Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa
File:                     33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa (raw, json)
Hash identifier:          DuKPVXrPuDNOi2Ti6xwFZVcJzuFGkQzqjs1UkcFf7/w=
Subject key identifier:   E5:E4:F1:92:F0:2D:C8:42:5E:C1:89:7F:A1:46:11:A0:92:E5:D9:68
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EA798EE5B5386A1EF2EFAE300
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7131
IP address blocks:        8.3.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:ee:5b:53:86:a1:ef:2e:fa:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1424b2eb-242a-4008-8a77-0e59fc348560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:2e:d6:b6:24:46:2a:df:e8:8a:bf:3f:25:
                    0a:5f:8d:1e:e3:20:2a:12:0a:ff:90:0d:64:50:41:
                    2c:ed:f8:23:d7:0b:c4:84:ad:dc:f8:ac:b9:8a:71:
                    d4:e3:27:98:e4:23:21:09:3a:18:d6:a5:cf:78:e0:
                    b4:cd:0b:4c:08:e1:0f:af:3b:16:57:3e:11:f9:c6:
                    a0:87:ca:1e:75:87:db:51:b6:36:e4:3c:67:22:c5:
                    d7:f2:85:0f:e2:3b:57:2b:03:49:ac:b2:3c:d2:5f:
                    71:25:f2:19:af:6b:33:71:89:8b:c9:ce:72:b3:ef:
                    83:07:5e:f2:71:f0:92:c6:0c:56:5b:37:a4:f5:16:
                    d7:3b:d4:5a:d1:83:5e:e7:09:90:00:93:f1:c0:b6:
                    d3:0d:44:9d:21:c5:f2:a0:f2:f8:16:4a:33:48:63:
                    59:35:63:77:bf:c6:69:77:e0:3e:14:06:5f:95:64:
                    32:0d:91:b2:26:0f:57:6f:9b:6f:24:67:0f:c1:67:
                    68:7f:aa:fe:49:06:76:21:49:67:62:fc:02:85:de:
                    13:04:13:0b:02:d6:45:76:46:96:4c:c9:bc:d0:e1:
                    b6:ca:8d:07:f0:18:9e:60:e3:70:24:74:89:71:4c:
                    d3:fe:01:51:ef:bf:5a:5a:eb:76:76:d6:de:ce:80:
                    2a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:F1:92:F0:2D:C8:42:5E:C1:89:7F:A1:46:11:A0:92:E5:D9:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.3.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:64:92:54:19:88:6a:ef:10:a0:a3:71:b7:14:e9:4e:48:19:
         a8:0a:af:2d:21:ea:79:7d:30:c1:2b:70:bb:60:08:a0:4e:23:
         d6:6a:4c:9f:31:00:88:04:aa:39:ef:4c:0c:d2:1e:b6:cd:8c:
         60:a5:1f:31:08:3c:7e:0a:3e:46:ef:62:c9:d0:38:6c:26:de:
         60:5b:12:d0:96:6b:97:d5:2a:18:7c:df:ab:27:5a:fb:3d:7a:
         2e:de:9a:98:eb:76:66:c2:5f:86:d6:6b:38:6a:ea:53:db:2f:
         7d:29:df:cb:76:44:bd:19:70:35:80:4a:39:7f:02:29:7c:c0:
         58:6f:81:d6:81:ff:ed:fc:db:19:9f:b7:42:6e:9d:4d:aa:6c:
         6a:0a:66:31:16:32:d7:e1:2f:4a:16:d7:ca:9a:ab:2f:b4:82:
         97:c0:86:7e:21:05:9b:9a:55:39:e8:03:45:6d:14:6f:bf:7a:
         dd:38:e5:6a:d7:26:13:28:4d:ab:0b:aa:c9:78:f7:64:cb:f9:
         ef:68:27:07:c6:f5:4b:2f:65:12:59:44:25:f7:b2:76:82:d4:
         d8:fa:d4:5c:71:cf:f2:9a:de:1d:aa:10:12:57:07:fa:cc:e1:
         4e:17:64:9b:de:e9:ec:ce:a5:65:e9:e0:97:1b:9f:06:83:75:
         29:24:07:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmO5bU4ah7y764wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTQyNGIyZWItMjQyYS00MDA4LThhNzctMGU1OWZjMzQ4NTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzcu1rYkRirf6Iq/PyUKX40e4yAqEgr/kA1k
UEEs7fgj1wvEhK3c+Ky5inHU4yeY5CMhCToY1qXPeOC0zQtMCOEPrzsWVz4R+cag
h8oedYfbUbY25DxnIsXX8oUP4jtXKwNJrLI80l9xJfIZr2szcYmLyc5ys++DB17y
cfCSxgxWWzek9RbXO9Ra0YNe5wmQAJPxwLbTDUSdIcXyoPL4FkozSGNZNWN3v8Zp
d+A+FAZflWQyDZGyJg9Xb5tvJGcPwWdof6r+SQZ2IUlnYvwChd4TBBMLAtZFdkaW
TMm80OG2yo0H8BieYONwJHSJcUzT/gFR779aWut2dtbezoAqSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXk8ZLwLchCXsGJf6FGEaCS5dloMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzNjMGNjNGEtYTAwOS0z
ZmQzLTkzZjctNTYwZWJkYzA5YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECANwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxkklQZiGrvEKCjcbcU6U5IGagKry0h6nl9MMErcLtgCKBOI9ZqTJ8x
AIgEqjnvTAzSHrbNjGClHzEIPH4KPkbvYsnQOGwm3mBbEtCWa5fVKhh836snWvs9
ei7empjrdmbCX4bWazhq6lPbL30p38t2RL0ZcDWASjl/Ail8wFhvgdaB/+382xmf
t0JunU2qbGoKZjEWMtfhL0oW18qaqy+0gpfAhn4hBZuaVTnoA0VtFG+/et045WrX
JhMoTasLqsl492TL+e9oJwfG9UsvZRJZRCX3snaC1Nj61Fxxz/Ka3h2qEBJXB/rM
4U4XZJve6ezOpWXp4JcbnwaDdSkkB7I=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:56 2026 by rpki-client