Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/02038977-9df2-3604-9b5d-0d00bf8a3333.roa
File:                     02038977-9df2-3604-9b5d-0d00bf8a3333.roa (raw, json)
Hash identifier:          gL0RkpljkMXzJPNN5gfOxUrAt2j5xTWgIa9Uyprtl3s=
Subject key identifier:   FC:3D:6F:9A:E1:5D:85:43:9E:02:80:E8:B4:74:99:87:8C:DC:CC:30
Certificate issuer:       /CN=93689a2f-96ac-4e15-bbd2-67f64dee5f6b
Certificate serial:       010D0C9F4328584E4C54B33F0DA13140D43C38D0
Authority key identifier: 54:24:89:8B:B6:22:71:82:BA:B6:5C:7E:DE:2E:92:CC:08:5E:8F:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/02038977-9df2-3604-9b5d-0d00bf8a3333.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     55201
IP address blocks:        23.156.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:b3:3f:0d:a1:31:40:d4:3c:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93689a2f-96ac-4e15-bbd2-67f64dee5f6b
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=bdd3df58-7e33-4518-9b10-e5dcada9bea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:ae:e4:f0:46:bc:58:56:bb:99:cd:a6:cd:
                    fc:6e:5f:41:c3:a4:62:4c:31:ca:90:27:09:fc:57:
                    2e:f9:d9:e5:4d:2a:ee:e8:19:3e:fb:f2:e2:45:8b:
                    95:35:8d:df:c2:cd:83:6b:9f:64:df:c4:c8:08:62:
                    e9:52:86:54:6d:43:4f:83:ff:f0:ba:1d:0f:92:fc:
                    1e:fa:59:11:b4:9f:33:83:59:59:73:83:7a:fd:0f:
                    27:7f:01:db:56:e1:2d:30:06:fe:28:87:38:ba:fc:
                    04:cd:4a:9e:16:71:3b:97:12:a6:e2:d1:34:7b:d8:
                    ab:04:8d:ff:83:11:de:60:52:a9:22:ab:93:8d:d2:
                    e7:92:25:83:2c:2c:10:25:e2:f2:6c:66:82:19:3a:
                    fc:0a:87:04:1d:78:ff:08:d7:58:a8:3e:5f:9d:cd:
                    ca:7f:a1:d5:4f:e6:19:55:0e:a8:1f:0b:8c:b4:61:
                    fc:4c:03:90:75:90:df:27:87:22:bf:a1:cd:e6:bc:
                    d3:9b:bc:8b:d9:0a:8c:dc:ac:61:b4:44:6e:69:73:
                    0f:e6:02:2c:a9:32:c9:35:e5:c1:ed:64:92:f7:63:
                    ca:91:dc:ef:c8:ca:6d:8f:c8:ca:95:a3:84:cc:25:
                    18:43:29:69:b9:65:ef:03:14:1e:6b:70:b0:e4:1e:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:6F:9A:E1:5D:85:43:9E:02:80:E8:B4:74:99:87:8C:DC:CC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/02038977-9df2-3604-9b5d-0d00bf8a3333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.crl

            X509v3 Authority Key Identifier:
                keyid:54:24:89:8B:B6:22:71:82:BA:B6:5C:7E:DE:2E:92:CC:08:5E:8F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:13:fa:68:73:c0:67:4b:86:3d:9a:f9:9e:20:11:72:57:
