Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa
File:                     b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa (raw, json)
Hash identifier:          ENDZ02ijeUh+eYCaFMiCGYRK0Xdt7b/DeXaqq4SvgD0=
Subject key identifier:   07:E5:8C:BE:13:8F:AC:24:07:65:FC:D3:B4:2B:07:E5:B2:FE:6C:6F
Certificate issuer:       /CN=52b7befd-7af4-4967-b841-7b95a02b0967
Certificate serial:       010D0C9F4328584E3B94686DCB0EED892BFCE540
Authority key identifier: 83:74:47:C0:F1:D0:9C:4D:37:D7:AA:A5:90:67:3F:7B:7F:2B:A9:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     402344
IP address blocks:        23.155.108.0/24 maxlen: 24
                          2605:8e80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:68:6d:cb:0e:ed:89:2b:fc:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b7befd-7af4-4967-b841-7b95a02b0967
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=3fd0993b-b272-4532-9860-594b34b9d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:97:23:68:15:d6:eb:b1:b8:e3:4b:09:56:
                    04:14:7f:f9:eb:94:9b:7a:33:d5:0d:cb:68:4f:64:
                    1c:b6:cf:bd:e7:93:a9:95:b7:28:19:45:74:dd:2d:
                    01:23:75:ce:95:35:5a:42:ca:73:7f:0c:cf:f0:27:
                    7d:d7:67:56:67:a2:b6:66:f1:14:66:51:70:95:a9:
                    44:77:d8:f6:43:a5:87:fa:41:bc:b5:c1:b9:14:0b:
                    59:5c:2c:b3:78:90:dd:73:ec:fe:85:4e:f3:ea:ed:
                    59:02:41:b0:a0:90:22:dc:59:ed:b1:18:e7:3d:c2:
                    0f:e0:1c:48:85:ff:64:b9:c4:49:98:01:97:60:cf:
                    0d:72:5f:96:7a:99:af:d4:b1:5f:93:04:2b:2f:9d:
                    c0:45:a5:58:4b:5c:c4:27:5f:2f:1a:c3:f9:55:6f:
                    0c:e9:b3:19:67:b6:b9:c6:e2:c8:80:8a:de:e0:36:
                    d5:62:ff:bb:02:42:a3:39:48:11:f3:ee:07:4b:1d:
                    43:0c:0b:8c:5b:9c:2d:da:8b:b7:1c:9f:c2:e6:29:
                    01:e2:46:8a:b7:35:95:43:9b:6b:6f:18:08:0f:2e:
                    bd:21:51:23:ca:d1:68:03:dc:ac:90:c9:03:da:be:
                    60:bc:d3:8d:48:dd:60:69:67:e5:b3:42:50:b4:2e:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:8C:BE:13:8F:AC:24:07:65:FC:D3:B4:2B:07:E5:B2:FE:6C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/b476e339-5f9d-3dd5-9e0f-5d0af9672293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967/52b7befd-7af4-4967-b841-7b95a02b0967.crl

            X509v3 Authority Key Identifier:
                keyid:83:74:47:C0:F1:D0:9C:4D:37:D7:AA:A5:90:67:3F:7B:7F:2B:A9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52b7befd-7af4-4967-b841-7b95a02b0967.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.108.0/24
                IPv6:
