Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa
File:                     ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa (raw, json)
Hash identifier:          A+RxQLLuLKZI1zbkQiUqSB4k5dl0X4Uuij0/5PFkzW4=
Subject key identifier:   8B:60:08:61:6D:EA:48:08:4F:5D:25:75:BC:EC:A4:52:E2:19:22:EC
Certificate issuer:       /CN=aed13af4-fb22-4782-93c3-62972bccdb12
Certificate serial:       010D0C9F4328584D021793D9ACF34CEEC2A96CC0
Authority key identifier: 51:D4:F9:96:8E:59:02:A5:4E:4F:A5:8E:6A:7E:14:33:45:11:FF:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     149513
IP address blocks:        23.174.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:93:d9:ac:f3:4c:ee:c2:a9:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed13af4-fb22-4782-93c3-62972bccdb12
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=a6d1876b-9169-4c22-8a83-aae858ec40a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:44:fe:db:0a:dc:f3:81:10:67:5c:75:12:
                    01:99:ec:92:fa:aa:90:74:79:a7:b4:31:58:c5:c7:
                    d1:0a:87:33:48:21:be:36:7d:fe:ef:22:c1:a9:5d:
                    c8:87:e6:ac:df:3b:d9:0a:52:0e:96:b8:b2:8b:bf:
                    f3:f6:57:06:a0:08:04:b7:f1:07:bb:d6:a3:a5:6c:
                    6c:6e:1b:40:19:85:f3:fa:c4:d1:8c:1e:c2:85:6c:
                    82:3d:4c:12:d0:f0:84:4a:b3:67:6b:f6:ca:10:de:
                    5f:bb:ed:fb:09:57:dd:b3:be:e4:63:42:33:e6:96:
                    61:6c:23:e4:de:5f:86:e8:d9:6d:85:2b:dd:a9:36:
                    da:82:45:31:a0:b0:54:34:36:67:4f:14:fc:55:47:
                    d1:1f:65:e3:64:a4:e8:81:2a:17:06:9f:c2:c4:e3:
                    21:22:a1:53:6d:fc:c4:e6:c2:b7:3f:38:b2:4d:96:
                    6e:92:f6:2c:85:61:6a:49:7e:d1:ec:78:c6:9f:25:
                    54:47:aa:b1:fd:8d:ba:e8:d9:51:60:55:88:1d:ad:
                    bb:b7:da:74:35:6b:72:5a:9c:02:e4:8e:9e:64:2e:
                    14:e6:a9:9c:97:cd:a9:e9:23:e1:6b:6b:ef:c0:51:
                    0b:f6:de:cd:1a:b0:c2:14:10:aa:66:c7:5d:c9:9d:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:08:61:6D:EA:48:08:4F:5D:25:75:BC:EC:A4:52:E2:19:22:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/ccf5de24-f0d4-3d95-a48f-edb9492a4f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12/aed13af4-fb22-4782-93c3-62972bccdb12.crl

            X509v3 Authority Key Identifier:
                keyid:51:D4:F9:96:8E:59:02:A5:4E:4F:A5:8E:6A:7E:14:33:45:11:FF:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed13af4-fb22-4782-93c3-62972bccdb12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:9b:e7:be:82:a2:af:d9:0e:ab:dd:a1:a2:e7:1c:cb:4c:
         f4:1c:c7:c2:fc:64:2a:64:54:66:9b:bc:e3:16:c2:e8:1a:19:
         6d:04:ca:b5:17:4b:ec:e2:fc:37:4c:36:50:f7:a7:ce:3a:91:
         6d:f0:8a:d8:da:10:6e:66:3b:78:2e:6f:6c:52:1b:47:29:77:
         df:c3:48:d5:84:65:41:12:e9:ef:d0:d1:e4:b2:27:69:85:d8:
         3d:c8:88:74:26:db:d8:01:25:e5:e2:d8:10:f6:4f:2f:08:f3:
         a7:1b:e7:26:db:11:3e:19:40:97:b3:de:21:a2:2d:91:b4:f5:
         b9:83:55:9a:95:b6:1c:d3:d8:44:46:61:1c:39:7e:42:f4:db:
         ed:4c:83:63:8f:e1:13:7c:7f:93:93:e4:ab:7c:52:30:4c:a1:
         bf:43:42:f9:7b:c9:3e:f6:dc:2c:db:53:88:23:4d:16:2f:1c:
         5f:34:03:8d:98:35:8a:5a:84:a4:24:aa:3c:39:0d:9b:77:a7:
         d9:38:14:d1:44:bb:94:fe:e1:e0:13:ad:8f:4b:be:ce:57:52:
         87:f5:f4:45:e2:f8:5a:09:da:ee:f3:f7:a8:c8:da:b5:f1:aa:
         5a:4c:64:60:e8:27:d1:8d:ff:fb:b1:83:fc:8b:0e:0f:37:cb:
         29:ba:6f:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5PZrPNM7sKpbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWVkMTNhZjQtZmIyMi00NzgyLTkzYzMtNjI5NzJiY2Nk
YjEyMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YTZkMTg3NmItOTE2OS00YzIyLThhODMtYWFlODU4ZWM0MGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssdE/tsK3POBEGdcdRIBmeyS+qqQdHmntDFY
xcfRCoczSCG+Nn3+7yLBqV3Ih+as3zvZClIOlriyi7/z9lcGoAgEt/EHu9ajpWxs
bhtAGYXz+sTRjB7ChWyCPUwS0PCESrNna/bKEN5fu+37CVfds77kY0Iz5pZhbCPk
3l+G6NlthSvdqTbagkUxoLBUNDZnTxT8VUfRH2XjZKTogSoXBp/CxOMhIqFTbfzE
5sK3PziyTZZukvYshWFqSX7R7HjGnyVUR6qx/Y266NlRYFWIHa27t9p0NWtyWpwC
5I6eZC4U5qmcl82p6SPha2vvwFEL9t7NGrDCFBCqZsddyZ3FuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFItgCGFt6kgIT10ldbzspFLiGSLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZWQx
M2FmNC1mYjIyLTQ3ODItOTNjMy02Mjk3MmJjY2RiMTIvY2NmNWRlMjQtZjBkNC0z
ZDk1LWE0OGYtZWRiOTQ5MmE0ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWVkMTNhZjQtZmIyMi00NzgyLTkz
YzMtNjI5NzJiY2NkYjEyL2FlZDEzYWY0LWZiMjItNDc4Mi05M2MzLTYyOTcyYmNj
ZGIxMi5jcmwwHwYDVR0jBBgwFoAUUdT5lo5ZAqVOT6WOan4UM0UR/wAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hZWQxM2FmNC1mYjIyLTQ3ODItOTNjMy02Mjk3
MmJjY2RiMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF65oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkKm+e+gqKv2Q6r3aGi5xzLTPQcx8L8ZCpkVGabvOMWwugaGW0EyrUX
S+zi/DdMNlD3p846kW3witjaEG5mO3gub2xSG0cpd9/DSNWEZUES6e/Q0eSyJ2mF
2D3IiHQm29gBJeXi2BD2Ty8I86cb5ybbET4ZQJez3iGiLZG09bmDVZqVthzT2ERG
YRw5fkL02+1Mg2OP4RN8f5OT5Kt8UjBMob9DQvl7yT723CzbU4gjTRYvHF80A42Y
NYpahKQkqjw5DZt3p9k4FNFEu5T+4eATrY9Lvs5XUof19EXi+FoJ2u7z96jI2rXx
qlpMZGDoJ9GN//uxg/yLDg83yym6b/8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:30 2026 by rpki-client