Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/c6015c3a-1478-3ff0-b23e-881f78f4a822.roa
File:                     c6015c3a-1478-3ff0-b23e-881f78f4a822.roa (raw, json)
Hash identifier:          eml0spSG+mG5D9ZT+s5CJk+vzplfrAYr8p/srANOF2s=
Subject key identifier:   6F:77:8F:5C:75:D8:DF:2E:27:65:35:A6:E6:61:05:7F:E8:3D:0C:7D
Certificate issuer:       /CN=2ff404cf-610b-4add-bbfe-04b997bbd05a
Certificate serial:       010D0C9F4328584F34CCF818032B63CA840F8D64
Authority key identifier: FC:E8:5A:83:67:23:ED:20:13:E3:BB:58:4B:F0:D7:D9:C8:49:7D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/c6015c3a-1478-3ff0-b23e-881f78f4a822.roa
Signing time:             Thu 17 Sep 2026 15:30:28 +0000
ROA not before:           Thu 17 Sep 2026 15:30:28 +0000
ROA not after:            Tue 08 Dec 2026 14:18:52 +0000
asID:                     17152
IP address blocks:        23.131.116.0/24 maxlen: 24
                          134.181.0.0/16 maxlen: 16
                          2607:eac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/2ff404cf-610b-4add-bbfe-04b997bbd05a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/2ff404cf-610b-4add-bbfe-04b997bbd05a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:cc:f8:18:03:2b:63:ca:84:0f:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff404cf-610b-4add-bbfe-04b997bbd05a
        Validity
            Not Before: Sep 17 15:30:28 2026 GMT
            Not After : Dec  8 14:18:52 2026 GMT
        Subject: CN=044cbed9-2159-45af-aabd-a6b1dacae8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:2f:5e:79:66:cb:59:2c:cc:ee:c4:b4:df:
                    46:11:2c:40:56:2b:91:dd:5d:d1:cc:c3:15:21:18:
                    9a:5a:55:cb:00:63:54:39:a8:64:49:d2:a8:1e:08:
                    f3:93:09:fc:42:ed:9d:98:12:d9:aa:f5:61:91:11:
                    2b:6f:f5:22:7a:19:28:37:17:fb:16:c5:30:52:1a:
                    ef:14:fe:7b:f9:4d:28:66:09:04:e1:0b:98:9d:88:
                    40:c3:94:35:e0:50:a1:e2:60:95:b2:be:e5:81:bb:
                    7a:ed:71:9c:fa:a9:22:d4:66:46:9d:ea:7c:29:f2:
                    a6:c1:6b:9a:ad:1d:78:e9:cf:55:82:bb:6e:99:51:
                    95:cf:10:c4:70:d1:d0:48:bc:c7:4c:74:a4:92:ef:
                    ea:91:a8:6f:bc:72:60:97:b2:54:3e:7f:2a:5e:0b:
                    51:78:72:1d:96:e9:4a:5c:cd:b0:a4:ef:3c:c5:8d:
                    19:75:d6:60:03:ee:45:7f:04:6c:6a:66:8d:44:12:
                    ac:42:ef:ab:c5:51:4c:42:a6:f3:e2:ee:09:8a:ef:
                    4c:59:b7:f4:fb:e3:99:d6:e4:80:68:63:42:ea:a5:
                    64:12:ad:e8:35:d1:1c:ae:52:10:f4:74:33:73:22:
                    48:a4:5c:7b:f5:ce:6a:3d:95:8d:5e:43:e1:c7:11:
                    85:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:8F:5C:75:D8:DF:2E:27:65:35:A6:E6:61:05:7F:E8:3D:0C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/c6015c3a-1478-3ff0-b23e-881f78f4a822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a/2ff404cf-610b-4add-bbfe-04b997bbd05a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E8:5A:83:67:23:ED:20:13:E3:BB:58:4B:F0:D7:D9:C8:49:7D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff404cf-610b-4add-bbfe-04b997bbd05a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.116.0/24