                  2605:8e80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:05:cb:65:87:97:5f:cc:9a:8d:92:77:20:1e:01:a3:90:
         06:de:a4:c5:8e:08:f2:93:28:60:f1:d9:6a:27:32:e0:2a:0f:
         ac:06:08:47:c3:dc:b6:f5:66:36:a9:cb:af:65:84:2f:fa:cd:
         80:a8:80:18:1e:d7:8a:df:48:4b:91:81:aa:e6:46:e6:17:47:
         21:4b:2d:53:77:d3:83:39:fa:86:1c:61:a5:38:74:5d:35:2e:
         4a:6f:cb:b6:ce:de:00:13:54:6b:d6:4a:a5:c2:08:75:c2:4a:
         27:77:b5:60:39:5c:72:25:05:8a:7a:02:d4:0c:c5:a0:6b:ce:
         ec:a0:30:4e:b9:83:73:d3:4e:b1:a1:f3:de:be:5f:57:b1:2b:
         49:08:e0:f3:9a:5a:02:15:80:cd:d8:c0:1f:02:8e:5d:4a:b3:
         d6:1b:97:59:c5:6d:a8:3c:d0:4d:76:e9:ad:fa:b6:b9:98:5d:
         38:b1:15:12:7f:2f:8b:a1:bd:94:e3:3a:b5:08:bf:6c:22:45:
         31:e5:a2:4e:9c:fe:3e:c3:63:6e:a3:22:32:0b:ca:06:d5:69:
         9b:22:90:f4:e8:fc:d5:ab:ce:39:59:60:b8:85:22:a6:f9:db:
         78:38:07:fe:9d:d5:28:39:1f:ad:2f:68:c6:2d:29:6a:d6:17:
         f1:8e:80:4f
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE47lGhtyw7tiSv85UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJiN2JlZmQtN2FmNC00OTY3LWI4NDEtN2I5NWEwMmIw
OTY3MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
M2ZkMDk5M2ItYjI3Mi00NTMyLTk4NjAtNTk0YjM0YjlkNTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+XI2gV1uuxuONLCVYEFH/565SbejPVDcto
T2Qcts+955OplbcoGUV03S0BI3XOlTVaQspzfwzP8Cd912dWZ6K2ZvEUZlFwlalE
d9j2Q6WH+kG8tcG5FAtZXCyzeJDdc+z+hU7z6u1ZAkGwoJAi3FntsRjnPcIP4BxI
hf9kucRJmAGXYM8Ncl+Wepmv1LFfkwQrL53ARaVYS1zEJ18vGsP5VW8M6bMZZ7a5
xuLIgIre4DbVYv+7AkKjOUgR8+4HSx1DDAuMW5wt2ou3HJ/C5ikB4kaKtzWVQ5tr
bxgIDy69IVEjytFoA9yskMkD2r5gvNONSN1gaWfls0JQtC4IoQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFAfljL4Tj6wkB2X807QrB+Wy/mxvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmI3
YmVmZC03YWY0LTQ5NjctYjg0MS03Yjk1YTAyYjA5NjcvYjQ3NmUzMzktNWY5ZC0z
ZGQ1LTllMGYtNWQwYWY5NjcyMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTJiN2JlZmQtN2FmNC00OTY3LWI4
NDEtN2I5NWEwMmIwOTY3LzUyYjdiZWZkLTdhZjQtNDk2Ny1iODQxLTdiOTVhMDJi
MDk2Ny5jcmwwHwYDVR0jBBgwFoAUg3RHwPHQnE0316qlkGc/e38rqQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MmI3YmVmZC03YWY0LTQ5NjctYjg0MS03Yjk1
YTAyYjA5NjcuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5tsMA0E
AgACMAcDBQAmBY6AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFcNBctlh5dfzJqNkncgHgGjkAbepMWOCPKT
KGDx2WonMuAqD6wGCEfD3Lb1Zjapy69lhC/6zYCogBge14rfSEuRgarmRuYXRyFL
LVN304M5+oYcYaU4dF01Lkpvy7bO3gATVGvWSqXCCHXCSid3tWA5XHIlBYp6AtQM
xaBrzuygME65g3PTTrGh896+X1exK0kI4POaWgIVgM3YwB8Cjl1Ks9Ybl1nFbag8
0E126a36trmYXTixFRJ/L4uhvZTjOrUIv2wiRTHlok6c/j7DY26jIjILygbVaZsi
kPTo/NWrzjlZYLiFIqb523g4B/6d1Sg5H60vaMYtKWrWF/GOgE8=
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:19:38 2026 by rpki-client