Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa
File:                     b6a10872-6477-3316-8b26-a4a5d54f2477.roa (raw, json)
Hash identifier:          3lYt0xWvyXltREapBwzthZgZbCzVv+14WHlnQ2ag1LE=
Subject key identifier:   DB:15:E2:CC:AE:A4:B0:E0:C5:A5:C9:CF:C6:BA:B0:65:AA:B0:77:E8
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E6B0A0CC2DBFD188921B5D9C6
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     7018
IP address blocks:        23.229.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0c:c2:db:fd:18:89:21:b5:d9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=5d56f78a-bf28-4447-8c88-4297b4b76f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:1c:b6:9f:46:9d:44:ba:09:07:b2:b7:98:
                    2a:3b:4f:3b:29:a0:f9:88:23:45:49:a8:a6:27:33:
                    30:59:90:94:b0:7d:8e:dc:4e:6b:d4:b8:74:84:10:
                    4b:9b:a2:c4:5f:16:b9:20:ab:c9:f9:8a:1f:28:8c:
                    76:75:51:f4:c2:11:d5:2c:e2:43:f1:b9:a7:e3:f0:
                    da:fd:e9:fd:99:76:54:fd:d6:af:3b:dc:9a:ce:7e:
                    e6:9f:0d:a3:27:ab:f5:9a:30:f5:e8:5a:69:f4:42:
                    3b:ee:c8:91:0d:3c:09:7f:ed:c0:2f:0c:fd:19:de:
                    c5:3a:e7:b4:4a:78:a8:0e:fb:14:fe:6b:13:52:ae:
                    1c:32:33:44:18:50:82:44:a4:4d:3d:d4:75:66:73:
                    99:ec:47:8a:3d:70:00:88:fb:a1:78:59:21:a3:43:
                    86:dc:73:63:0b:43:3b:0e:72:11:91:fc:f6:62:1a:
                    7e:3c:0a:9f:5e:78:22:2e:5f:73:71:9c:b7:54:54:
                    eb:54:c1:68:6e:a4:63:01:0f:c0:49:d9:93:98:2b:
                    01:d3:e3:ef:e8:f6:31:89:f6:de:d9:c2:84:34:03:
                    11:a6:39:ca:9e:45:78:8d:9a:b2:83:ad:95:da:a4:
                    9c:5f:93:a4:a7:b8:ab:0e:f7:41:dd:d0:6f:0d:bf:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:E2:CC:AE:A4:B0:E0:C5:A5:C9:CF:C6:BA:B0:65:AA:B0:77:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b6a10872-6477-3316-8b26-a4a5d54f2477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:e5:1e:3d:84:f0:4e:d6:b7:f0:a2:86:71:7a:61:87:7d:
         5c:6d:f7:9f:6b:06:37:19:ee:b9:97:a8:f6:71:8e:fb:50:d5:
         ef:27:a7:06:a4:ae:54:a4:d2:50:85:a6:84:25:6a:96:3b:12:
         b3:83:10:46:64:ce:10:00:48:51:3a:8e:ba:12:c5:30:8b:88:
         72:f9:87:f1:25:31:42:ea:c5:95:20:75:b1:49:1e:21:c6:8d:
         e2:30:6b:f5:89:24:aa:06:37:6d:8c:2c:26:a0:ed:ea:f4:0e:
         69:26:d4:cf:2b:f7:24:cc:ca:c8:0a:ef:36:59:ef:76:de:df:
         12:85:d0:35:89:18:4a:60:5c:b2:23:62:07:6c:59:e0:b9:4e:
         89:e9:73:d3:91:13:a0:e8:0c:3f:5d:9e:4d:09:74:99:32:60:
         90:af:6a:48:36:2e:84:f9:6a:24:a0:61:ab:50:90:71:da:7c:
         1c:a7:7a:38:aa:d5:c9:9c:64:97:91:0a:db:9b:7a:bf:db:28:
         27:4e:be:dc:a6:ec:6d:7b:f9:af:fc:d7:9a:54:5e:be:7c:3a:
         a7:68:f9:39:73:47:83:36:c7:19:8f:41:1f:94:e9:fc:50:dc:
         43:ae:8d:b3:11:ce:a7:ff:d9:ea:2e:4c:5b:e0:2b:6b:d0:3d:
         cb:52:04:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCgzC2/0YiSG12cYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
NWQ1NmY3OGEtYmYyOC00NDQ3LThjODgtNDI5N2I0Yjc2ZjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxwctp9GnUS6CQeyt5gqO087KaD5iCNFSaim
JzMwWZCUsH2O3E5r1Lh0hBBLm6LEXxa5IKvJ+YofKIx2dVH0whHVLOJD8bmn4/Da
/en9mXZU/davO9yazn7mnw2jJ6v1mjD16Fpp9EI77siRDTwJf+3ALwz9Gd7FOue0
SnioDvsU/msTUq4cMjNEGFCCRKRNPdR1ZnOZ7EeKPXAAiPuheFkho0OG3HNjC0M7
DnIRkfz2Yhp+PAqfXngiLl9zcZy3VFTrVMFobqRjAQ/ASdmTmCsB0+Pv6PYxifbe
2cKENAMRpjnKnkV4jZqyg62V2qScX5Okp7irDvdB3dBvDb+DbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsV4syupLDgxaXJz8a6sGWqsHfoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYjZhMTA4NzItNjQ3Ny0z
MzE2LThiMjYtYTRhNWQ1NGYyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgu5R49hPBO1rfwooZxemGHfVxt959rBjcZ7rmXqPZxjvtQ1e8npwak
rlSk0lCFpoQlapY7ErODEEZkzhAASFE6jroSxTCLiHL5h/ElMULqxZUgdbFJHiHG
jeIwa/WJJKoGN22MLCag7er0Dmkm1M8r9yTMysgK7zZZ73be3xKF0DWJGEpgXLIj
YgdsWeC5Tonpc9ORE6DoDD9dnk0JdJkyYJCvakg2LoT5aiSgYatQkHHafBynejiq
1cmcZJeRCtuber/bKCdOvtym7G17+a/815pUXr58Oqdo+TlzR4M2xxmPQR+U6fxQ
3EOujbMRzqf/2eouTFvgK2vQPctSBJE=
-----END CERTIFICATE-----
Generated at Tue Jul 14 04:24:35 2026 by rpki-client