Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa
File:                     74168fc4-19c5-3549-abc7-a40124cbc34c.roa (raw, json)
Hash identifier:          h0opr4JW8iEwTHvdRsrivYgw/oVySR1ucCPlVRyG2VA=
Subject key identifier:   E3:F9:69:21:41:FE:EC:26:BA:A4:DB:E7:32:FA:67:4E:3D:B8:56:45
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584D7F9A8AAE621888D5F40E6D00
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     26904
IP address blocks:        23.247.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8a:ae:62:18:88:d5:f4:0e:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=f1f8fb9d-95a4-4627-9bdd-b798cdacd75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:d6:f8:39:de:73:fe:c3:c6:59:7f:08:9a:
                    19:e8:cd:e0:f3:0b:f3:8d:ba:4a:50:3c:2b:45:e7:
                    f6:a0:c1:00:7b:94:4c:6f:c1:e4:6f:b3:61:b5:bb:
                    9e:c8:76:af:21:bb:8d:99:89:5e:89:8a:91:3e:24:
                    ee:9f:81:9d:58:93:7d:f6:c9:2b:94:b2:0a:5d:6e:
                    1b:06:7d:72:c8:6b:32:8d:27:85:3c:28:c3:63:d2:
                    ba:63:c0:84:4b:7b:14:f4:5b:1e:3e:4c:e0:63:8c:
                    94:60:84:7f:08:fc:00:f6:3a:ec:ef:c9:7c:f1:74:
                    55:61:0e:cf:fe:d0:4b:cf:a7:20:27:ee:65:db:46:
                    10:fb:16:2a:1f:eb:cd:69:50:17:3d:03:80:d8:8c:
                    f1:eb:da:7d:bf:77:5f:36:cb:63:98:df:85:b8:06:
                    4e:74:30:da:79:23:0c:5f:69:7c:d3:2c:84:21:1e:
                    fa:0b:28:cb:b5:16:ea:85:5c:f2:02:00:5d:72:f3:
                    22:49:ce:44:dd:bf:d8:9c:37:7a:f4:7b:b0:6b:68:
                    da:85:3b:97:36:a0:13:28:b2:cc:ed:43:5c:10:1d:
                    35:94:9f:85:20:0f:56:35:b0:8f:c4:24:5f:0f:7c:
                    22:9b:4e:0c:dd:bb:0a:b5:cb:cc:b3:ef:c0:e3:32:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:69:21:41:FE:EC:26:BA:A4:DB:E7:32:FA:67:4E:3D:B8:56:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/74168fc4-19c5-3549-abc7-a40124cbc34c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:09:b0:33:d7:ae:e8:20:85:89:8e:c5:41:70:0e:80:a6:
         67:4c:89:cb:5f:71:de:95:f1:d9:a0:75:d4:47:6c:75:ad:c1:
         55:e1:79:f5:58:e2:65:4e:ef:da:04:b0:83:d9:88:8c:67:62:
         98:57:c6:5f:0f:cd:18:ae:09:f8:d4:bb:6a:68:f4:0e:c6:16:
         d8:3b:5a:99:f9:5f:ff:68:c3:27:78:51:07:31:7c:40:d2:8e:
         50:63:56:7d:c5:e4:ef:67:2d:8c:28:d7:29:d0:cb:34:fe:6f:
         b5:03:13:77:4f:e7:5d:40:48:b3:2c:96:c0:55:68:19:11:a2:
         b7:68:39:86:4a:dd:33:69:d3:e0:37:8e:61:b1:52:3d:52:f4:
         47:f4:a4:52:ce:dd:d3:4b:6a:9e:38:72:e9:d6:fe:47:75:cd:
         88:88:5a:9a:79:4b:73:68:37:9f:0d:5b:10:0c:26:73:c8:cc:
         65:fc:54:95:b1:1b:bc:4b:4f:f0:ba:38:88:7a:3c:14:5c:c9:
         3a:78:b2:54:04:97:4e:e6:44:54:2e:a0:b6:53:f0:34:8b:77:
         59:6b:2f:af:d1:2c:a0:08:50:b6:82:87:e7:59:fa:3a:e5:97:
         dc:24:e2:88:bb:fb:d8:74:8d:a3:74:a6:60:ca:34:16:ca:9c:
         e4:d6:02:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moquYhiI1fQObQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5
MmQ3MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
ZjFmOGZiOWQtOTVhNC00NjI3LTliZGQtYjc5OGNkYWNkNzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I7W+Dnec/7Dxll/CJoZ6M3g8wvzjbpKUDwr
Ref2oMEAe5RMb8Hkb7NhtbueyHavIbuNmYleiYqRPiTun4GdWJN99skrlLIKXW4b
Bn1yyGsyjSeFPCjDY9K6Y8CES3sU9FsePkzgY4yUYIR/CPwA9jrs78l88XRVYQ7P
/tBLz6cgJ+5l20YQ+xYqH+vNaVAXPQOA2Izx69p9v3dfNstjmN+FuAZOdDDaeSMM
X2l80yyEIR76CyjLtRbqhVzyAgBdcvMiSc5E3b/YnDd69Huwa2jahTuXNqATKLLM
7UNcEB01lJ+FIA9WNbCPxCRfD3wim04M3bsKtcvMs+/A4zKKcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOP5aSFB/uwmuqTb5zL6Z049uFZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3
MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvNzQxNjhmYzQtMTljNS0z
NTQ5LWFiYzctYTQwMTI0Y2JjMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4
Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi
OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez
ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzbCbAz167oIIWJjsVBcA6ApmdMictfcd6V8dmgddRHbHWtwVXhefVY
4mVO79oEsIPZiIxnYphXxl8PzRiuCfjUu2po9A7GFtg7Wpn5X/9owyd4UQcxfEDS
jlBjVn3F5O9nLYwo1ynQyzT+b7UDE3dP511ASLMslsBVaBkRordoOYZK3TNp0+A3
jmGxUj1S9Ef0pFLO3dNLap44cunW/kd1zYiIWpp5S3NoN58NWxAMJnPIzGX8VJWx
G7xLT/C6OIh6PBRcyTp4slQEl07mRFQuoLZT8DSLd1lrL6/RLKAIULaCh+dZ+jrl
l9wk4oi7+9h0jaN0pmDKNBbKnOTWAl4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:03 2026 by rpki-client