 22:03:08 2026 GMT
        Subject: CN=0597f2d4-3c3a-470d-8ebe-9220e982720c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:b6:05:8c:0c:23:13:fd:5b:d0:41:05:1a:
                    56:ba:8c:80:37:f1:a4:26:7c:0a:14:5d:b0:12:3f:
                    94:84:b9:99:8e:ad:df:e0:75:bb:32:a8:e8:90:67:
                    78:1a:25:60:36:f6:7f:11:f8:e4:b0:3e:25:96:dd:
                    41:2e:ac:d4:b9:85:51:a8:27:bf:85:86:b3:2e:a7:
                    f8:5b:92:04:bb:7f:47:03:90:4f:ef:48:f0:54:7d:
                    a1:e0:9c:ce:6d:d2:40:b1:c4:a8:9d:2c:15:05:7f:
                    6c:df:06:37:ae:43:dd:f5:6f:0c:82:dc:b9:ee:96:
                    0d:96:5d:72:3e:60:ca:39:df:a4:9c:9c:d9:24:df:
                    cf:f2:ae:e4:9b:d2:19:d5:62:f6:18:b0:bc:d5:8e:
                    29:ea:95:87:6b:0f:98:03:fc:ab:b9:7a:6a:b5:41:
                    90:30:f7:fa:7b:2f:14:83:3d:5d:dc:9f:31:79:a8:
                    6e:a9:0d:2d:e6:60:a7:19:fd:16:de:ce:3a:56:5c:
                    da:a6:72:de:c7:8a:07:cd:5c:71:8e:e8:5f:39:6c:
                    9c:13:77:21:b4:ff:fb:52:59:82:b5:cd:ca:2d:c6:
                    d2:fa:62:63:2e:e9:cb:19:b2:c2:a1:55:4d:bd:57:
                    b1:c8:9f:e7:cb:3e:5a:73:14:b9:01:cc:94:9c:9b:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:15:3A:CC:8A:64:CE:A5:9D:44:E0:B8:E7:5A:48:96:4F:66:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:47:C0:F1:D0:9C:4D:37:D7:AA:A5:90:67:3F:7B:7F:2B:A9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.108.0/24
                IPv6:
                  2605:8e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:f3:07:22:41:bd:57:60:9c:f4:22:95:d0:28:8a:a0:2c:
         70:92:3f:e0:b6:94:67:6f:5d:89:80:b4:46:9b:c1:d4:fa:e4:
         c6:b2:ae:0a:43:82:4b:15:17:bf:ea:a5:bc:bc:e4:9c:aa:c1:
         52:e6:e3:1c:fd:1e:44:12:99:bf:ba:d5:a9:18:2b:20:c6:e3:
         a9:84:eb:71:ac:84:6c:32:6e:4a:e3:13:83:8b:12:81:b9:0b:
         2c:b8:3a:fb:ec:7d:28:9a:7b:17:24:b3:eb:51:ef:9c:bd:05:
         56:d6:49:94:9e:9a:5d:ca:3a:ad:c5:84:aa:d2:8a:0a:96:22:
         59:47:0e:6e:da:13:92:fa:22:4d:01:10:ed:d8:f2:d5:85:9f:
         90:ec:f0:aa:bd:f8:e6:12:f9:8b:e8:be:6b:f5:7b:ae:60:cf:
         34:86:aa:e5:4f:84:f4:07:f1:57:8b:20:63:37:ef:34:f3:a5:
         f3:6e:31:d3:71:31:1e:f0:3f:8a:cc:3a:23:10:1a:46:db:0e:
         7f:e2:62:c5:01:f7:5a:ab:75:7a:42:16:8f:d1:a1:33:1c:23:
         4a:4a:e7:2e:9c:4e:c8:ea:e9:71:9b:40:6c:60:0f:b1:4e:b1:
         32:c8:2e:45:ee:4f:fe:82:31:c9:73:16:b5:5b:ad:64:5a:09:
         71:e4:cf:8c
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE1a947jq6PCybuiAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJiN2JlZmQtN2FmNC00OTY3LWI4NDEtN2I5NWEwMmIw
OTY3MB4XDTI2MDMzMTIyMDMwOFoXDTI2MDYyOTIyMDMwOFowLzEtMCsGA1UEAxMk
MDU5N2YyZDQtM2MzYS00NzBkLThlYmUtOTIyMGU5ODI3MjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEG2BYwMIxP9W9BBBRpWuoyAN/GkJnwKFF2w
Ej+UhLmZjq3f4HW7MqjokGd4GiVgNvZ/EfjksD4llt1BLqzUuYVRqCe/hYazLqf4
W5IEu39HA5BP70jwVH2h4JzObdJAscSonSwVBX9s3wY3rkPd9W8Mgty57pYNll1y
PmDKOd+knJzZJN/P8q7km9IZ1WL2GLC81Y4p6pWHaw+YA/yruXpqtUGQMPf6ey8U
gz1d3J8xeahuqQ0t5mCnGf0W3s46VlzapnLex4oHzVxxjuhfOWycE3chtP/7UlmC
tc3KLcbS+mJjLunLGbLCoVVNvVexyJ/nyz5acxS5AcyUnJsI/QIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFJSDFTrMimTOpZ1E4LjnWkiWT2bWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmI3
YmVmZC03YWY0LTQ5NjctYjg0MS03Yjk1YTAyYjA5NjcvYjQ3NmUzMzktNWY5ZC0z
ZGQ1LTllMGYtNWQwYWY5NjcyMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTJiN2JlZmQtN2FmNC00OTY3LWI4
NDEtN2I5NWEwMmIwOTY3LzUyYjdiZWZkLTdhZjQtNDk2Ny1iODQxLTdiOTVhMDJi
MDk2Ny5jcmwwHwYDVR0jBBgwFoAUg3RHwPHQnE0316qlkGc/e38rqQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmI3YmVmZC03YWY0LTQ5NjctYjg0MS03Yjk1
YTAyYjA5NjcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5tsMA0E
AgACMAcDBQAmBY6AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAF/58wciQb1XYJz0IpXQKIqgLHCSP+C2lGdv
XYmAtEabwdT65MayrgpDgksVF7/qpby85JyqwVLm4xz9HkQSmb+61akYKyDG46mE
63GshGwybkrjE4OLEoG5Cyy4OvvsfSiaexcks+tR75y9BVbWSZSeml3KOq3FhKrS
igqWIllHDm7aE5L6Ik0BEO3Y8tWFn5Ds8Kq9+OYS+Yvovmv1e65gzzSGquVPhPQH
8VeLIGM37zTzpfNuMdNxMR7wP4rMOiMQGkbbDn/iYsUB91qrdXpCFo/RoTMcI0pK
5y6cTsjq6XGbQGxgD7FOsTLILkXuT/6CMclzFrVbrWRaCXHkz4w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:42 2026 by rpki-client