Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/782d1e2a-a37b-36a1-b805-b1d0787185db.roa
File:                     782d1e2a-a37b-36a1-b805-b1d0787185db.roa (raw, json)
Hash identifier:          5Cahg+xqIuvWePIro61iOJT+4mvPDxwb3RSXFtv2KPk=
Subject key identifier:   DB:A4:F6:A7:96:99:50:60:39:91:E6:C5:90:F9:3D:88:5D:A1:FC:DF
Certificate issuer:       /CN=9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e
Certificate serial:       010D0C9F4328584E2681B0D63AEF9D34E1BDFD80
Authority key identifier: 9A:B2:CC:FD:99:BA:8A:42:67:43:EB:3A:9C:9B:92:49:C4:C0:D6:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/782d1e2a-a37b-36a1-b805-b1d0787185db.roa
Signing time:             Fri 12 Jun 2026 19:50:32 +0000
ROA not before:           Fri 12 Jun 2026 19:50:32 +0000
ROA not after:            Thu 10 Sep 2026 19:50:32 +0000
asID:                     402602
IP address blocks:        23.160.4.0/24 maxlen: 24
                          2620:35:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:81:b0:d6:3a:ef:9d:34:e1:bd:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e
        Validity
            Not Before: Jun 12 19:50:32 2026 GMT
            Not After : Sep 10 19:50:32 2026 GMT
        Subject: CN=6c24d85d-6ac9-4560-8fda-58a4978f9b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:db:34:56:d8:33:2c:7b:2f:2d:e8:5f:8e:
                    20:54:16:38:2e:8d:b6:11:13:05:09:c1:09:0c:b9:
                    62:53:c4:e7:82:3e:8c:6c:59:cf:da:bf:af:50:99:
                    e0:89:6a:61:20:4f:b4:4d:6d:c2:c6:c5:2a:30:bf:
                    82:64:b2:98:8c:b2:09:fb:fe:70:53:6c:01:36:0b:
                    f6:9f:e0:25:01:44:56:13:f2:3b:a9:bb:cf:c2:8e:
                    d2:ed:fc:cd:93:30:1e:5d:57:cf:3b:52:b5:ea:4a:
                    f4:97:82:04:90:c8:7b:89:49:e0:a2:a8:70:16:b5:
                    e2:61:ba:57:18:4e:61:e9:b1:5c:1f:22:53:a0:84:
                    90:c4:fd:a6:21:34:2e:f8:81:d5:9a:e9:16:3b:55:
                    77:25:90:f2:58:c0:0c:8a:9f:47:71:f2:7d:c8:af:
                    0d:2c:00:e9:52:fa:25:d5:c4:cd:fb:7d:bc:67:27:
                    b2:d2:15:11:74:45:2d:7d:2b:d6:94:7b:ba:8b:b8:
                    95:95:cd:ad:ad:7f:c3:59:28:d2:92:70:af:96:a2:
                    0d:e2:cc:75:6d:c4:1a:75:5e:ed:bf:d4:94:b9:0e:
                    ca:f7:55:81:94:8d:66:30:cf:9b:11:e1:f2:1b:bd:
                    37:50:c0:d8:e1:43:7b:98:93:74:2d:63:7c:87:7c:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:F6:A7:96:99:50:60:39:91:E6:C5:90:F9:3D:88:5D:A1:FC:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/782d1e2a-a37b-36a1-b805-b1d0787185db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:B2:CC:FD:99:BA:8A:42:67:43:EB:3A:9C:9B:92:49:C4:C0:D6:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9f8cfcd7-e2e3-4c01-9bd3-272490e0d90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.4.0/24
