Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa
File:                     133357b4-8693-3ae2-8de6-4feac1c1f686.roa (raw, json)
Hash identifier:          Ar59yGE5LQ/wz7KfE68dC/kosfpmJjJy3/gcEaM9wDc=
Subject key identifier:   57:6D:92:B3:22:80:48:38:B1:55:6F:D1:10:8E:99:06:80:C7:51:27
Certificate issuer:       /CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6
Certificate serial:       010D0C9F4328584E300E0025E953AF47749EDE40
Authority key identifier: 29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa
Signing time:             Tue 16 Jun 2026 05:55:31 +0000
ROA not before:           Tue 16 Jun 2026 05:55:31 +0000
ROA not after:            Mon 14 Sep 2026 05:55:31 +0000
asID:                     216047
IP address blocks:        23.159.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:0e:00:25:e9:53:af:47:74:9e:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6
        Validity
            Not Before: Jun 16 05:55:31 2026 GMT
            Not After : Sep 14 05:55:31 2026 GMT
        Subject: CN=82debd43-f344-4d81-b245-28463115444e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:b2:03:43:48:96:65:3b:03:c3:d9:aa:5f:
                    8e:4f:d9:9a:dc:86:92:5d:1c:8c:6d:2b:a2:20:76:
                    83:a5:6c:0f:16:41:7e:29:3b:da:48:3c:47:87:fc:
                    5f:a9:4e:2f:c5:71:23:dc:57:67:b2:1e:35:aa:6b:
                    e5:c8:82:9c:04:59:27:59:32:5e:62:d6:e3:58:2a:
                    3d:d3:6c:cd:40:c9:cf:b9:e2:4f:af:6e:87:00:c3:
                    68:27:dc:76:9d:86:ef:c3:10:dc:dc:95:2d:5d:04:
                    79:86:ef:de:23:54:b8:85:46:5d:85:92:70:60:0b:
                    98:53:11:0a:38:2d:8c:01:23:19:fc:59:8f:28:c4:
                    f7:00:87:0d:6d:7b:1b:91:58:68:ee:d9:8e:54:5f:
                    2f:3c:e9:b8:9b:aa:46:b8:05:14:78:ca:bd:be:77:
                    7d:47:e6:f1:82:62:25:f0:3b:52:ec:22:06:9b:8c:
                    53:c0:df:e7:25:ba:7f:66:56:0a:e9:c4:47:1e:9b:
                    61:25:4c:33:98:ca:3e:bf:c6:65:07:64:92:e3:5c:
                    6e:37:8b:45:73:1c:f1:b5:72:8f:bf:9b:02:e7:da:
                    dc:29:b0:27:81:b8:42:c4:40:2e:9b:ab:b4:c9:de:
                    79:94:e3:d8:ef:5a:5d:c3:74:69:bb:a9:88:4f:07:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6D:92:B3:22:80:48:38:B1:55:6F:D1:10:8E:99:06:80:C7:51:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/133357b4-8693-3ae2-8de6-4feac1c1f686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl

            X509v3 Authority Key Identifier:
                keyid:29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:82:22:0c:b4:68:3c:6e:2f:1c:08:07:eb:4a:44:85:82:
         87:46:b2:1e:47:e0:ff:f7:3a:0b:ec:2e:dd:e2:45:d6:f9:85:
         90:88:d7:a1:50:a0:ab:52:9d:6c:5a:99:1b:28:5c:73:6f:d4:
         98:3f:bf:93:c5:e0:24:73:88:0f:50:56:2c:52:a4:54:57:73:
         e1:0a:16:8c:97:57:41:d5:d9:77:1a:9f:e8:9a:7d:9b:79:3a:
         63:c6:ee:cf:d9:9f:47:3a:7d:0a:f2:27:fe:ad:42:09:42:67:
         8a:c5:c5:b8:95:a1:75:8c:f3:7d:87:e7:89:42:d8:c0:6f:e7:
         38:00:97:31:12:18:7e:a8:76:4a:ed:cf:e8:aa:ab:ca:cc:5d:
         cc:e9:91:55:dc:93:6c:d3:aa:fe:7b:f2:33:b9:80:ab:1e:96:
         e8:2c:a1:fd:84:75:51:92:a3:ad:de:8f:3f:21:e4:36:ac:92:
         b9:74:e2:c1:ac:55:a3:8a:a6:68:cb:b0:ff:76:b8:ff:fc:23:
         25:29:96:9a:bb:3a:70:f4:09:11:88:e6:64:50:83:d0:85:1d:
         28:94:07:67:ee:a8:8f:48:48:75:27:a8:df:48:1b:e3:a2:15:
         f0:ec:db:ef:ca:de:3a:5d:58:7c:eb:a1:85:da:61:ac:1a:b9:
         10:23:a5:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4wDgAl6VOvR3Se3kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQyOTAwYTItYjVlYS00YTQwLWEzMWYtZWYyY2IyNTUy
ZmM2MB4XDTI2MDYxNjA1NTUzMVoXDTI2MDkxNDA1NTUzMVowLzEtMCsGA1UEAxMk
ODJkZWJkNDMtZjM0NC00ZDgxLWIyNDUtMjg0NjMxMTU0NDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGeyA0NIlmU7A8PZql+OT9ma3IaSXRyMbSui
IHaDpWwPFkF+KTvaSDxHh/xfqU4vxXEj3Fdnsh41qmvlyIKcBFknWTJeYtbjWCo9
02zNQMnPueJPr26HAMNoJ9x2nYbvwxDc3JUtXQR5hu/eI1S4hUZdhZJwYAuYUxEK
OC2MASMZ/FmPKMT3AIcNbXsbkVho7tmOVF8vPOm4m6pGuAUUeMq9vnd9R+bxgmIl
8DtS7CIGm4xTwN/nJbp/ZlYK6cRHHpthJUwzmMo+v8ZlB2SS41xuN4tFcxzxtXKP
v5sC59rcKbAngbhCxEAum6u0yd55lOPY71pdw3Rpu6mITwcF+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdtkrMigEg4sVVv0RCOmQaAx1EnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDI5
MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJjYjI1NTJmYzYvMTMzMzU3YjQtODY5My0z
YWUyLThkZTYtNGZlYWMxYzFmNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQyOTAwYTItYjVlYS00YTQwLWEz
MWYtZWYyY2IyNTUyZmM2LzM0MjkwMGEyLWI1ZWEtNGE0MC1hMzFmLWVmMmNiMjU1
MmZjNi5jcmwwHwYDVR0jBBgwFoAUKQ5b2tUtQ8aOgqLyUlGNF5+8QaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8zNDI5MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJj
YjI1NTJmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF59MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN+giIMtGg8bi8cCAfrSkSFgodGsh5H4P/3OgvsLt3iRdb5hZCI16FQ
oKtSnWxamRsoXHNv1Jg/v5PF4CRziA9QVixSpFRXc+EKFoyXV0HV2Xcan+iafZt5
OmPG7s/Zn0c6fQryJ/6tQglCZ4rFxbiVoXWM832H54lC2MBv5zgAlzESGH6odkrt
z+iqq8rMXczpkVXck2zTqv578jO5gKselugsof2EdVGSo63ejz8h5Daskrl04sGs
VaOKpmjLsP92uP/8IyUplpq7OnD0CRGI5mRQg9CFHSiUB2fuqI9ISHUnqN9IG+Oi
FfDs2+/K3jpdWHzroYXaYawauRAjpQs=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:53 2026 by rpki-client