Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa
File:                     98d51ecd-f562-3149-b859-0a8f1264da94.roa (raw, json)
Hash identifier:          cTLkVBzcIptTeiNcZSEr1TA2LjKaeMgynX7Fq/tPGHo=
Subject key identifier:   B6:02:40:AB:A7:F5:87:95:DE:C6:68:EE:0B:4F:75:90:E7:18:15:13
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC372A68CFD2D0B4A1AD57EC0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        47.231.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:a6:8c:fd:2d:0b:4a:1a:d5:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=e5b6f04b-038e-44ba-b967-2fe467295e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:51:6e:ca:d2:a7:8c:fb:c4:f4:e1:4c:85:
                    ff:b8:bc:f2:94:84:c9:ce:30:30:ee:ab:0f:dc:10:
                    2c:b9:fe:53:84:6e:18:d6:c4:75:de:c3:d5:0d:dc:
                    99:df:7c:e9:65:37:06:47:11:61:32:f4:69:11:d0:
                    14:a6:15:1c:93:42:05:00:99:dc:d9:8e:5d:c8:df:
                    91:fb:74:14:fd:cd:6d:55:38:e2:e9:a7:63:cd:5d:
                    16:b9:35:79:0b:47:14:31:ff:d4:24:d3:6d:ea:f1:
                    aa:85:ac:f3:d8:34:44:1e:86:1e:bb:5d:dc:8e:46:
                    97:01:4e:f7:49:0f:de:3e:03:be:ab:ac:ef:ed:04:
                    14:5c:a4:55:8e:62:d8:c1:11:bf:78:43:fb:f0:81:
                    41:c9:7c:d6:e4:09:ba:d0:41:52:d2:fb:3b:f5:c8:
                    39:4d:13:1e:f6:de:b6:15:84:ef:36:ea:b1:b4:60:
                    25:3a:ee:3b:31:12:13:7f:39:15:19:2e:e6:f6:93:
                    84:ef:d5:e1:90:db:15:b8:76:c1:19:b6:4b:1f:e3:
                    d6:1c:9d:9d:07:65:97:f1:be:c3:8b:77:24:5c:81:
                    00:db:6f:76:c9:9e:54:8a:ac:19:91:c5:b1:7a:8b:
                    39:10:8d:b3:3d:f9:0a:7c:39:3e:d8:f4:19:50:2c:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:40:AB:A7:F5:87:95:DE:C6:68:EE:0B:4F:75:90:E7:18:15:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/98d51ecd-f562-3149-b859-0a8f1264da94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.231.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:37:f8:27:7f:9c:30:dd:82:0d:5f:4b:b8:49:f6:bb:ba:aa:
         e4:45:60:e2:3a:67:95:93:a8:2e:e0:99:98:f3:51:91:01:1f:
         c5:58:77:f5:23:cb:41:2e:bf:a4:d6:56:59:79:ec:19:5b:1b:
         e6:4b:25:89:97:80:32:18:47:03:4c:e7:a4:e5:5f:88:21:e2:
         70:59:39:93:71:3f:21:3b:b4:31:3e:ce:39:54:ed:17:5a:83:
         93:17:92:da:b3:4f:16:4d:5d:b6:26:52:03:e2:1c:95:92:7e:
         b1:28:44:86:3f:71:3f:87:0d:94:46:41:c4:c7:45:04:9b:71:
         0b:0d:26:0c:b9:66:81:cd:a0:27:c8:c9:89:3e:9e:70:6c:6e:
         c7:95:54:aa:9d:4d:6c:c5:07:7d:a6:c9:ed:e3:c8:98:45:09:
         19:4e:30:4d:08:1b:79:54:2c:a3:b2:19:50:89:5a:03:9e:9a:
         a6:09:87:75:7b:7d:55:74:d5:ff:1c:6c:bc:3f:72:2a:2f:be:
         2e:19:db:a7:4f:04:c4:a9:9d:0e:c3:d6:54:c1:7a:a7:27:dd:
         7d:dd:de:08:fb:20:55:46:87:2f:be:a9:e1:5e:00:96:ad:62:
         77:1e:38:44:3e:05:59:28:2b:6b:44:d5:7c:9b:b7:bf:ff:32:
         39:2c:96:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcqaM/S0LShrVfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZTViNmYwNGItMDM4ZS00NGJhLWI5NjctMmZlNDY3Mjk1ZTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJZRbsrSp4z7xPThTIX/uLzylITJzjAw7qsP
3BAsuf5ThG4Y1sR13sPVDdyZ33zpZTcGRxFhMvRpEdAUphUck0IFAJnc2Y5dyN+R
+3QU/c1tVTji6adjzV0WuTV5C0cUMf/UJNNt6vGqhazz2DREHoYeu13cjkaXAU73
SQ/ePgO+q6zv7QQUXKRVjmLYwRG/eEP78IFByXzW5Am60EFS0vs79cg5TRMe9t62
FYTvNuqxtGAlOu47MRITfzkVGS7m9pOE79XhkNsVuHbBGbZLH+PWHJ2dB2WX8b7D
i3ckXIEA2292yZ5UiqwZkcWxeos5EI2zPfkKfDk+2PQZUCzVCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYCQKun9YeV3sZo7gtPdZDnGBUTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOThkNTFlY2QtZjU2Mi0z
MTQ5LWI4NTktMGE4ZjEyNjRkYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBL+f8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANA3+Cd/nDDdgg1fS7hJ9ru6quRFYOI6Z5WTqC7gmZjzUZEBH8VYd/Uj
y0Euv6TWVll57BlbG+ZLJYmXgDIYRwNM56TlX4gh4nBZOZNxPyE7tDE+zjlU7Rda
g5MXktqzTxZNXbYmUgPiHJWSfrEoRIY/cT+HDZRGQcTHRQSbcQsNJgy5ZoHNoCfI
yYk+nnBsbseVVKqdTWzFB32mye3jyJhFCRlOME0IG3lULKOyGVCJWgOemqYJh3V7
fVV01f8cbLw/ciovvi4Z26dPBMSpnQ7D1lTBeqcn3X3d3gj7IFVGhy++qeFeAJat
YnceOEQ+BVkoK2tE1Xybt7//Mjkslm4=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:27 2026 by rpki-client