Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/135bab6b-ee30-38ce-8f0c-cfce2f884a9b.roa
File:                     135bab6b-ee30-38ce-8f0c-cfce2f884a9b.roa (raw, json)
Hash identifier:          ZEAC6dIhIrKy1zY9gV6IgDwRtUnaeYjJylilddEf0wE=
Subject key identifier:   80:29:24:1D:CE:52:C9:FD:67:B6:FB:3B:D1:DE:C6:94:88:FB:0E:16
Certificate issuer:       /CN=5874d3ec-2bf0-47ba-83dc-efab2cca4f45
Certificate serial:       010D0C9F4328584F49734183A2D886F19BE9C280
Authority key identifier: BA:62:CD:A8:64:D8:70:96:BF:A5:C7:B3:90:54:86:8B:82:32:81:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/135bab6b-ee30-38ce-8f0c-cfce2f884a9b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7361
IP address blocks:        23.155.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:41:83:a2:d8:86:f1:9b:e9:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5874d3ec-2bf0-47ba-83dc-efab2cca4f45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=693e5b15-9e84-47ce-a4b4-3048c0036e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:0a:f8:5f:93:77:09:b2:4e:16:6f:9b:c3:
                    2c:da:7d:0b:5e:71:ef:26:c4:d3:da:75:03:cd:e8:
                    ed:da:c0:42:e8:d1:42:d2:31:dd:11:ac:70:9d:0f:
                    7f:93:42:e3:6d:1e:85:5c:14:5b:ab:8c:a9:3b:5d:
                    9a:4c:48:f3:05:d7:c5:05:4a:09:c6:8f:24:69:e7:
                    39:13:d1:bc:a6:06:28:b0:fa:e6:56:a1:ac:65:cf:
                    59:5c:b1:92:a1:ad:b2:57:ed:60:d4:57:eb:b4:8f:
                    bc:63:b9:c6:a8:9e:e3:92:38:49:c0:e1:57:78:38:
                    74:4c:e4:16:9c:06:e9:66:14:59:b8:fb:b6:67:ac:
                    75:ed:5b:41:55:c8:a8:70:61:d8:92:2d:b0:2c:a7:
                    db:84:ca:90:cd:5d:f5:6f:c5:c6:12:6f:7c:6e:cc:
                    ae:cf:84:77:6d:7b:e0:a2:ba:fc:be:0d:e2:45:4b:
                    d9:65:9c:bb:79:87:9e:98:5a:2d:49:f7:21:9e:89:
                    5d:30:53:2a:ca:95:53:99:58:3f:1a:9e:bb:f7:52:
                    84:68:01:0d:f5:be:41:85:a0:57:e4:07:cf:33:f9:
                    a5:e7:6e:18:e4:84:19:13:b9:c4:f4:4d:11:8e:5a:
                    fa:8e:f1:b1:52:49:53:70:9b:72:b9:9f:06:9e:d0:
                    21:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:29:24:1D:CE:52:C9:FD:67:B6:FB:3B:D1:DE:C6:94:88:FB:0E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/135bab6b-ee30-38ce-8f0c-cfce2f884a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.crl

            X509v3 Authority Key Identifier:
                keyid:BA:62:CD:A8:64:D8:70:96:BF:A5:C7:B3:90:54:86:8B:82:32:81:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5874d3ec-2bf0-47ba-83dc-efab2cca4f45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:20:fc:33:5c:83:d6:7f:de:06:81:e5:66:87:c9:f6:f3:ca:
