Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
File:                     77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa (raw, json)
Hash identifier:          uCZJ9iFd2ZN6ljQfmqYO1w2SYONiypcmEQjXiNhWrJQ=
Subject key identifier:   CB:22:61:F7:19:AE:23:6C:C3:04:6C:3E:F2:27:6A:03:D4:35:E1:A6
Certificate issuer:       /CN=d70b978a-944a-401c-aa25-2ebbd4d58340
Certificate serial:       010D0C9F4328584CED277EADE65C6C81A72121A0
Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     395231
IP address blocks:        23.143.8.0/24 maxlen: 24
                          2602:27c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:7e:ad:e6:5c:6c:81:a7:21:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=4d46c9a8-b90a-4dce-be82-335e5884d5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:e7:89:ff:68:58:1c:52:64:73:89:3b:4d:
                    9b:53:5e:96:15:2e:8d:60:07:37:3d:c6:6c:e8:90:
                    d1:b6:75:04:12:21:2b:27:29:6d:a4:87:cb:3e:23:
                    5b:26:dd:db:c8:4c:e2:52:98:16:6c:83:cf:d3:d7:
                    91:0f:48:ce:bf:bb:02:be:bd:42:e6:d9:60:b3:02:
                    84:46:e4:fe:5b:ff:a2:39:54:7a:14:2a:7a:4e:15:
                    ac:b6:0a:81:91:36:c9:dc:af:ae:c6:c6:32:99:52:
                    55:7b:ee:65:66:a8:7b:2e:77:ce:94:18:b0:57:b8:
                    aa:f4:28:72:03:5c:96:41:0c:d6:1d:55:b4:5d:7a:
                    eb:a0:e3:55:09:66:fb:8a:78:3e:e7:ac:5d:bb:b6:
                    23:cb:be:7e:d0:e6:14:63:7e:17:7c:bf:85:ea:16:
                    b5:03:26:2e:66:3b:f7:71:c1:fc:ae:0b:cf:f8:c0:
                    9e:39:55:78:e5:0a:36:1f:7d:d8:60:41:a5:fc:a5:
                    b8:a9:26:74:95:a3:a9:1a:1b:3b:23:40:33:83:f3:
                    b3:6a:cd:f6:36:3f:72:b0:cd:5e:a9:24:e6:42:9f:
                    42:cd:ad:53:31:3a:5e:1f:a5:0b:c4:c2:5d:86:e5:
                    9b:92:de:8f:bf:85:2d:38:23:70:82:e0:e4:31:62:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:22:61:F7:19:AE:23:6C:C3:04:6C:3E:F2:27:6A:03:D4:35:E1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/77cdf805-665a-3e8f-94c3-58e2cb293bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl

            X509v3 Authority Key Identifier:
                keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.8.0/24
                IPv6:
                  2602:27c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:d5:ab:7a:0b:96:16:82:5f:a2:c9:af:f1:aa:6c:cd:9a:
         12:22:ae:6e:ba:89:6e:4e:a2:a3:fc:7b:1a:9a:d5:53:23:85:
         73:7d:30:c9:5e:5e:de:be:6d:f0:bd:69:eb:d2:23:e5:d3:0c:
         2f:4b:0f:9e:c2:ee:e5:a0:17:c3:4e:20:01:09:d3:be:d3:cf:
         98:62:49:d4:05:66:13:c4:15:47:57:de:08:e6:08:ef:e1:05:
         62:f4:22:ad:3f:9e:b8:3a:c3:4a:b5:3e:f6:56:50:da:8e:52:
         0b:d2:ff:e4:5f:5f:bb:8e:b4:b8:93:6c:80:54:e9:7e:d6:f5:
         1a:e4:69:af:2a:03:51:01:9a:54:f6:60:1e:62:99:9c:c0:5a:
         5d:fc:17:a0:54:14:99:c5:13:c2:cc:ef:d6:f4:01:04:ed:c3:
         dc:ce:da:67:20:ac:8c:42:79:71:9a:f5:a5:d3:77:3e:52:9d:
         e2:7f:d1:ef:49:bc:2c:d8:d7:3e:20:5c:02:43:e8:fa:2e:59:
         d5:a7:c5:53:b5:af:4f:cf:ab:a3:6e:32:a4:15:bf:37:63:ed:
         b9:b2:24:75:77:c6:d8:4c:c9:ca:bb:26:61:d5:18:1a:2f:19:
         7c:42:ba:de:48:9a:17:6f:1d:25:f7:46:7d:e7:b8:78:cf:2e:
         6b:4d:a9:2e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEztJ36t5lxsgachIaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4
MzQwMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
NGQ0NmM5YTgtYjkwYS00ZGNlLWJlODItMzM1ZTU4ODRkNWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKrnif9oWBxSZHOJO02bU16WFS6NYAc3PcZs
6JDRtnUEEiErJyltpIfLPiNbJt3byEziUpgWbIPP09eRD0jOv7sCvr1C5tlgswKE
RuT+W/+iOVR6FCp6ThWstgqBkTbJ3K+uxsYymVJVe+5lZqh7LnfOlBiwV7iq9Chy
A1yWQQzWHVW0XXrroONVCWb7ing+56xdu7Yjy75+0OYUY34XfL+F6ha1AyYuZjv3
ccH8rgvP+MCeOVV45Qo2H33YYEGl/KW4qSZ0laOpGhs7I0Azg/Ozas32Nj9ysM1e
qSTmQp9Cza1TMTpeH6ULxMJdhuWbkt6Pv4UtOCNwguDkMWIjsQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFMsiYfcZriNswwRsPvInagPUNeGmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi
OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvNzdjZGY4MDUtNjY1YS0z
ZThmLTk0YzMtNThlMmNiMjkzYmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh
MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1
ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi
ZDRkNTgzNDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF48IMA4E
AgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/ytWreguWFoJfosmv8apszZoSIq5uuolu
TqKj/HsamtVTI4VzfTDJXl7evm3wvWnr0iPl0wwvSw+ewu7loBfDTiABCdO+08+Y
YknUBWYTxBVHV94I5gjv4QVi9CKtP564OsNKtT72VlDajlIL0v/kX1+7jrS4k2yA
VOl+1vUa5GmvKgNRAZpU9mAeYpmcwFpd/BegVBSZxRPCzO/W9AEE7cPcztpnIKyM
QnlxmvWl03c+Up3if9HvSbws2Nc+IFwCQ+j6LlnVp8VTta9Pz6ujbjKkFb83Y+25
siR1d8bYTMnKuyZh1RgaLxl8QrreSJoXbx0l90Z957h4zy5rTaku
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:48 2026 by rpki-client