Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/e99dd964-6d78-322c-9e4a-61a50354dc1d.roa
File:                     e99dd964-6d78-322c-9e4a-61a50354dc1d.roa (raw, json)
Hash identifier:          555+roagWvINLpHEoKKem4CbeZlT1uEfFZhl9zYocs8=
Subject key identifier:   0E:7F:94:9A:D0:05:2B:38:70:0E:26:4D:02:63:A8:5E:EE:F4:0B:05
Certificate issuer:       /CN=d489668a-f993-4f95-90e5-c584eabef64b
Certificate serial:       010D0C9F4328584E5D14B952ADB8876B63DE1600
Authority key identifier: 34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/e99dd964-6d78-322c-9e4a-61a50354dc1d.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     402026
IP address blocks:        23.156.20.0/24 maxlen: 24
                          2602:f549:151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:b9:52:ad:b8:87:6b:63:de:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d489668a-f993-4f95-90e5-c584eabef64b
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=dc1219b7-d109-4ab6-a842-80230c729a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:fb:69:4d:99:a2:03:0f:0a:02:ff:f9:b5:
                    1f:d6:82:74:44:3f:48:37:ae:fc:f4:2c:9c:1a:12:
                    f6:7c:d5:d8:bc:b7:4b:28:9a:e2:e0:dd:79:1c:4d:
                    35:fc:0c:9f:34:be:a6:53:c8:e1:88:fb:6f:d7:ec:
                    c2:69:f8:ed:82:ed:59:70:3a:f5:36:07:04:a8:b2:
                    35:9c:ff:32:4e:f3:4b:fc:8b:1c:d2:b6:fa:03:f5:
                    0c:3f:4f:77:bc:f0:e2:27:6b:17:d8:78:ab:6c:b5:
                    d8:02:78:e5:d9:e4:13:d7:25:4f:f1:8c:36:42:58:
                    60:38:7d:54:b5:b7:10:78:c0:fd:ab:f7:fe:92:d7:
                    d6:61:97:c8:39:aa:df:7e:64:32:f7:a7:3b:1b:14:
                    73:03:f9:9d:ab:c7:33:c6:40:27:9b:61:74:9a:cf:
                    ac:e4:1d:2c:a8:b4:47:f3:42:33:1a:7b:dc:c3:74:
                    26:ef:eb:9f:83:d0:ec:d1:85:26:43:d9:ae:ce:86:
                    f1:d4:9f:0e:ba:5e:8e:74:34:ef:a0:2c:7f:a4:fd:
                    5d:f0:c4:0f:82:6e:38:7f:b0:a6:5b:3d:b0:a1:d2:
                    69:3c:05:b9:e4:77:b6:f3:13:1f:6b:7f:45:e3:36:
                    53:39:fe:81:90:a4:5f:66:4d:7a:59:e8:69:3d:a5:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7F:94:9A:D0:05:2B:38:70:0E:26:4D:02:63:A8:5E:EE:F4:0B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/e99dd964-6d78-322c-9e4a-61a50354dc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b/d489668a-f993-4f95-90e5-c584eabef64b.crl

            X509v3 Authority Key Identifier:
                keyid:34:AA:F7:71:65:BB:52:CA:05:49:3E:66:71:5F:18:62:87:72:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d489668a-f993-4f95-90e5-c584eabef64b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.20.0/24
                IPv6:
                  2602:f549:151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:27:60:f4:fb:ec:60:79:c0:df:ed:be:ce:bc:ec:c1:43:44:
         bf:b2:97:16:f5:ab:60:ef:55:d2:66:c1:7c:32:cb:16:e0:97:
         c9:64:72:70:7a:f6:60:29:42:44:f4:26:d5:ac:ef:4a:c9:71:
         a6:c8:d4:90:da:8a:b2:42:14:80:98:e1:13:b5:2f:b2:3f:0b:
         21:82:07:db:4a:29:23:7d:e5:75:6e:df:a8:8e:0e:09:9b:9b:
         84:81:17:7e:65:cc:c6:9a:0f:38:38:db:34:21:9d:58:e2:57:
         82:91:cc:26:5d:ba:e9:b7:5e:30:20:46:86:31:b8:4b:25:a1:
         dc:09:84:72:4c:a5:93:38:73:29:5e:70:02:76:c0:9e:98:14:
         03:5b:ec:40:ea:a1:d8:71:1a:81:98:5d:24:d2:5f:62:25:3e:
         01:38:b2:e7:e7:49:d6:bb:01:28:90:f4:91:a1:5d:c9:b2:a7:
         61:4c:01:98:6d:0d:e7:fc:c0:4d:59:02:16:bc:06:05:23:c1:
         f7:42:2c:59:f5:85:7c:14:2c:e1:a5:bf:3b:52:d2:32:8f:68:
         62:c2:23:69:6f:b0:ab:ce:5c:1a:8d:09:b6:df:90:24:fc:04:
         df:65:f4:b6:86:10:df:fa:a9:e8:48:4f:46:13:ae:b9:84:95:
         aa:70:90:48
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5dFLlSrbiHa2PeFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ4OTY2OGEtZjk5My00Zjk1LTkwZTUtYzU4NGVhYmVm
NjRiMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
ZGMxMjE5YjctZDEwOS00YWI2LWE4NDItODAyMzBjNzI5YTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s/7aU2ZogMPCgL/+bUf1oJ0RD9IN6789Cyc
GhL2fNXYvLdLKJri4N15HE01/AyfNL6mU8jhiPtv1+zCafjtgu1ZcDr1NgcEqLI1
nP8yTvNL/Isc0rb6A/UMP093vPDiJ2sX2HirbLXYAnjl2eQT1yVP8Yw2QlhgOH1U
tbcQeMD9q/f+ktfWYZfIOarffmQy96c7GxRzA/mdq8czxkAnm2F0ms+s5B0sqLRH
80IzGnvcw3Qm7+ufg9Ds0YUmQ9muzobx1J8Oul6OdDTvoCx/pP1d8MQPgm44f7Cm
Wz2wodJpPAW55He28xMfa39F4zZTOf6BkKRfZk16WehpPaXtUwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFA5/lJrQBSs4cA4mTQJjqF7u9AsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDg5
NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0ZWFiZWY2NGIvZTk5ZGQ5NjQtNmQ3OC0z
MjJjLTllNGEtNjFhNTAzNTRkYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQ4OTY2OGEtZjk5My00Zjk1LTkw
ZTUtYzU4NGVhYmVmNjRiL2Q0ODk2NjhhLWY5OTMtNGY5NS05MGU1LWM1ODRlYWJl
ZjY0Yi5jcmwwHwYDVR0jBBgwFoAUNKr3cWW7UsoFST5mcV8YYodyoBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNDg5NjY4YS1mOTkzLTRmOTUtOTBlNS1jNTg0
ZWFiZWY2NGIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5wUMA8E
AgACMAkDBwAmAvVJAVEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQSdg9PvsYHnA3+2+zrzswUNEv7KXFvWr
YO9V0mbBfDLLFuCXyWRycHr2YClCRPQm1azvSslxpsjUkNqKskIUgJjhE7Uvsj8L
IYIH20opI33ldW7fqI4OCZubhIEXfmXMxpoPODjbNCGdWOJXgpHMJl266bdeMCBG
hjG4SyWh3AmEckylkzhzKV5wAnbAnpgUA1vsQOqh2HEagZhdJNJfYiU+ATiy5+dJ
1rsBKJD0kaFdybKnYUwBmG0N5/zATVkCFrwGBSPB90IsWfWFfBQs4aW/O1LSMo9o
YsIjaW+wq85cGo0Jtt+QJPwE32X0toYQ3/qp6EhPRhOuuYSVqnCQSA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:14:28 2026 by rpki-client