         bb:a3:66:72:4b:50:91:67:d7:21:11:1c:82:1c:23:d0:49:9e:
         8b:16:ce:ca:f9:3d:98:90:c4:ac:12:b4:57:f9:95:c1:ae:33:
         2f:6e:ac:d1:a0:b8:69:cb:33:1d:04:a5:a3:13:20:ed:57:70:
         b0:0d:69:85:55:b2:71:1d:83:c8:e7:85:5e:6e:ac:97:bb:d4:
         2b:3c:8f:e5:10:70:31:bf:9c:c1:78:be:a7:af:d6:e3:b3:70:
         28:e7:a7:b2:59:17:4e:cf:06:cd:cf:ce:18:58:18:eb:0c:ca:
         b3:bb:35:40:39:f6:e4:e4:d5:91:0e:d7:bc:a3:eb:8b:eb:ef:
         ad:6c:bf:f4:84:c4:70:3d:20:4d:7e:e6:8d:c4:75:0f:53:bc:
         61:d5:cd:ff:09:a2:aa:1d:29:55:a8:9d:ab:0b:4b:b5:ca:ef:
         4d:c8:fe:05:38:6f:af:00:a7:7b:75:43:d9:06:65:25:70:20:
         a2:03:7e:05:44:58:98:b1:f1:4e:bb:b4:65:7f:48:6b:98:6e:
         68:92:5c:93:20:b7:c4:4e:6c:ce:47:70:13:b1:1f:30:ba:ed:
         53:34:b7:11:c0:4b:7b:2b:79:12:1c:d2:cd:f6:f5:77:2e:b9:
         62:a0:ae:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0GDotiG8ZvpwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg3NGQzZWMtMmJmMC00N2JhLTgzZGMtZWZhYjJjY2E0
ZjQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjkzZTViMTUtOWU4NC00N2NlLWE0YjQtMzA0OGMwMDM2ZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsYK+F+TdwmyThZvm8Ms2n0LXnHvJsTT2nUD
zejt2sBC6NFC0jHdEaxwnQ9/k0LjbR6FXBRbq4ypO12aTEjzBdfFBUoJxo8kaec5
E9G8pgYosPrmVqGsZc9ZXLGSoa2yV+1g1FfrtI+8Y7nGqJ7jkjhJwOFXeDh0TOQW
nAbpZhRZuPu2Z6x17VtBVciocGHYki2wLKfbhMqQzV31b8XGEm98bsyuz4R3bXvg
orr8vg3iRUvZZZy7eYeemFotSfchnoldMFMqypVTmVg/Gp6791KEaAEN9b5BhaBX
5AfPM/ml524Y5IQZE7nE9E0Rjlr6jvGxUklTcJtyuZ8GntAhIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIApJB3OUsn9Z7b7O9HexpSI+w4WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ODc0
ZDNlYy0yYmYwLTQ3YmEtODNkYy1lZmFiMmNjYTRmNDUvMTM1YmFiNmItZWUzMC0z
OGNlLThmMGMtY2ZjZTJmODg0YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTg3NGQzZWMtMmJmMC00N2JhLTgz
ZGMtZWZhYjJjY2E0ZjQ1LzU4NzRkM2VjLTJiZjAtNDdiYS04M2RjLWVmYWIyY2Nh
NGY0NS5jcmwwHwYDVR0jBBgwFoAUumLNqGTYcJa/pcezkFSGi4IygUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81ODc0ZDNlYy0yYmYwLTQ3YmEtODNkYy1lZmFi
MmNjYTRmNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5sUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEg/DNcg9Z/3gaB5WaHyfbzyrujZnJLUJFn1yERHIIcI9BJnosWzsr5
PZiQxKwStFf5lcGuMy9urNGguGnLMx0EpaMTIO1XcLANaYVVsnEdg8jnhV5urJe7
1Cs8j+UQcDG/nMF4vqev1uOzcCjnp7JZF07PBs3PzhhYGOsMyrO7NUA59uTk1ZEO
17yj64vr761sv/SExHA9IE1+5o3EdQ9TvGHVzf8JoqodKVWonasLS7XK703I/gU4
b68Ap3t1Q9kGZSVwIKIDfgVEWJix8U67tGV/SGuYbmiSXJMgt8RObM5HcBOxHzC6
7VM0txHAS3sreRIc0s329XcuuWKgriw=
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:22:10 2026 by rpki-client