Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa
File:                     8e87b93f-f077-3393-9870-dbc62c961c83.roa (raw, json)
Hash identifier:          2u8il47ygZUVlkE+y8N66zf6HK2GAhFqGOOvGPxHK0U=
Subject key identifier:   7F:0F:6B:3B:74:AD:94:76:93:1F:18:E6:15:F5:39:FE:47:74:1D:40
Certificate issuer:       /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2
Certificate serial:       010D0C9F4328584E0A6FF0D2E6A03E898E91B180
Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     54004
IP address blocks:        23.141.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f0:d2:e6:a0:3e:89:8e:91:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=60d7ddf8-2afb-4774-94c0-377fbd59b65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:67:84:e0:0e:85:f3:df:5d:24:af:42:6c:
                    d0:bf:d0:db:00:ea:e2:68:03:2f:a1:31:a7:87:be:
                    cb:fa:05:54:e8:9b:ad:bc:9d:d5:cf:86:e2:68:22:
                    de:a6:dc:97:91:62:07:f8:8e:83:b7:31:4d:48:88:
                    13:47:d6:a7:dd:22:c5:a2:14:85:4e:bd:a0:11:6d:
                    79:84:8b:0c:c7:e6:ed:6f:50:0c:ea:a6:7d:31:b4:
                    7b:53:81:fd:15:f5:36:c7:52:73:82:b8:70:4b:f8:
                    c4:73:32:92:fb:17:84:72:9f:c7:a9:52:8b:7b:0c:
                    f3:d2:1a:7d:98:64:f4:bf:da:82:10:c4:03:b2:54:
                    82:91:66:c4:2d:e2:2c:12:c6:3c:51:8e:2c:7c:82:
                    fe:6b:e7:05:6a:17:97:d5:99:db:f9:ca:0b:ba:78:
                    8d:b6:3d:ec:0a:2a:ee:f3:88:4d:67:1f:65:eb:8e:
                    12:6a:38:5e:a0:65:53:79:6a:ca:6d:0c:72:fc:b4:
                    1d:62:59:38:ea:2e:17:28:e0:2b:82:31:a7:da:7c:
                    ad:21:05:3d:74:51:00:f9:c1:16:c9:ad:5a:00:8d:
                    d2:fa:b9:4a:e4:87:0f:1c:4d:c3:e7:1d:bb:ab:10:
                    ec:f5:08:31:d5:e3:10:8f:33:8a:67:a3:a8:fc:09:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:6B:3B:74:AD:94:76:93:1F:18:E6:15:F5:39:FE:47:74:1D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl

            X509v3 Authority Key Identifier:
                keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:77:2c:6f:e8:04:88:4b:99:ec:7d:b0:00:4a:7e:2e:a7:
         bf:ce:fb:a6:5f:eb:7d:df:28:2d:41:b1:d0:b6:e7:a3:eb:db:
         65:45:97:68:de:66:df:4c:5a:20:66:2b:73:db:2e:18:e6:36:
         8c:3f:ff:d6:ba:b0:5e:66:a4:1f:d3:66:f7:b1:2a:87:68:92:
         2f:08:0b:2a:20:61:e0:0a:e5:34:fb:0b:49:8a:6b:5f:5b:e9:
         2b:01:d9:30:e9:75:8f:c8:ad:15:72:02:b7:c4:dd:7a:c6:4a:
         21:d8:8f:a7:b6:19:4e:91:ac:90:61:d8:39:ff:84:57:51:ba:
         c4:41:eb:ee:b8:bb:87:ef:a2:e7:f5:67:10:c3:de:39:e6:5d:
         cc:1f:43:63:c0:58:b5:fd:24:00:fa:18:24:27:ba:5f:16:00:
         04:88:fb:1d:0a:42:9d:70:3f:5c:21:3f:e9:21:2d:db:98:d9:
         8f:02:7a:32:5b:2b:42:f3:0e:0c:0e:8c:f2:03:0e:d9:ea:9b:
         5f:0c:57:48:ab:5d:00:dc:a7:4e:c3:8f:c0:c5:63:55:06:6b:
         38:90:90:79:b6:0a:1c:26:50:10:06:1e:32:1d:12:25:2e:67:
         5f:b2:a0:78:92:88:dc:cd:e9:d9:f8:ba:e1:da:70:46:b7:59:
         e3:b8:e2:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/DS5qA+iY6RsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz
OGUyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
NjBkN2RkZjgtMmFmYi00Nzc0LTk0YzAtMzc3ZmJkNTliNjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YBnhOAOhfPfXSSvQmzQv9DbAOriaAMvoTGn
h77L+gVU6JutvJ3Vz4biaCLeptyXkWIH+I6DtzFNSIgTR9an3SLFohSFTr2gEW15
hIsMx+btb1AM6qZ9MbR7U4H9FfU2x1JzgrhwS/jEczKS+xeEcp/HqVKLewzz0hp9
mGT0v9qCEMQDslSCkWbELeIsEsY8UY4sfIL+a+cFaheX1Znb+coLuniNtj3sCiru
84hNZx9l644SajheoGVTeWrKbQxy/LQdYlk46i4XKOArgjGn2nytIQU9dFEA+cEW
ya1aAI3S+rlK5IcPHE3D5x27qxDs9Qgx1eMQjzOKZ6Oo/AlmrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8Pazt0rZR2kx8Y5hX1Of5HdB1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw
ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvOGU4N2I5M2YtZjA3Ny0z
MzkzLTk4NzAtZGJjNjJjOTYxYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2
MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0
MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0
OTcyNDM4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGn6dyxv6ASIS5nsfbAASn4up7/O+6Zf633fKC1BsdC256Pr22VFl2je
Zt9MWiBmK3PbLhjmNow//9a6sF5mpB/TZvexKodoki8ICyogYeAK5TT7C0mKa19b
6SsB2TDpdY/IrRVyArfE3XrGSiHYj6e2GU6RrJBh2Dn/hFdRusRB6+64u4fvouf1
ZxDD3jnmXcwfQ2PAWLX9JAD6GCQnul8WAASI+x0KQp1wP1whP+khLduY2Y8CejJb
K0LzDgwOjPIDDtnqm18MV0irXQDcp07Dj8DFY1UGaziQkHm2ChwmUBAGHjIdEiUu
Z1+yoHiSiNzN6dn4uuHacEa3WeO44qo=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:49 2026 by rpki-client