Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa
File:                     0a30dd52-887e-3968-9494-27626898cf43.roa (raw, json)
Hash identifier:          eXNcML6XNWMQEPdLI+tUb1PtC090Kp04A8BkjXofLIU=
Subject key identifier:   EB:A9:A9:4E:2E:2A:B0:A1:14:E9:81:22:64:99:0C:C4:3B:E3:E6:1F
Certificate issuer:       /CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
Certificate serial:       010D0C9F4328584F63F8313694CB5F91BCDFE380
Authority key identifier: 41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     36352
IP address blocks:        23.92.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:31:36:94:cb:5f:91:bc:df:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=c8807dae-1622-45af-8969-643ad707bd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:16:4f:32:02:f1:6f:18:f2:af:1f:98:5d:
                    df:75:b3:34:28:09:50:73:7a:97:b2:3f:3e:fa:d0:
                    46:2c:71:31:01:eb:9f:90:cc:fc:17:1c:99:98:fd:
                    05:3f:3a:47:7e:f5:35:cd:43:86:50:50:23:47:a2:
                    52:0a:cc:e2:73:79:47:94:5f:a0:d8:d8:a2:f1:36:
                    d9:20:51:70:fb:4f:b3:27:f9:75:e8:f1:31:0b:27:
                    d1:38:65:62:97:ca:60:45:c9:4b:c6:0b:4f:0c:07:
                    51:9a:ec:f0:2a:05:63:73:07:5a:ec:3d:63:14:5b:
                    c4:b7:52:6c:dc:31:03:35:b4:16:fb:1a:47:d0:9a:
                    ac:a2:6a:6d:df:96:d7:6d:0e:8f:ac:84:d6:46:b5:
                    ba:85:be:60:21:9a:42:92:5c:a0:92:ae:c9:2c:58:
                    75:d8:0c:d9:16:94:5c:66:f0:b0:51:28:ab:98:b2:
                    d5:75:d9:4e:8b:48:a2:eb:ca:5f:3c:36:9b:ad:00:
                    1e:db:ad:9b:2d:d6:c4:f2:5b:12:45:4e:16:20:0f:
                    6d:13:76:a1:f4:d5:e9:08:64:f7:d0:41:1a:4d:e4:
                    ed:72:74:7e:42:6f:4d:82:5a:28:92:bc:f1:0d:57:
                    88:c0:62:31:9c:e1:a0:63:f5:d8:33:0b:0d:cd:fc:
                    3b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A9:A9:4E:2E:2A:B0:A1:14:E9:81:22:64:99:0C:C4:3B:E3:E6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl

            X509v3 Authority Key Identifier:
                keyid:41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:95:d3:71:57:ea:85:ce:cc:b3:aa:48:56:36:3e:dc:56:
         72:e2:f8:e2:64:2c:a3:32:13:f7:2c:d5:ed:e1:c4:e0:31:ab:
         c7:93:b5:25:e6:22:55:ba:13:d8:bd:16:6e:b0:3c:cf:e7:14:
         49:ea:f3:3c:81:ae:b8:d5:0b:95:f1:46:34:f8:dc:47:06:b4:
         4b:3d:d7:4d:34:95:92:c5:d5:e8:76:50:a1:84:ad:a7:2d:3c:
         c9:c5:82:9c:1e:43:52:6d:bf:6c:94:6f:9d:18:dd:2b:45:ad:
         80:0b:03:ff:75:a8:37:8f:a1:e1:35:1c:87:f6:f2:d5:f6:e0:
         61:9c:b8:c6:d6:77:8d:33:91:db:c9:1e:65:d7:01:fa:26:1d:
         59:39:ce:55:ce:e5:83:5e:65:ca:37:d8:b0:a1:03:78:32:ff:
         59:e0:1a:d9:a0:62:3b:33:5d:3f:8b:91:78:37:d6:5a:ea:d7:
         bd:a0:55:b0:b4:4c:59:e3:35:38:e0:8e:47:d9:60:10:12:6e:
         f9:41:46:39:a4:a5:d3:01:55:c9:33:d0:f3:a8:2f:71:8b:b5:
         0e:07:0c:79:6b:47:8f:f0:6e:71:09:d3:3a:d1:6c:a5:99:a9:
         93:0a:a1:fb:52:1b:22:13:50:46:2b:f1:59:04:79:5a:01:a7:
         b6:46:df:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+DE2lMtfkbzf44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJlOGUzNmItN2E0NS00Zjg3LWI2ZDYtNTVhNGExZGZh
MTE4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
Yzg4MDdkYWUtMTYyMi00NWFmLTg5NjktNjQzYWQ3MDdiZDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUkWTzIC8W8Y8q8fmF3fdbM0KAlQc3qXsj8+
+tBGLHExAeufkMz8FxyZmP0FPzpHfvU1zUOGUFAjR6JSCszic3lHlF+g2Nii8TbZ
IFFw+0+zJ/l16PExCyfROGVil8pgRclLxgtPDAdRmuzwKgVjcwda7D1jFFvEt1Js
3DEDNbQW+xpH0Jqsompt35bXbQ6PrITWRrW6hb5gIZpCklygkq7JLFh12AzZFpRc
ZvCwUSirmLLVddlOi0ii68pfPDabrQAe262bLdbE8lsSRU4WIA9tE3ah9NXpCGT3
0EEaTeTtcnR+Qm9NglookrzxDVeIwGIxnOGgY/XYMwsNzfw7dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOupqU4uKrChFOmBImSZDMQ74+YfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYmU4
ZTM2Yi03YTQ1LTRmODctYjZkNi01NWE0YTFkZmExMTgvMGEzMGRkNTItODg3ZS0z
OTY4LTk0OTQtMjc2MjY4OThjZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWJlOGUzNmItN2E0NS00Zjg3LWI2
ZDYtNTVhNGExZGZhMTE4L2FiZThlMzZiLTdhNDUtNGY4Ny1iNmQ2LTU1YTRhMWRm
YTExOC5jcmwwHwYDVR0jBBgwFoAUQWwmlCGLBP+g7BOq1M1tu8MHT9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hYmU4ZTM2Yi03YTQ1LTRmODctYjZkNi01NWE0
YTFkZmExMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1w0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6DldNxV+qFzsyzqkhWNj7cVnLi+OJkLKMyE/cs1e3hxOAxq8eTtSXm
IlW6E9i9Fm6wPM/nFEnq8zyBrrjVC5XxRjT43EcGtEs91000lZLF1eh2UKGEract
PMnFgpweQ1Jtv2yUb50Y3StFrYALA/91qDePoeE1HIf28tX24GGcuMbWd40zkdvJ
HmXXAfomHVk5zlXO5YNeZco32LChA3gy/1ngGtmgYjszXT+LkXg31lrq172gVbC0
TFnjNTjgjkfZYBASbvlBRjmkpdMBVckz0POoL3GLtQ4HDHlrR4/wbnEJ0zrRbKWZ
qZMKoftSGyITUEYr8VkEeVoBp7ZG32U=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:34:51 2026 by rpki-client