         4d:31:a9:94:50:a6:17:fc:8b:21:e0:7b:fa:87:34:ee:3b:58:
         ee:b4:24:9c:ae:be:0f:20:fe:80:2f:e2:9d:4b:38:bb:a4:97:
         72:34:60:8f:97:d9:98:ec:9b:7c:b1:6f:43:72:46:50:15:9f:
         34:30:2f:d0:be:49:5c:d7:f4:2a:61:6c:18:97:8b:33:20:59:
         fc:93:aa:ea:bd:fb:ec:5e:52:7b:7f:89:0a:b4:a1:1f:e3:29:
         bb:ab:71:c6:2d:b9:a3:8a:50:66:1e:16:33:eb:21:f4:38:f7:
         cf:74:0c:08:1a:de:85:62:14:34:d8:93:19:52:c0:fd:11:66:
         f6:c1:9b:87:a7:f6:65:35:cb:9d:c8:39:b2:50:7d:aa:66:a4:
         e7:7f:53:76:da:b7:ea:65:25:7a:4d:19:ea:81:dc:36:7b:65:
         2c:cd:41:e1:a7:58:a6:e6:76:5e:06:9b:44:a0:ca:5c:8f:91:
         ec:3c:f0:cb:94:a0:7b:16:d2:d8:e2:e0:06:3b:f4:91:40:1c:
         26:a2:8e:84:05:11:25:ef:27:de:79:7b:7b:d1:66:c1:87:79:
         ea:42:26:36:ed:7b:cf:96:7b:c1:5e:29:18:3f:83:cc:7c:97:
         86:ff:87:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVLM/DaExQNQ8ONAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM2ODlhMmYtOTZhYy00ZTE1LWJiZDItNjdmNjRkZWU1
ZjZiMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
YmRkM2RmNTgtN2UzMy00NTE4LTliMTAtZTVkY2FkYTliZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAGu5PBGvFhWu5nNps38bl9Bw6RiTDHKkCcJ
/Fcu+dnlTSru6Bk++/LiRYuVNY3fws2Da59k38TICGLpUoZUbUNPg//wuh0Pkvwe
+lkRtJ8zg1lZc4N6/Q8nfwHbVuEtMAb+KIc4uvwEzUqeFnE7lxKm4tE0e9irBI3/
gxHeYFKpIquTjdLnkiWDLCwQJeLybGaCGTr8CocEHXj/CNdYqD5fnc3Kf6HVT+YZ
VQ6oHwuMtGH8TAOQdZDfJ4civ6HN5rzTm7yL2QqM3KxhtERuaXMP5gIsqTLJNeXB
7WSS92PKkdzvyMptj8jKlaOEzCUYQylpuWXvAxQea3Cw5B7pOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPw9b5rhXYVDngKA6LR0mYeM3MwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85MzY4
OWEyZi05NmFjLTRlMTUtYmJkMi02N2Y2NGRlZTVmNmIvMDIwMzg5NzctOWRmMi0z
NjA0LTliNWQtMGQwMGJmOGEzMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTM2ODlhMmYtOTZhYy00ZTE1LWJi
ZDItNjdmNjRkZWU1ZjZiLzkzNjg5YTJmLTk2YWMtNGUxNS1iYmQyLTY3ZjY0ZGVl
NWY2Yi5jcmwwHwYDVR0jBBgwFoAUVCSJi7YicYK6tlx+3i6SzAhej6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS85MzY4OWEyZi05NmFjLTRlMTUtYmJkMi02N2Y2
NGRlZTVmNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5xoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe3E/poc8BnS4Y9mvmeIBFyV00xqZRQphf8iyHge/qHNO47WO60JJyu
vg8g/oAv4p1LOLukl3I0YI+X2Zjsm3yxb0NyRlAVnzQwL9C+SVzX9CphbBiXizMg
WfyTquq9++xeUnt/iQq0oR/jKburccYtuaOKUGYeFjPrIfQ49890DAga3oViFDTY
kxlSwP0RZvbBm4en9mU1y53IObJQfapmpOd/U3bat+plJXpNGeqB3DZ7ZSzNQeGn
WKbmdl4Gm0SgylyPkew88MuUoHsW0tji4AY79JFAHCaijoQFESXvJ955e3vRZsGH
eepCJjbte8+We8FeKRg/g8x8l4b/hxM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:07:11 2026 by rpki-client