Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
File:                     b6734533-e711-33ae-911c-56d7a3139610.roa (raw, json)
Hash identifier:          E/UR7DPrCsoJQETkU5H4O0EHBg3enzNMOhqVmG32IDs=
Subject key identifier:   16:C7:76:47:76:5C:92:26:0E:65:98:76:54:E2:79:00:4A:00:72:91
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584EA787D476784FB3F386D58200
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     393336
IP address blocks:        23.163.208.0/22 maxlen: 24
                          23.163.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d4:76:78:4f:b3:f3:86:d5:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=683ce1e4-357b-4f31-a986-3d4bc47e57a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:e3:54:81:68:23:18:2c:9d:8d:34:1c:2d:
                    c3:96:c6:fe:cc:be:f8:c3:c6:5e:40:29:93:1d:2a:
                    79:fe:39:6c:42:e0:bb:94:ff:56:d8:e9:dd:c4:21:
                    ec:47:97:b8:82:cf:27:09:d4:c9:f6:58:0f:93:a3:
                    0a:78:b2:09:4b:7e:83:3f:ab:4a:56:6e:c0:59:fe:
                    51:32:af:30:94:d2:b9:40:84:15:d2:86:ae:42:3c:
                    12:a8:26:29:7e:74:89:d5:26:86:a0:15:8b:17:bb:
                    0c:90:dd:3c:f4:b7:14:b7:e8:62:97:ae:cb:ec:12:
                    30:7e:ce:e6:a9:5b:95:9a:91:9a:00:6b:63:c0:f4:
                    50:86:a2:63:14:4b:3c:80:d3:13:7e:ab:92:3e:d5:
                    85:25:e8:c2:cb:e6:1c:92:a9:00:d2:8b:32:7e:77:
                    53:76:9d:6d:47:bb:91:79:09:29:dd:af:64:26:54:
                    86:80:48:a8:ed:5f:2c:77:ff:1d:9f:5a:7d:13:c5:
                    e2:fb:0e:34:cd:b8:48:b3:21:0f:89:25:ae:df:17:
                    e0:c4:4d:9a:91:38:7e:96:99:8a:fd:53:5e:a3:e0:
                    6b:f0:ed:38:65:76:b3:ad:7c:fb:f1:b1:61:0a:98:
                    38:35:53:0e:ba:f3:17:e3:c5:a8:bc:bb:1e:72:d3:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:76:47:76:5C:92:26:0E:65:98:76:54:E2:79:00:4A:00:72:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.208.0-23.163.213.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:a2:1f:2b:f1:22:85:9f:7e:08:27:0a:42:6d:39:28:c8:
         b8:37:5c:50:49:b6:17:9f:34:e4:5c:91:a3:39:4c:17:01:49:
         5a:3d:51:f5:64:1f:32:4e:87:5e:c0:04:4a:0e:f4:de:94:a3:
         9c:56:01:3b:f9:aa:3c:9f:d5:8b:e4:78:70:63:0d:e5:a0:25:
         f6:52:40:f0:f1:25:8c:bf:11:96:e1:bc:75:f0:e3:1f:ce:31:
         b5:43:2b:20:bc:d1:9c:d5:c2:32:e2:ca:e7:28:e0:1b:ee:ec:
         9d:cd:2f:c7:eb:40:18:2f:e5:f3:2d:63:cc:aa:b1:87:c7:12:
         a5:9e:5f:8d:d8:8d:6e:52:60:c6:29:84:a9:95:4b:fc:b8:e0:
         ff:e4:81:f5:f2:fd:9c:73:21:c3:ef:88:f4:71:a9:39:83:30:
         56:92:76:b1:9a:f0:7c:b6:18:7a:e5:ff:59:f2:a3:07:34:d7:
         82:bb:06:47:f6:fe:72:8f:fd:11:61:ae:76:59:ec:6a:23:45:
         66:51:3c:5f:d8:cb:fa:bc:e8:d2:e3:4e:ce:e5:55:1d:53:de:
         66:1c:40:64:bd:0f:b9:ff:18:78:f3:1f:a2:58:de:8c:0b:fa:
         d8:7b:15:70:b2:db:11:82:b0:55:53:d2:c4:78:69:98:d7:db:
         70:62:50:79
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6nh9R2eE+z84bVggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0
ZWE5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjgzY2UxZTQtMzU3Yi00ZjMxLWE5ODYtM2Q0YmM0N2U1N2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii7jVIFoIxgsnY00HC3Dlsb+zL74w8ZeQCmT
HSp5/jlsQuC7lP9W2OndxCHsR5e4gs8nCdTJ9lgPk6MKeLIJS36DP6tKVm7AWf5R
Mq8wlNK5QIQV0oauQjwSqCYpfnSJ1SaGoBWLF7sMkN089LcUt+hil67L7BIwfs7m
qVuVmpGaAGtjwPRQhqJjFEs8gNMTfquSPtWFJejCy+YckqkA0osyfndTdp1tR7uR
eQkp3a9kJlSGgEio7V8sd/8dn1p9E8Xi+w40zbhIsyEPiSWu3xfgxE2akTh+lpmK
/VNeo+Br8O04ZXazrXz78bFhCpg4NVMOuvMX48WovLsectML/wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFBbHdkd2XJImDmWYdlTieQBKAHKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi
MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYjY3MzQ1MzMtZTcxMS0z
M2FlLTkxMWMtNTZkN2EzMTM5NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3
MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj
NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5
ZGI3YzRlYTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQXo9AD
BAEXo9QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEALYmiHyvxIoWffggnCkJtOSjIuDdcUEm2F5805FyRozlM
FwFJWj1R9WQfMk6HXsAESg703pSjnFYBO/mqPJ/Vi+R4cGMN5aAl9lJA8PEljL8R
luG8dfDjH84xtUMrILzRnNXCMuLK5yjgG+7snc0vx+tAGC/l8y1jzKqxh8cSpZ5f
jdiNblJgximEqZVL/Ljg/+SB9fL9nHMhw++I9HGpOYMwVpJ2sZrwfLYYeuX/WfKj
BzTXgrsGR/b+co/9EWGudlnsaiNFZlE8X9jL+rzo0uNOzuVVHVPeZhxAZL0Puf8Y
ePMfoljejAv62HsVcLLbEYKwVVPSxHhpmNfbcGJQeQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:06:03 2026 by rpki-client