Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa
File:                     779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa (raw, json)
Hash identifier:          xKj8qkt5noe7QtxTAxTr1p9uTNgWAaQlzWmKmsfCZn4=
Subject key identifier:   6C:04:2B:F1:6D:13:A8:D1:24:67:9B:D7:F7:1F:CF:F2:83:63:43:1B
Certificate issuer:       /CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687
Certificate serial:       010D0C9F4328584CFDE7B1D163F8FD93F6626298
Authority key identifier: 1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     400414
IP address blocks:        23.138.200.0/24 maxlen: 24
                          128.254.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:b1:d1:63:f8:fd:93:f6:62:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=69b148d1-17ac-4982-a2db-18495bee2a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:97:4e:81:58:7a:13:6f:6e:d7:72:ed:64:
                    e6:3f:51:dc:06:a4:58:a7:fc:23:25:45:21:df:2e:
                    21:31:62:3a:ed:e8:82:b5:b1:c2:68:ee:2a:48:4b:
                    35:84:ec:72:bc:f0:42:e3:c3:3d:41:ea:dc:b5:52:
                    36:de:1e:5e:90:d7:40:08:20:ab:3b:3e:61:05:d7:
                    d5:4c:ac:01:93:64:cb:09:19:2c:04:39:ed:65:b9:
                    36:ad:d1:0f:92:65:2d:8c:64:9e:b3:4a:ca:57:98:
                    f4:de:14:e0:ac:db:26:ae:59:68:c9:08:9b:73:9f:
                    d3:d1:1a:79:5d:01:07:e5:be:f7:4e:47:27:fa:70:
                    29:1a:2c:30:20:1b:2a:b3:7e:6b:74:9e:cc:e2:3a:
                    e3:22:76:b1:58:7b:15:63:1a:c3:8b:08:3f:c4:c3:
                    dc:c3:26:cb:83:c5:5d:a9:11:0b:4d:87:e2:bf:d1:
                    fa:9e:02:bd:34:18:eb:d8:bc:8e:0a:1e:e5:09:d1:
                    21:94:e6:4c:9e:27:84:25:a9:db:c5:2e:6b:32:a3:
                    5d:a1:27:0a:17:4c:9f:f7:94:d2:7a:fa:6f:12:ed:
                    e7:ca:a9:db:3c:68:84:09:98:ad:e6:ad:b4:f4:f5:
                    0a:be:b3:05:6b:84:31:b4:65:9b:1a:cb:d6:76:a9:
                    06:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:2B:F1:6D:13:A8:D1:24:67:9B:D7:F7:1F:CF:F2:83:63:43:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.crl

            X509v3 Authority Key Identifier:
                keyid:1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.200.0/24
                  128.254.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:7c:3d:3b:2a:ba:51:78:a5:ad:73:e5:c6:42:25:72:a2:
         ca:51:04:e6:a0:d6:c4:40:b0:0a:b7:ce:97:c1:86:9b:a3:ce:
         01:a6:85:14:e2:2b:34:7c:f9:14:b8:22:65:7a:e1:33:1b:40:
         8f:e7:e7:6e:f5:cb:f6:91:15:f4:35:09:16:b8:9f:8d:ff:28:
         3c:75:83:dd:43:b5:47:ba:29:b4:7d:97:3f:54:d1:31:5b:f6:
         90:53:a3:50:50:20:2c:4a:0b:d3:7b:6d:98:85:1c:0c:9d:bf:
         30:e9:9d:77:ba:39:41:8b:b3:6c:9c:53:38:10:62:63:5e:27:
         20:41:28:48:66:04:df:01:3b:e9:99:13:cd:20:b1:b5:28:fc:
         d5:58:68:59:bd:2f:a7:a0:d7:b6:74:02:b3:2a:1a:de:36:f2:
         58:c1:9d:ad:5c:cb:1c:e2:80:bc:fb:ee:b5:76:43:29:f9:d3:
         a0:5a:b3:bb:a5:b3:91:e7:d4:0a:c8:78:43:a2:24:aa:78:4c:
         be:1a:57:c9:e0:39:8a:9d:97:41:73:87:fd:7e:38:7f:40:86:
         52:f2:de:3a:0d:3c:3d:30:d1:d7:b1:84:47:4e:9c:de:3c:58:
         79:41:50:0a:89:5c:e9:72:d9:96:fc:9f:65:11:55:1e:b7:81:
         52:88:4c:ad
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEz957HRY/j9k/ZiYpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI5ZTk0YmEtMWJjMS00Y2I4LTkzYzktN2ZhZDc2MmVm
Njg3MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
NjliMTQ4ZDEtMTdhYy00OTgyLWEyZGItMTg0OTViZWUyYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOCXToFYehNvbtdy7WTmP1HcBqRYp/wjJUUh
3y4hMWI67eiCtbHCaO4qSEs1hOxyvPBC48M9QerctVI23h5ekNdACCCrOz5hBdfV
TKwBk2TLCRksBDntZbk2rdEPkmUtjGSes0rKV5j03hTgrNsmrlloyQibc5/T0Rp5
XQEH5b73Tkcn+nApGiwwIBsqs35rdJ7M4jrjInaxWHsVYxrDiwg/xMPcwybLg8Vd
qRELTYfiv9H6ngK9NBjr2LyOCh7lCdEhlOZMnieEJanbxS5rMqNdoScKF0yf95TS
evpvEu3nyqnbPGiECZit5q209PUKvrMFa4QxtGWbGsvWdqkGAQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGwEK/FtE6jRJGeb1/cfz/KDY0MbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83Mjll
OTRiYS0xYmMxLTRjYjgtOTNjOS03ZmFkNzYyZWY2ODcvNzc5YmMxYTYtOTM5MC0z
MTNlLWJkNjMtNWNlMmE5ODgyY2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzI5ZTk0YmEtMWJjMS00Y2I4LTkz
YzktN2ZhZDc2MmVmNjg3LzcyOWU5NGJhLTFiYzEtNGNiOC05M2M5LTdmYWQ3NjJl
ZjY4Ny5jcmwwHwYDVR0jBBgwFoAUGzzFZcrxI0urHLNyzapBY4L8lKIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MjllOTRiYS0xYmMxLTRjYjgtOTNjOS03ZmFk
NzYyZWY2ODcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4rIAwQC
gP60MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFvOfD07KrpReKWtc+XGQiVyospRBOag1sRAsAq3zpfBhpuj
zgGmhRTiKzR8+RS4ImV64TMbQI/n5271y/aRFfQ1CRa4n43/KDx1g91DtUe6KbR9
lz9U0TFb9pBTo1BQICxKC9N7bZiFHAydvzDpnXe6OUGLs2ycUzgQYmNeJyBBKEhm
BN8BO+mZE80gsbUo/NVYaFm9L6eg17Z0ArMqGt428ljBna1cyxzigLz77rV2Qyn5
06Bas7uls5Hn1ArIeEOiJKp4TL4aV8ngOYqdl0Fzh/1+OH9AhlLy3joNPD0w0dex
hEdOnN48WHlBUAqJXOly2Zb8n2URVR63gVKITK0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:13:51 2026 by rpki-client