Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/3aede203-d518-3424-bf41-64faca0e35c7.roa
File:                     3aede203-d518-3424-bf41-64faca0e35c7.roa (raw, json)
Hash identifier:          VN3S1YmzhnFPwrgWSZaigR1k8iRrQMwO8EaGz8O70ig=
Subject key identifier:   85:0B:8A:E3:00:95:CD:14:EC:0E:EC:0A:38:26:E4:07:AD:24:AC:E9
Certificate issuer:       /CN=794b722c-8055-4835-a39e-50fadbb9af0e
Certificate serial:       010D0C9F4328584EA0152C1AD7B998F654445800
Authority key identifier: 27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/3aede203-d518-3424-bf41-64faca0e35c7.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     400075
IP address blocks:        23.140.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2c:1a:d7:b9:98:f6:54:44:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794b722c-8055-4835-a39e-50fadbb9af0e
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=d42873c4-99e6-45e6-b2e0-b2005d19629a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:a4:39:09:08:63:d2:b6:2a:15:fa:30:d1:
                    17:8b:2d:bd:28:ff:c5:28:77:31:47:e1:87:4d:91:
                    58:82:b1:18:5d:9a:0b:e5:f4:53:ef:15:14:e3:a5:
                    c3:f6:5c:64:f9:ad:42:49:60:1e:61:39:5c:87:3d:
                    c9:2e:35:2f:03:a4:06:6b:25:ca:f6:69:22:b3:83:
                    84:a5:1d:b3:59:5d:7a:93:25:34:65:2d:27:d0:f8:
                    71:36:cb:2d:a9:d3:cc:76:4c:79:98:75:a2:d3:75:
                    34:c9:de:ed:1d:30:c1:0c:e7:3f:80:3f:84:da:2b:
                    fb:00:4e:8b:4b:04:94:44:cd:9d:e5:fe:b5:17:38:
                    1b:5d:4a:aa:5f:14:7b:2d:9e:6b:5d:19:28:22:c3:
                    85:5d:35:27:75:3e:2d:33:27:29:cd:60:a1:62:6f:
                    38:5c:94:fc:9c:7f:9c:e4:a4:66:59:e4:22:6b:9c:
                    10:7c:dd:e5:0c:68:d9:2b:9c:cf:35:2f:f4:d4:d5:
                    02:61:0f:be:08:b3:7a:8d:17:a4:96:35:45:7b:f7:
                    ea:c3:37:9d:d5:fb:a4:4e:55:9b:bc:3b:dc:4f:68:
                    e8:24:1f:14:34:c0:06:4e:1e:e2:00:2e:e9:41:97:
                    9a:d3:f5:8f:21:59:ef:b1:36:09:06:4b:c8:f4:45:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:8A:E3:00:95:CD:14:EC:0E:EC:0A:38:26:E4:07:AD:24:AC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/3aede203-d518-3424-bf41-64faca0e35c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl

            X509v3 Authority Key Identifier:
                keyid:27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f6:05:3b:11:91:9f:2d:47:0f:91:96:4d:d5:7a:95:4d:92:
         af:f8:f8:1d:f9:3e:97:eb:0c:72:41:24:e9:1d:b0:07:fb:22:
         eb:b8:7d:14:45:25:fb:f6:56:92:c1:f8:9c:48:89:fe:3a:d3:
         fa:60:2a:93:b9:44:3d:fc:c5:b5:ef:77:4b:2e:49:47:07:4b:
         fd:59:0b:09:99:cb:7e:4d:6b:f0:39:85:8c:19:9e:a3:82:67:
         50:7b:5d:90:5b:71:21:52:d8:85:20:13:9b:bf:16:85:db:78:
         c4:83:69:33:d9:42:1a:ad:1e:a5:aa:a7:68:23:5e:86:1a:4f:
         cf:94:df:84:c7:dc:ce:3e:b5:01:c4:7f:87:17:de:cd:37:4c:
         df:04:e7:c4:12:a6:f7:9d:93:38:53:1b:42:b1:e3:f5:71:9e:
         eb:4e:70:e8:00:05:30:37:6f:2b:85:a4:d2:c0:3d:05:0c:67:
         1f:96:c4:25:d0:01:64:d9:39:37:f1:ac:3b:f0:c8:22:fa:62:
         47:9c:8f:19:71:a3:62:88:4a:2e:00:9e:12:40:eb:fb:29:40:
         7f:b7:c7:d2:c4:c9:a4:52:e8:e3:9e:94:a3:b3:2c:2d:a8:a3:
         3f:39:92:d0:e0:55:dc:52:45:37:57:c7:6a:63:40:01:74:e8:
         89:bd:b8:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSwa17mY9lREWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzk0YjcyMmMtODA1NS00ODM1LWEzOWUtNTBmYWRiYjlh
ZjBlMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
ZDQyODczYzQtOTllNi00NWU2LWIyZTAtYjIwMDVkMTk2MjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYKkOQkIY9K2KhX6MNEXiy29KP/FKHcxR+GH
TZFYgrEYXZoL5fRT7xUU46XD9lxk+a1CSWAeYTlchz3JLjUvA6QGayXK9mkis4OE
pR2zWV16kyU0ZS0n0PhxNsstqdPMdkx5mHWi03U0yd7tHTDBDOc/gD+E2iv7AE6L
SwSURM2d5f61FzgbXUqqXxR7LZ5rXRkoIsOFXTUndT4tMycpzWChYm84XJT8nH+c
5KRmWeQia5wQfN3lDGjZK5zPNS/01NUCYQ++CLN6jRekljVFe/fqwzed1fukTlWb
vDvcT2joJB8UNMAGTh7iAC7pQZea0/WPIVnvsTYJBkvI9EVE1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIULiuMAlc0U7A7sCjgm5AetJKzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OTRi
NzIyYy04MDU1LTQ4MzUtYTM5ZS01MGZhZGJiOWFmMGUvM2FlZGUyMDMtZDUxOC0z
NDI0LWJmNDEtNjRmYWNhMGUzNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzk0YjcyMmMtODA1NS00ODM1LWEz
OWUtNTBmYWRiYjlhZjBlLzc5NGI3MjJjLTgwNTUtNDgzNS1hMzllLTUwZmFkYmI5
YWYwZS5jcmwwHwYDVR0jBBgwFoAUJykwEiFyOOd2Bk58hJnOPU9JX7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OTRiNzIyYy04MDU1LTQ4MzUtYTM5ZS01MGZh
ZGJiOWFmMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4zoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED2BTsRkZ8tRw+Rlk3VepVNkq/4+B35PpfrDHJBJOkdsAf7Iuu4fRRF
Jfv2VpLB+JxIif460/pgKpO5RD38xbXvd0suSUcHS/1ZCwmZy35Na/A5hYwZnqOC
Z1B7XZBbcSFS2IUgE5u/FoXbeMSDaTPZQhqtHqWqp2gjXoYaT8+U34TH3M4+tQHE
f4cX3s03TN8E58QSpvedkzhTG0Kx4/VxnutOcOgABTA3byuFpNLAPQUMZx+WxCXQ
AWTZOTfxrDvwyCL6Ykecjxlxo2KISi4AnhJA6/spQH+3x9LEyaRS6OOelKOzLC2o
oz85ktDgVdxSRTdXx2pjQAF06Im9uPY=
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:01:20 2026 by rpki-client