                IPv6:
                  2620:35:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:94:64:62:d9:53:4a:03:8b:68:f3:33:d2:9b:30:44:74:
         bf:0b:30:79:2b:1c:0d:eb:63:db:c8:3e:5f:99:3e:fc:b3:9e:
         33:b9:96:ad:44:0c:2d:f6:74:39:a7:87:61:4a:14:68:7f:2a:
         43:c9:6a:48:63:9f:e6:7a:c0:74:17:e4:3d:69:b9:50:9d:b5:
         e7:1f:6a:92:61:3d:5d:20:37:98:43:d7:fb:05:7c:92:fe:69:
         7d:02:dd:5c:c9:3d:eb:80:23:ac:69:65:4f:24:f0:9f:91:43:
         6d:5c:66:f8:7a:a4:58:7f:f0:aa:bb:84:26:ca:89:df:bd:ba:
         62:b9:7d:48:1d:ff:3b:e6:f7:de:76:e9:22:e7:19:21:6b:9d:
         ae:cd:0f:a6:c3:a9:32:b8:f3:a5:0c:d7:a2:4d:70:96:40:ec:
         46:e3:96:aa:16:13:b6:96:c0:dc:16:79:65:f3:b4:2b:dc:f5:
         ba:77:14:ed:ff:ab:5c:01:40:c3:c1:24:e1:72:e9:13:ab:5c:
         0f:bd:57:dd:20:7f:9a:c9:11:9b:b3:44:2f:64:2b:3a:70:ee:
         15:24:25:24:3c:ac:99:ec:06:4f:47:d7:b8:15:02:73:81:df:
         69:3b:f9:1f:55:9a:15:2b:19:70:35:f0:28:5f:72:81:6d:88:
         8d:4d:ac:02
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4mgbDWOu+dNOG9/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY4Y2ZjZDctZTJlMy00YzAxLTliZDMtMjcyNDkwZTBk
OTBlMB4XDTI2MDYxMjE5NTAzMloXDTI2MDkxMDE5NTAzMlowLzEtMCsGA1UEAxMk
NmMyNGQ4NWQtNmFjOS00NTYwLThmZGEtNThhNDk3OGY5YjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl27bNFbYMyx7Ly3oX44gVBY4Lo22ERMFCcEJ
DLliU8Tngj6MbFnP2r+vUJngiWphIE+0TW3CxsUqML+CZLKYjLIJ+/5wU2wBNgv2
n+AlAURWE/I7qbvPwo7S7fzNkzAeXVfPO1K16kr0l4IEkMh7iUngoqhwFrXiYbpX
GE5h6bFcHyJToISQxP2mITQu+IHVmukWO1V3JZDyWMAMip9HcfJ9yK8NLADpUvol
1cTN+328Zyey0hURdEUtfSvWlHu6i7iVlc2trX/DWSjSknCvlqIN4sx1bcQadV7t
v9SUuQ7K91WBlI1mMM+bEeHyG703UMDY4UN7mJN0LWN8h3zVfQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNuk9qeWmVBgOZHmxZD5PYhdofzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85Zjhj
ZmNkNy1lMmUzLTRjMDEtOWJkMy0yNzI0OTBlMGQ5MGUvNzgyZDFlMmEtYTM3Yi0z
NmExLWI4MDUtYjFkMDc4NzE4NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWY4Y2ZjZDctZTJlMy00YzAxLTli
ZDMtMjcyNDkwZTBkOTBlLzlmOGNmY2Q3LWUyZTMtNGMwMS05YmQzLTI3MjQ5MGUw
ZDkwZS5jcmwwHwYDVR0jBBgwFoAUmrLM/Zm6ikJnQ+s6nJuSScTA1vcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi85ZjhjZmNkNy1lMmUzLTRjMDEtOWJkMy0yNzI0
OTBlMGQ5MGUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6AEMA8E
AgACMAkDBwAmIAA1IAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANeuUZGLZU0oDi2jzM9KbMER0vwsweSsc
Detj28g+X5k+/LOeM7mWrUQMLfZ0OaeHYUoUaH8qQ8lqSGOf5nrAdBfkPWm5UJ21
5x9qkmE9XSA3mEPX+wV8kv5pfQLdXMk964AjrGllTyTwn5FDbVxm+HqkWH/wqruE
JsqJ3726Yrl9SB3/O+b33nbpIucZIWudrs0PpsOpMrjzpQzXok1wlkDsRuOWqhYT
tpbA3BZ5ZfO0K9z1uncU7f+rXAFAw8Ek4XLpE6tcD71X3SB/mskRm7NEL2QrOnDu
FSQlJDysmewGT0fXuBUCc4HfaTv5H1WaFSsZcDXwKF9ygW2IjU2sAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:43 2026 by rpki-client