Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
File:                     c783bf70-960d-3de3-8058-484ab957d62d.roa (raw, json)
Hash identifier:          3g44liWmpQ09DEeVcim3K/+h9FaXmAvY8OLz9xkSkTc=
Subject key identifier:   34:77:04:A9:67:D9:DD:8C:B3:86:11:72:8C:BC:AD:61:4B:08:08:08
Certificate issuer:       /CN=4f12be01-5f55-4434-8f8a-921808f7c306
Certificate serial:       010D0C9F4328584F74B82DEC75C541057F47C580
Authority key identifier: B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     62582
IP address blocks:        23.177.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:2d:ec:75:c5:41:05:7f:47:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f12be01-5f55-4434-8f8a-921808f7c306
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=437b2c43-6d65-4322-9d9f-62e95b5b98ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:f8:16:ec:d6:aa:f0:82:9a:3f:22:eb:c2:
                    54:7b:7b:90:ac:91:bf:89:78:dc:61:b5:ba:bc:5d:
                    a8:34:d0:51:ae:b5:bc:54:16:9c:14:34:bc:06:b2:
                    3a:2d:94:c3:1b:75:75:69:7c:be:0a:df:7f:92:9b:
                    a2:7a:43:52:88:40:fd:63:01:04:52:59:3b:64:78:
                    7b:e6:49:43:f0:f2:6e:7f:80:88:40:a9:b1:86:35:
                    10:e5:2e:5f:e6:79:9a:dd:cf:61:e0:b7:25:c7:53:
                    6c:f5:3d:fc:16:b1:7c:89:95:14:13:1b:2a:3a:ce:
                    16:ad:45:c1:56:0e:27:cb:6e:37:70:83:57:c3:b6:
                    55:1a:13:bf:d9:f3:90:dd:79:cd:3c:1a:a7:c8:5f:
                    b7:20:d7:09:e2:38:d9:56:51:b7:c3:c8:69:81:4c:
                    50:72:ea:86:1f:2d:f4:3f:53:ee:89:56:2a:6a:84:
                    3f:f9:fd:72:4c:33:c3:bd:b5:6d:d3:04:38:36:c0:
                    f9:9c:91:f0:03:7c:46:44:b8:ec:c4:f2:97:fe:a6:
                    c9:07:bd:d9:1a:ec:b2:e2:21:11:a9:43:b6:e1:87:
                    39:41:60:b9:93:50:48:1f:e9:59:9d:89:d8:42:64:
                    4a:2f:92:38:70:4b:56:ac:4b:d3:5a:7c:6f:88:71:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:77:04:A9:67:D9:DD:8C:B3:86:11:72:8C:BC:AD:61:4B:08:08:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/c783bf70-960d-3de3-8058-484ab957d62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306/4f12be01-5f55-4434-8f8a-921808f7c306.crl

            X509v3 Authority Key Identifier:
                keyid:B4:BB:F7:BC:58:DE:FC:2F:5D:68:DD:B2:64:D8:DB:59:1A:29:10:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4f12be01-5f55-4434-8f8a-921808f7c306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:44:81:a6:4e:57:64:48:e4:04:0b:72:4a:49:e0:75:cd:
         c7:82:58:92:2d:5d:81:ff:da:d0:37:01:8f:12:c2:de:6a:98:
         89:81:89:a2:e4:78:03:e0:c5:e0:76:82:09:e3:8d:f3:b5:d2:
         7b:4c:ec:6c:9a:32:48:85:7f:e3:22:79:c0:4e:84:67:ac:f7:
         67:eb:81:1e:10:64:0d:e9:a8:85:ee:56:25:31:53:9e:06:aa:
         ba:55:6b:2b:f4:bb:95:c2:0a:3e:e2:d2:dc:a4:af:e5:04:21:
         e1:3e:9b:a1:b7:ab:99:f1:99:28:cb:ec:60:58:0b:6c:73:f2:
         40:e2:2a:07:19:47:a9:a0:95:66:01:0c:19:46:0e:a0:b0:38:
         60:24:a0:ee:d6:1a:f8:c6:72:19:00:f4:e2:11:a3:16:71:89:
         23:82:2f:56:d7:bd:a7:6d:3a:8d:ea:80:fc:98:54:97:87:de:
         b9:1f:e4:77:3a:9d:55:57:70:f3:92:ed:e0:c9:72:10:96:e8:
         be:22:ac:ca:fd:10:6d:54:8c:e2:e5:d1:74:d4:a8:db:c6:ec:
         ca:26:4f:94:76:84:56:dc:3f:56:d9:44:44:fd:44:5d:41:c5:
         a6:f3:a4:aa:a5:1c:ff:88:2c:c1:fe:4c:cf:89:c8:7b:b5:1c:
         aa:37:30:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uC3sdcVBBX9HxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxMmJlMDEtNWY1NS00NDM0LThmOGEtOTIxODA4Zjdj
MzA2MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk
NDM3YjJjNDMtNmQ2NS00MzIyLTlkOWYtNjJlOTViNWI5OGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqz4FuzWqvCCmj8i68JUe3uQrJG/iXjcYbW6
vF2oNNBRrrW8VBacFDS8BrI6LZTDG3V1aXy+Ct9/kpuiekNSiED9YwEEUlk7ZHh7
5klD8PJuf4CIQKmxhjUQ5S5f5nma3c9h4Lclx1Ns9T38FrF8iZUUExsqOs4WrUXB
Vg4ny243cINXw7ZVGhO/2fOQ3XnNPBqnyF+3INcJ4jjZVlG3w8hpgUxQcuqGHy30
P1PuiVYqaoQ/+f1yTDPDvbVt0wQ4NsD5nJHwA3xGRLjsxPKX/qbJB73ZGuyy4iER
qUO24Yc5QWC5k1BIH+lZnYnYQmRKL5I4cEtWrEvTWnxviHElJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDR3BKln2d2Ms4YRcoy8rWFLCAgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEy
YmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4MDhmN2MzMDYvYzc4M2JmNzAtOTYwZC0z
ZGUzLTgwNTgtNDg0YWI5NTdkNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGYxMmJlMDEtNWY1NS00NDM0LThm
OGEtOTIxODA4ZjdjMzA2LzRmMTJiZTAxLTVmNTUtNDQzNC04ZjhhLTkyMTgwOGY3
YzMwNi5jcmwwHwYDVR0jBBgwFoAUtLv3vFje/C9daN2yZNjbWRopEGgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80ZjEyYmUwMS01ZjU1LTQ0MzQtOGY4YS05MjE4
MDhmN2MzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7FAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5QRIGmTldkSOQEC3JKSeB1zceCWJItXYH/2tA3AY8Swt5qmImBiaLk
eAPgxeB2ggnjjfO10ntM7GyaMkiFf+MiecBOhGes92frgR4QZA3pqIXuViUxU54G
qrpVayv0u5XCCj7i0tykr+UEIeE+m6G3q5nxmSjL7GBYC2xz8kDiKgcZR6mglWYB
DBlGDqCwOGAkoO7WGvjGchkA9OIRoxZxiSOCL1bXvadtOo3qgPyYVJeH3rkf5Hc6
nVVXcPOS7eDJchCW6L4irMr9EG1UjOLl0XTUqNvG7MomT5R2hFbcP1bZRET9RF1B
xabzpKqlHP+ILMH+TM+JyHu1HKo3ML0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:59 2026 by rpki-client