Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
File:                     9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json)
Hash identifier:          xmeGoCKKkseqQ0fQxYtAV+hNu9tO/rW6eEz6IOyVqEY=
Subject key identifier:   AB:77:0E:DB:04:C7:B4:75:97:01:4F:D8:72:66:0E:90:4C:24:F8:3F
Certificate issuer:       /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
Certificate serial:       010D0C9F4328584F1897AC2DED5EE588E4E60C80
Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        23.168.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:ac:2d:ed:5e:e5:88:e4:e6:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=79ef6939-4ce2-4b66-ad2e-a76532deb9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:79:93:d8:80:ad:5b:06:77:41:ad:52:0e:
                    3b:ab:1b:ca:0e:89:4d:12:3c:ab:5f:e5:4b:1b:8b:
                    ce:4a:3c:d3:c5:5a:02:75:5c:02:85:91:51:9e:f1:
                    90:b7:3f:b2:df:6d:8d:76:e2:3d:bf:cf:ea:b6:47:
                    21:09:2c:a8:db:fe:ac:7b:5d:eb:1e:c4:36:0e:96:
                    02:e3:47:f3:ca:fb:e0:9a:1e:00:02:1b:77:b6:00:
                    60:3d:99:d5:65:65:ae:bf:c0:53:38:f3:2f:2f:c2:
                    86:ea:19:aa:af:e1:1c:52:91:67:4d:26:d9:e3:7c:
                    b3:0c:96:f1:cd:45:53:b1:17:94:e4:3c:31:c0:68:
                    b2:ab:49:36:3c:7b:7a:ee:2f:b4:e8:88:96:f2:7e:
                    b1:83:e6:05:b2:db:ec:e0:14:14:60:f4:e8:c7:ed:
                    c7:2f:2f:b1:34:8d:f3:7c:12:3c:bc:75:de:74:c6:
                    cf:2d:f8:2f:f7:d9:02:74:68:fa:4e:79:47:83:9d:
                    72:94:3e:a7:73:d8:7f:0f:54:14:14:3f:c4:91:de:
                    33:08:a2:61:32:f7:cc:a4:6c:47:74:cb:69:74:1d:
                    9c:56:76:cc:df:a3:77:f7:ff:c7:3d:9a:41:49:70:
                    61:6e:47:b8:ef:1f:ea:8d:8c:d3:34:7e:e8:1d:62:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:0E:DB:04:C7:B4:75:97:01:4F:D8:72:66:0E:90:4C:24:F8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:71:35:6c:07:64:44:44:8c:29:a8:cb:56:bc:23:45:18:3b:
         cd:5d:56:fc:74:23:ab:76:c4:e6:84:5b:bc:01:67:eb:ee:de:
         0e:eb:4d:23:f4:58:d6:4d:2c:7d:2f:77:36:20:b3:46:0c:6b:
         be:58:c4:66:4d:e5:97:4b:e6:bc:75:8c:f8:82:6f:74:1a:60:
         9b:54:65:fd:98:f1:cc:b9:a4:8c:5b:3c:93:fb:6f:b7:38:22:
         ee:e9:13:23:d3:2d:c1:20:0a:bd:29:16:ad:b0:eb:a0:39:d6:
         34:b8:9f:fa:d0:88:d6:dd:9b:38:70:a5:41:f6:46:a5:4a:51:
         7b:05:66:aa:23:8a:a2:ac:34:78:a8:a3:29:d6:5b:ea:88:81:
         04:14:f6:aa:6b:b9:98:f9:78:04:80:cc:88:3a:2f:ea:06:64:
         a3:7d:4e:0c:f0:3d:1b:8e:08:a3:ed:ed:33:9a:2e:53:08:90:
         f2:15:dd:a2:4d:de:3b:b3:64:cb:be:9b:9c:40:f9:26:fd:45:
         c7:c9:d6:f1:08:0f:12:4c:ad:2b:2a:52:b9:e0:95:68:fa:ad:
         05:33:a8:8a:d7:4f:a6:cc:96:7a:53:93:77:6d:e0:98:48:a0:
         48:40:68:c5:42:75:ab:d7:4f:ff:d7:96:6d:c1:f4:72:e7:ac:
         d2:92:bd:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6wt7V7liOTmDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE3ZmYzZDMtMmYxOS00M2E0LWEzNmQtZWNlMWVlMDUw
NTViMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzllZjY5MzktNGNlMi00YjY2LWFkMmUtYTc2NTMyZGViOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dx5k9iArVsGd0GtUg47qxvKDolNEjyrX+VL
G4vOSjzTxVoCdVwChZFRnvGQtz+y322NduI9v8/qtkchCSyo2/6se13rHsQ2DpYC
40fzyvvgmh4AAht3tgBgPZnVZWWuv8BTOPMvL8KG6hmqr+EcUpFnTSbZ43yzDJbx
zUVTsReU5DwxwGiyq0k2PHt67i+06IiW8n6xg+YFstvs4BQUYPTox+3HLy+xNI3z
fBI8vHXedMbPLfgv99kCdGj6TnlHg51ylD6nc9h/D1QUFD/Ekd4zCKJhMvfMpGxH
dMtpdB2cVnbM36N39//HPZpBSXBhbke47x/qjYzTNH7oHWL+sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKt3DtsEx7R1lwFP2HJmDpBMJPg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTdm
ZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2UxZWUwNTA1NWIvOTIyMWM5YjItMjFlNS0z
NGU1LWFlOTAtZTVhMDFkY2NlZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE3ZmYzZDMtMmYxOS00M2E0LWEz
NmQtZWNlMWVlMDUwNTViLzRhN2ZmM2QzLTJmMTktNDNhNC1hMzZkLWVjZTFlZTA1
MDU1Yi5jcmwwHwYDVR0jBBgwFoAU56FueZOtHDWx7mQtJb5nXQKd7XAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YTdmZjNkMy0yZjE5LTQzYTQtYTM2ZC1lY2Ux
ZWUwNTA1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNxNWwHZEREjCmoy1a8I0UYO81dVvx0I6t2xOaEW7wBZ+vu3g7rTSP0
WNZNLH0vdzYgs0YMa75YxGZN5ZdL5rx1jPiCb3QaYJtUZf2Y8cy5pIxbPJP7b7c4
Iu7pEyPTLcEgCr0pFq2w66A51jS4n/rQiNbdmzhwpUH2RqVKUXsFZqojiqKsNHio
oynWW+qIgQQU9qpruZj5eASAzIg6L+oGZKN9TgzwPRuOCKPt7TOaLlMIkPIV3aJN
3juzZMu+m5xA+Sb9RcfJ1vEIDxJMrSsqUrnglWj6rQUzqIrXT6bMlnpTk3dt4JhI
oEhAaMVCdavXT//Xlm3B9HLnrNKSvVU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:38:16 2026 by rpki-client