Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37e8bc67-2b44-3e2b-916d-5d3f93affb8e.roa
File:                     37e8bc67-2b44-3e2b-916d-5d3f93affb8e.roa (raw, json)
Hash identifier:          UfyUF6py49J12P8ORtIG7AfRT6FkJ5CrOF/eRo4SmG0=
Subject key identifier:   6D:83:98:56:35:72:D2:69:E6:BC:3A:56:F2:1F:4C:8C:7F:FE:E8:81
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DECA41687ECAB263B9A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37e8bc67-2b44-3e2b-916d-5d3f93affb8e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        47.231.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ec:a4:16:87:ec:ab:26:3b:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=7f64f8ca-87ba-4bd4-9c34-4a28ed7f210e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:eb:d8:bc:c1:85:8e:0a:b6:b5:3c:76:4d:
                    89:c7:a4:08:71:73:18:59:63:5c:3c:e3:77:f6:6e:
                    db:c3:68:94:be:4e:e7:5e:aa:db:86:f6:be:97:9d:
                    39:5d:93:85:8f:86:2b:65:76:9d:0d:85:93:a5:6b:
                    91:51:09:4f:8e:b9:24:21:b7:55:0c:38:71:af:d5:
                    02:11:83:d4:55:7f:83:2a:89:d0:99:1b:03:29:0c:
                    c7:e0:1a:a8:6e:29:ba:e1:c1:16:1e:8f:a9:2d:52:
                    24:12:ba:b7:43:f1:44:06:f9:fe:ef:98:87:63:b3:
                    a9:ff:4d:9e:c4:4e:bf:de:d3:28:a0:28:b2:96:1a:
                    74:49:83:dd:4c:ea:0c:36:77:13:26:ef:d1:db:dd:
                    7e:4e:ce:8b:ef:12:a1:26:04:41:5f:a0:8d:ac:a9:
                    aa:7c:df:dd:9d:e4:a7:3e:83:5c:6f:ec:1e:2a:02:
                    bf:f2:24:44:4c:c5:6c:da:da:c9:39:4c:ea:5e:ce:
                    da:69:6a:a6:11:a3:83:22:c1:c1:51:20:99:d2:4b:
                    38:6f:56:0e:6a:17:68:b8:98:90:a3:3e:a8:45:75:
                    75:8e:56:9a:2b:9e:d5:af:4d:ab:55:58:08:43:6b:
                    e1:25:5d:e3:7c:af:92:c3:3b:be:88:0b:04:19:8e:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:83:98:56:35:72:D2:69:E6:BC:3A:56:F2:1F:4C:8C:7F:FE:E8:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/37e8bc67-2b44-3e2b-916d-5d3f93affb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:19:90:13:0c:08:00:4b:08:b5:20:88:2f:22:a1:c6:1b:
         9b:23:e7:4c:8e:68:2a:17:e6:f8:eb:ec:4e:47:80:b1:a8:81:
         c9:8d:a0:96:06:cb:16:a7:a4:9a:7e:31:77:b9:c6:ed:d2:fe:
         7e:ba:5f:8a:63:eb:f9:0d:9f:0e:75:d9:e6:10:13:c4:93:0d:
         70:9e:f3:b5:53:6d:0d:02:c5:13:cf:1b:8d:bd:e7:bc:f7:c6:
         21:df:ec:1f:87:37:89:c9:37:85:b7:37:09:89:52:7c:ca:6f:
         01:64:03:7b:b3:18:47:c2:3d:30:ce:3d:96:e5:23:8f:be:08:
         68:2a:bd:5a:92:2a:15:98:2c:62:f8:7f:81:90:14:94:5c:37:
         4f:78:21:19:d4:eb:69:2e:ea:da:bd:af:17:20:ee:ce:18:b0:
         e0:9a:63:78:50:3c:7a:81:f0:c9:44:08:b8:93:55:29:29:13:
         98:d8:2c:f9:8b:29:20:b5:25:91:ac:a4:65:3c:a6:7c:ba:16:
         4f:28:2e:c1:75:22:5f:bd:78:c4:c3:f5:f9:be:06:5e:b5:84:
         50:d6:51:55:d5:b7:77:ea:ac:80:4a:71:bf:19:76:16:0b:59:
         bf:e6:5b:3d:f3:47:06:35:e3:6f:2c:e3:0f:79:10:63:30:f4:
         70:66:cb:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXeykFofsqyY7moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
N2Y2NGY4Y2EtODdiYS00YmQ0LTljMzQtNGEyOGVkN2YyMTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaHr2LzBhY4KtrU8dk2Jx6QIcXMYWWNcPON3
9m7bw2iUvk7nXqrbhva+l505XZOFj4YrZXadDYWTpWuRUQlPjrkkIbdVDDhxr9UC
EYPUVX+DKonQmRsDKQzH4Bqobim64cEWHo+pLVIkErq3Q/FEBvn+75iHY7Op/02e
xE6/3tMooCiylhp0SYPdTOoMNncTJu/R291+Ts6L7xKhJgRBX6CNrKmqfN/dneSn
PoNcb+weKgK/8iRETMVs2trJOUzqXs7aaWqmEaODIsHBUSCZ0ks4b1YOahdouJiQ
oz6oRXV1jlaaK57Vr02rVVgIQ2vhJV3jfK+Swzu+iAsEGY7QIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2DmFY1ctJp5rw6VvIfTIx//uiBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzdlOGJjNjctMmI0NC0z
ZTJiLTkxNmQtNWQzZjkzYWZmYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBL+f0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJinGZATDAgASwi1IIgvIqHGG5sj50yOaCoX5vjr7E5HgLGogcmNoJYG
yxanpJp+MXe5xu3S/n66X4pj6/kNnw512eYQE8STDXCe87VTbQ0CxRPPG42957z3
xiHf7B+HN4nJN4W3NwmJUnzKbwFkA3uzGEfCPTDOPZblI4++CGgqvVqSKhWYLGL4
f4GQFJRcN094IRnU62ku6tq9rxcg7s4YsOCaY3hQPHqB8MlECLiTVSkpE5jYLPmL
KSC1JZGspGU8pny6Fk8oLsF1Il+9eMTD9fm+Bl61hFDWUVXVt3fqrIBKcb8ZdhYL
Wb/mWz3zRwY1428s4w95EGMw9HBmyzg=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:06:44 2026 by rpki-client