                  134.181.0.0/16
                IPv6:
                  2607:eac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:01:19:48:83:c8:cd:6d:10:9b:55:d8:e8:c8:de:4b:ef:bd:
         44:69:2a:00:0e:0d:fd:4b:85:f8:62:ce:2a:cf:41:1e:fe:c9:
         27:c5:f4:bc:b9:ed:a8:b2:d0:94:46:38:0c:19:44:22:8a:6e:
         ef:0f:e2:c4:22:e6:44:41:fc:8b:27:ff:4f:dd:73:f5:59:d9:
         98:49:66:7d:83:8b:54:51:06:1e:0b:e9:ed:a8:e5:ea:a3:6e:
         57:06:79:a3:0b:19:de:62:a0:38:d2:13:d9:d1:ab:78:a1:fa:
         03:7a:ba:b7:e7:c8:2b:e9:e5:18:63:43:6f:21:08:7c:39:0a:
         f9:43:13:02:8d:c7:0e:cd:b3:b1:84:5d:fa:1f:89:b7:13:a5:
         64:86:05:cc:e6:b5:35:0e:22:3e:e1:6e:14:07:2d:49:ec:cc:
         ad:ce:a4:37:d8:b9:b8:3c:2b:0a:9d:2a:48:e4:3b:fc:a5:35:
         43:3d:80:d4:43:4e:88:07:47:70:b5:2e:f0:0d:99:e3:bb:2b:
         3b:02:39:e5:06:b9:15:b3:32:72:8f:b1:46:7e:e2:ec:ec:8b:
         e4:2b:69:09:9a:58:ac:5c:2e:c0:b6:22:c4:d8:e2:d2:37:b3:
         7d:f7:9e:c9:7e:45:f0:0a:47:0c:84:42:15:ee:8e:d8:5f:73:
         bf:9d:3e:62
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE80zPgYAytjyoQPjWQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZmNDA0Y2YtNjEwYi00YWRkLWJiZmUtMDRiOTk3YmJk
MDVhMB4XDTI2MDkxNzE1MzAyOFoXDTI2MTIwODE0MTg1MlowLzEtMCsGA1UEAxMk
MDQ0Y2JlZDktMjE1OS00NWFmLWFhYmQtYTZiMWRhY2FlOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxgvXnlmy1kszO7EtN9GESxAViuR3V3RzMMV
IRiaWlXLAGNUOahkSdKoHgjzkwn8Qu2dmBLZqvVhkRErb/UiehkoNxf7FsUwUhrv
FP57+U0oZgkE4QuYnYhAw5Q14FCh4mCVsr7lgbt67XGc+qki1GZGnep8KfKmwWua
rR146c9VgrtumVGVzxDEcNHQSLzHTHSkku/qkahvvHJgl7JUPn8qXgtReHIdlulK
XM2wpO88xY0ZddZgA+5FfwRsamaNRBKsQu+rxVFMQqbz4u4Jiu9MWbf0++OZ1uSA
aGNC6qVkEq3oNdEcrlIQ9HQzcyJIpFx79c5qPZWNXkPhxxGF4wIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFG93j1x12N8uJ2U1puZhBX/oPQx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY0
MDRjZi02MTBiLTRhZGQtYmJmZS0wNGI5OTdiYmQwNWEvYzYwMTVjM2EtMTQ3OC0z
ZmYwLWIyM2UtODgxZjc4ZjRhODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNDA0Y2YtNjEwYi00YWRkLWJi
ZmUtMDRiOTk3YmJkMDVhLzJmZjQwNGNmLTYxMGItNGFkZC1iYmZlLTA0Yjk5N2Ji
ZDA1YS5jcmwwHwYDVR0jBBgwFoAU/Ohag2cj7SAT47tYS/DX2chJfVowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY0MDRjZi02MTBiLTRhZGQtYmJmZS0wNGI5
OTdiYmQwNWEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQAF4N0AwMA
hrUwDQQCAAIwBwMFACYH6sAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUwEZSIPIzW0Qm1XY6MjeS++9RGkq
AA4N/UuF+GLOKs9BHv7JJ8X0vLntqLLQlEY4DBlEIopu7w/ixCLmREH8iyf/T91z
9VnZmElmfYOLVFEGHgvp7ajl6qNuVwZ5owsZ3mKgONIT2dGreKH6A3q6t+fIK+nl
GGNDbyEIfDkK+UMTAo3HDs2zsYRd+h+JtxOlZIYFzOa1NQ4iPuFuFActSezMrc6k
N9i5uDwrCp0qSOQ7/KU1Qz2A1ENOiAdHcLUu8A2Z47srOwI55Qa5FbMyco+xRn7i
7OyL5CtpCZpYrFwuwLYixNji0jezffeeyX5F8ApHDIRCFe6O2F9zv50+Yg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:43 2026 by rpki-client