Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/e2a99546-ec1f-3e07-b38c-0f7298907be9.roa
File:                     e2a99546-ec1f-3e07-b38c-0f7298907be9.roa (raw, json)
Hash identifier:          dEUjyB2CwPLom9fHuMzY36CKNgu0oJbReds8nnV0uMI=
Subject key identifier:   7B:80:4F:39:8F:17:58:0E:72:58:3D:30:C3:EC:C3:ED:49:F8:24:08
Certificate issuer:       /CN=dec2e862-2539-4fd7-a8e3-0930c1d95215
Certificate serial:       010D0C9F4328584E48247BB20A94AB867E4BA018
Authority key identifier: 74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/e2a99546-ec1f-3e07-b38c-0f7298907be9.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        23.143.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7b:b2:0a:94:ab:86:7e:4b:a0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec2e862-2539-4fd7-a8e3-0930c1d95215
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=a7c636f8-3667-466f-8efd-f3540e5c6e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:fe:3b:a1:2f:4b:d3:bf:04:35:73:ff:97:
                    23:22:98:8f:e7:ab:89:b8:c7:34:1c:a3:bf:85:27:
                    5a:ba:2c:6b:09:fb:64:2c:94:3f:26:bb:22:3c:1f:
                    c0:a6:c0:f9:cd:6c:45:b0:eb:4e:78:13:70:b7:5d:
                    5a:3a:64:46:4a:fa:50:e8:ab:d5:9b:08:a1:8f:e2:
                    2d:d1:00:13:24:1c:c5:f5:93:3d:7b:4b:b7:1b:6c:
                    d3:45:02:8b:fc:7e:a9:39:6b:c7:dc:ae:d4:0d:9c:
                    c8:45:e8:6e:15:56:17:a6:03:08:9d:78:d9:4d:b8:
                    a0:c1:ec:10:80:92:80:26:72:d6:ac:14:04:8b:37:
                    59:6b:4d:81:bd:3d:ce:77:f0:56:3a:09:19:ff:d2:
                    e9:d9:f0:7a:b3:c7:90:84:c8:f1:b2:d8:af:0a:05:
                    eb:69:51:7d:6f:58:08:af:36:49:af:81:91:3e:e2:
                    71:8a:7c:8e:0f:dc:23:e9:82:33:7c:a5:76:e0:11:
                    61:e9:aa:17:e2:de:28:4e:43:61:7d:46:2f:a4:2e:
                    05:27:36:b4:85:b3:60:9a:d7:16:f6:4c:60:63:9f:
                    ff:83:38:99:86:09:f9:86:88:41:91:42:25:8f:21:
                    de:99:4a:5a:a4:39:2c:cb:33:3b:f4:e1:54:0e:00:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:4F:39:8F:17:58:0E:72:58:3D:30:C3:EC:C3:ED:49:F8:24:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/e2a99546-ec1f-3e07-b38c-0f7298907be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215/dec2e862-2539-4fd7-a8e3-0930c1d95215.crl

            X509v3 Authority Key Identifier:
                keyid:74:15:5B:D6:B8:C4:B2:C2:49:82:E7:3E:4A:16:77:1C:C0:60:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dec2e862-2539-4fd7-a8e3-0930c1d95215.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f6:28:30:4c:d9:0f:b8:6c:c6:30:ef:b1:36:64:90:31:84:
         0d:0a:ae:cb:23:68:5a:0d:53:47:31:c6:69:43:29:17:c9:57:
         ab:93:4c:18:24:45:9c:07:c2:a1:d6:23:12:c6:2b:d1:98:6b:
         1b:3a:6f:a1:c8:99:d7:c4:e8:ef:c1:a7:9b:05:90:d6:87:21:
         70:2d:0d:81:53:f6:ef:83:af:81:6d:6f:d4:8e:5b:c5:e8:af:
         21:1d:ff:dd:28:c3:66:fc:ae:82:f3:a7:d3:e5:08:66:0e:12:
         89:7a:ba:69:84:80:cb:eb:81:97:a2:dd:0c:fd:3a:e4:58:db:
         7e:ea:37:35:f0:be:e9:dd:c6:7a:4b:55:b1:b3:d0:94:4c:65:
         54:98:fc:aa:76:36:7e:f4:6c:22:33:63:75:06:54:8f:f1:0f:
         2e:cd:20:76:64:63:db:35:f5:65:bb:dc:2f:b4:e3:f0:81:b1:
         a9:d4:8d:53:04:20:6d:c3:14:64:13:41:b1:b9:dd:5a:62:cf:
         c9:e9:3a:90:f7:cf:78:4a:60:57:85:35:da:74:06:d7:c4:d6:
         3d:a6:f9:6c:ae:7c:4a:ce:81:22:30:7a:86:5e:e0:c9:73:8d:
         0c:d4:35:c8:5e:a3:fe:66:e4:9c:88:9d:ec:e4:66:f8:11:ca:
         62:fe:ee:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJHuyCpSrhn5LoBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGVjMmU4NjItMjUzOS00ZmQ3LWE4ZTMtMDkzMGMxZDk1
MjE1MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
YTdjNjM2ZjgtMzY2Ny00NjZmLThlZmQtZjM1NDBlNWM2ZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD3+O6EvS9O/BDVz/5cjIpiP56uJuMc0HKO/
hSdauixrCftkLJQ/JrsiPB/ApsD5zWxFsOtOeBNwt11aOmRGSvpQ6KvVmwihj+It
0QATJBzF9ZM9e0u3G2zTRQKL/H6pOWvH3K7UDZzIRehuFVYXpgMInXjZTbigwewQ
gJKAJnLWrBQEizdZa02BvT3Od/BWOgkZ/9Lp2fB6s8eQhMjxstivCgXraVF9b1gI
rzZJr4GRPuJxinyOD9wj6YIzfKV24BFh6aoX4t4oTkNhfUYvpC4FJza0hbNgmtcW
9kxgY5//gziZhgn5hohBkUIljyHemUpapDksyzM79OFUDgAGNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuATzmPF1gOclg9MMPsw+1J+CQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZWMy
ZTg2Mi0yNTM5LTRmZDctYThlMy0wOTMwYzFkOTUyMTUvZTJhOTk1NDYtZWMxZi0z
ZTA3LWIzOGMtMGY3Mjk4OTA3YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGVjMmU4NjItMjUzOS00ZmQ3LWE4
ZTMtMDkzMGMxZDk1MjE1L2RlYzJlODYyLTI1MzktNGZkNy1hOGUzLTA5MzBjMWQ5
NTIxNS5jcmwwHwYDVR0jBBgwFoAUdBVb1rjEssJJguc+ShZ3HMBgau4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kZWMyZTg2Mi0yNTM5LTRmZDctYThlMy0wOTMw
YzFkOTUyMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4+MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH2KDBM2Q+4bMYw77E2ZJAxhA0KrssjaFoNU0cxxmlDKRfJV6uTTBgk
RZwHwqHWIxLGK9GYaxs6b6HImdfE6O/Bp5sFkNaHIXAtDYFT9u+Dr4Ftb9SOW8Xo
ryEd/90ow2b8roLzp9PlCGYOEol6ummEgMvrgZei3Qz9OuRY237qNzXwvundxnpL
VbGz0JRMZVSY/Kp2Nn70bCIzY3UGVI/xDy7NIHZkY9s19WW73C+04/CBsanUjVME
IG3DFGQTQbG53Vpiz8npOpD3z3hKYFeFNdp0BtfE1j2m+WyufErOgSIweoZe4Mlz
jQzUNcheo/5m5JyInezkZvgRymL+7ts=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:58 2026 by rpki-client