Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa
File:                     d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa (raw, json)
Hash identifier:          T3UEeODaik5Ho766LqLn8Rq6nBHdPvGT7u2ZEoF9A24=
Subject key identifier:   ED:D4:47:4B:84:43:00:8C:AE:F6:00:75:FA:87:68:7A:41:19:F9:C8
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584E6B0A304BE6A9CC6AEFDBA500
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     7018
IP address blocks:        23.229.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:30:4b:e6:a9:cc:6a:ef:db:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=ea420ae0-e701-487f-b310-3e5c4754ea0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7c:11:70:1c:e6:b0:77:34:bb:c7:82:32:45:
                    06:22:88:18:0d:b0:63:ac:0d:3a:7c:61:cb:76:3a:
                    8e:9b:c0:ef:4e:56:6c:8c:95:d9:73:9d:de:03:f3:
                    c2:fc:42:0f:09:e1:85:81:f0:d5:2b:fd:43:ca:54:
                    9c:4a:37:f4:94:1e:55:cc:11:b6:8c:ae:a9:81:57:
                    a3:6a:36:9e:52:53:c8:a1:55:2a:b5:d8:6d:6c:74:
                    cf:07:db:36:5e:9e:1e:9b:d0:e3:22:a4:b8:86:ba:
                    50:f5:4b:ae:c6:8a:68:90:d9:ba:9d:ba:78:5f:4a:
                    5d:3d:a9:12:2a:d8:80:19:92:fd:97:c5:95:f5:c7:
                    37:7f:d2:38:54:ed:f7:92:3a:8f:74:be:67:f1:5d:
                    44:de:42:46:3a:7d:29:31:b4:8c:91:b1:e7:dd:e5:
                    46:9f:53:1a:14:45:8a:fe:59:7d:d5:03:c9:6b:3c:
                    58:8a:91:b4:de:d9:71:8e:c0:b4:3f:40:42:ed:5e:
                    85:52:e0:dc:98:4a:fb:1c:74:52:fa:e2:db:25:b1:
                    95:62:ab:df:ea:30:e4:63:96:be:fd:66:93:31:60:
                    d6:52:ee:08:3d:2f:7a:7f:1e:88:d1:74:21:e5:ea:
                    c8:d6:e9:f8:65:6c:e3:19:a3:d2:2d:eb:d5:b2:95:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:47:4B:84:43:00:8C:AE:F6:00:75:FA:87:68:7A:41:19:F9:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/d00a901b-6dbf-30fc-82f3-fbcaf0668a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:14:6e:93:91:e1:a8:14:71:f5:f8:9a:18:bc:64:d0:c2:c3:
         55:80:d2:2a:76:c0:98:55:f5:b0:a8:24:62:a3:52:6d:2f:dc:
         ce:82:1d:83:5d:6a:09:37:7f:1e:8c:e3:ce:1a:dd:61:f3:a9:
         ba:84:e8:49:0a:de:13:70:62:a9:a8:2f:05:60:3f:e6:ff:7d:
         d4:db:e1:9a:9a:00:8d:31:11:44:d9:ce:68:20:d7:26:47:95:
         9f:12:36:89:0c:57:87:90:b9:59:21:4e:e1:a8:d0:6a:27:19:
         93:f2:59:88:a3:b9:e7:7d:85:2e:70:62:27:e1:68:09:05:80:
         16:41:12:bf:21:06:c7:3b:32:24:83:3c:45:bd:6c:dd:c3:5a:
         3e:f5:87:86:84:f0:6f:81:ee:2d:95:47:25:7d:15:1f:33:1d:
         4f:d9:3c:15:eb:00:d8:81:37:28:7e:ca:58:b3:5a:15:01:42:
         22:36:68:1d:cf:05:49:e8:b7:8a:86:85:8b:d2:ca:69:ff:f8:
         5d:94:66:80:02:92:ce:81:83:73:53:b8:4f:26:ea:e6:d3:28:
         e7:06:9e:21:d4:a8:af:5e:42:04:5f:47:14:0a:a1:bd:fb:c5:
         4e:72:60:f7:89:d6:e2:16:d7:65:1c:c5:c5:45:21:9d:57:aa:
         6e:c8:30:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjBL5qnMau/bpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
ZWE0MjBhZTAtZTcwMS00ODdmLWIzMTAtM2U1YzQ3NTRlYTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHwRcBzmsHc0u8eCMkUGIogYDbBjrA06fGHL
djqOm8DvTlZsjJXZc53eA/PC/EIPCeGFgfDVK/1DylScSjf0lB5VzBG2jK6pgVej
ajaeUlPIoVUqtdhtbHTPB9s2Xp4em9DjIqS4hrpQ9UuuxopokNm6nbp4X0pdPakS
KtiAGZL9l8WV9cc3f9I4VO33kjqPdL5n8V1E3kJGOn0pMbSMkbHn3eVGn1MaFEWK
/ll91QPJazxYipG03tlxjsC0P0BC7V6FUuDcmEr7HHRS+uLbJbGVYqvf6jDkY5a+
/WaTMWDWUu4IPS96fx6I0XQh5erI1un4ZWzjGaPSLevVspVQTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3UR0uEQwCMrvYAdfqHaHpBGfnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZDAwYTkwMWItNmRiZi0z
MGZjLTgyZjMtZmJjYWYwNjY4YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+V/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEUbpOR4agUcfX4mhi8ZNDCw1WA0ip2wJhV9bCoJGKjUm0v3M6CHYNd
agk3fx6M484a3WHzqbqE6EkK3hNwYqmoLwVgP+b/fdTb4ZqaAI0xEUTZzmgg1yZH
lZ8SNokMV4eQuVkhTuGo0GonGZPyWYijued9hS5wYifhaAkFgBZBEr8hBsc7MiSD
PEW9bN3DWj71h4aE8G+B7i2VRyV9FR8zHU/ZPBXrANiBNyh+ylizWhUBQiI2aB3P
BUnot4qGhYvSymn/+F2UZoACks6Bg3NTuE8m6ubTKOcGniHUqK9eQgRfRxQKob37
xU5yYPeJ1uIW12UcxcVFIZ1Xqm7IMFw=
-----END CERTIFICATE-----
Generated at Tue Jul 14 04:21:52 2026 by rpki-client