Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
File:                     3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa (raw, json)
Hash identifier:          yLEyYS9Grf7QtpJpJOUjnAxODyy7K2CYbJ2U3QGQ6gI=
Subject key identifier:   F9:D8:E8:22:6B:34:59:4D:3B:E5:79:1F:93:51:7F:78:87:70:62:73
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584D67DFBC08CA39638734977460
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     396982
IP address blocks:        23.227.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:bc:08:ca:39:63:87:34:97:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=a280e308-06bc-4e59-943f-6d4886881598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f5:48:17:82:24:e2:76:6e:4d:96:e2:90:d6:
                    bd:fa:ae:47:6e:de:33:4d:ba:9e:fb:e4:36:95:2d:
                    1d:39:67:b6:02:97:bc:71:c8:e2:56:20:f2:78:6f:
                    b8:68:9e:a4:f2:c2:85:49:47:27:3a:c2:3b:c6:d4:
                    4e:99:50:b2:37:a9:59:4f:26:81:b5:ab:41:94:6a:
                    9f:a9:22:c2:85:e5:c6:25:32:33:aa:27:34:11:29:
                    18:77:52:6d:85:9c:54:de:78:46:a8:f1:ef:58:08:
                    7f:a1:80:5c:4d:f2:34:13:dc:73:2a:b2:7c:0a:6e:
                    ea:f5:b3:1a:00:99:22:f6:b3:38:74:c4:6e:00:6f:
                    20:11:7c:0b:6b:46:7e:16:76:0e:06:6f:53:a9:c5:
                    da:a0:74:25:de:92:95:46:11:61:4e:c0:ec:e9:29:
                    3b:56:7a:8f:53:9d:3f:c7:42:10:9e:74:1f:2e:66:
                    2a:e2:54:70:41:18:7f:06:6d:9e:d6:46:c1:f3:99:
                    aa:ca:e5:56:b3:33:2a:e4:99:3c:24:33:25:5b:d9:
                    ef:e6:aa:47:7b:55:e7:64:38:ac:c5:65:95:b6:47:
                    46:6f:3f:b8:08:ed:ab:29:49:b7:96:6e:b7:fb:2d:
                    ab:3f:e4:38:0c:c8:82:ac:b3:83:a6:61:a0:20:37:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:E8:22:6B:34:59:4D:3B:E5:79:1F:93:51:7F:78:87:70:62:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/3dbc7752-ae3c-30e0-a1b3-8c0a432af74c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:56:8a:e5:08:da:04:46:69:50:7a:17:72:6c:a5:51:b1:
         04:c0:11:8b:c6:88:4e:d9:42:7d:92:97:d4:88:83:b0:0d:f3:
         93:a5:0e:8d:20:3c:9b:e3:60:8e:c2:78:c2:54:b9:4a:ad:70:
         34:59:0d:16:5b:e2:e5:92:75:cb:bd:07:7d:5d:ec:85:f6:0b:
         e9:08:c0:61:64:68:7e:6c:7d:32:58:3e:43:19:ac:74:82:97:
         01:13:27:dc:39:f9:86:e6:5d:08:84:ce:bd:1f:e1:2a:0e:f8:
         fc:49:04:cd:00:a3:55:85:69:e6:b0:e7:b3:01:34:89:ed:55:
         b3:f7:bd:db:f6:0c:36:89:a1:2a:cd:7e:0e:50:c2:3b:76:23:
         b9:fe:97:33:2d:55:64:08:16:db:df:be:a4:1a:de:dc:14:52:
         03:7c:80:9b:2c:cd:0f:7a:b7:84:96:bb:c6:2d:c9:c9:4d:90:
         d7:17:1c:8c:e1:87:d7:fe:24:f2:f3:68:77:27:09:6c:29:72:
         cf:1f:71:a2:6a:be:58:f8:63:45:34:60:17:5d:35:51:b4:25:
         54:a7:b8:10:a3:c9:4b:70:32:f4:bb:60:ad:27:e7:21:47:dc:
         c9:fb:11:d7:8f:76:5e:a3:74:e5:19:56:cb:a7:ae:83:7e:03:
         31:f5:72:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37wIyjljhzSXdGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
YTI4MGUzMDgtMDZiYy00ZTU5LTk0M2YtNmQ0ODg2ODgxNTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fVIF4Ik4nZuTZbikNa9+q5Hbt4zTbqe++Q2
lS0dOWe2Ape8ccjiViDyeG+4aJ6k8sKFSUcnOsI7xtROmVCyN6lZTyaBtatBlGqf
qSLCheXGJTIzqic0ESkYd1JthZxU3nhGqPHvWAh/oYBcTfI0E9xzKrJ8Cm7q9bMa
AJki9rM4dMRuAG8gEXwLa0Z+FnYOBm9TqcXaoHQl3pKVRhFhTsDs6Sk7VnqPU50/
x0IQnnQfLmYq4lRwQRh/Bm2e1kbB85mqyuVWszMq5Jk8JDMlW9nv5qpHe1XnZDis
xWWVtkdGbz+4CO2rKUm3lm63+y2rP+Q4DMiCrLODpmGgIDcUGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnY6CJrNFlNO+V5H5NRf3iHcGJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvM2RiYzc3NTItYWUzYy0z
MGUwLWExYjMtOGMwYTQzMmFmNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+M2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRsVorlCNoERmlQehdybKVRsQTAEYvGiE7ZQn2Sl9SIg7AN85OlDo0g
PJvjYI7CeMJUuUqtcDRZDRZb4uWSdcu9B31d7IX2C+kIwGFkaH5sfTJYPkMZrHSC
lwETJ9w5+YbmXQiEzr0f4SoO+PxJBM0Ao1WFaeaw57MBNIntVbP3vdv2DDaJoSrN
fg5Qwjt2I7n+lzMtVWQIFtvfvqQa3twUUgN8gJsszQ96t4SWu8YtyclNkNcXHIzh
h9f+JPLzaHcnCWwpcs8fcaJqvlj4Y0U0YBddNVG0JVSnuBCjyUtwMvS7YK0n5yFH
3Mn7EdePdl6jdOUZVsunroN+AzH1cjg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:25:28 2026 by rpki-client