Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa
File:                     277201b5-0e55-3f61-95f0-78d34a5cbec9.roa (raw, json)
Hash identifier:          aFLEiQFp/b4jcVJPDF979BS61Rjsngv/ojWHAKOGqmE=
Subject key identifier:   D3:9D:D2:17:4D:A5:59:C8:DD:20:97:71:21:49:31:94:94:E7:8A:A6
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584F1467944C07BB9E05A5373C00
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        23.179.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:94:4c:07:bb:9e:05:a5:37:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=c824ac3d-2e77-4b9d-8110-e64b0f8fcaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:b6:52:39:00:31:8d:ba:e3:4e:12:44:17:
                    0a:f6:32:22:3f:db:46:d9:3f:6a:bd:dd:d9:58:72:
                    1a:64:b9:38:52:fd:c4:7d:2e:ee:1c:bd:b3:d6:63:
                    0f:b9:9b:28:9a:53:e9:e0:9c:e7:c1:b2:f1:a8:76:
                    5d:1e:ca:1d:cf:c1:00:b1:80:b1:81:68:3f:56:3c:
                    48:2c:9f:c7:86:c9:82:3c:0f:f1:f7:05:bd:9c:fd:
                    81:7d:7e:2b:f4:f2:7a:5b:1a:61:cf:80:ff:c3:e4:
                    b0:d9:84:ad:69:cd:1a:22:9b:bb:d2:a2:2d:aa:10:
                    3f:f0:f8:17:b2:7e:01:72:b9:85:70:48:1a:76:73:
                    46:8c:a0:37:ec:de:5b:69:73:b3:98:67:2c:a3:5d:
                    ae:dd:a0:ba:a4:d6:78:d5:c8:ca:13:29:f3:6a:a8:
                    83:bc:0c:ab:8f:1b:99:58:8c:84:3f:cd:02:7b:86:
                    fe:39:22:5f:97:fa:32:88:7c:6d:f9:66:7f:ef:ed:
                    2c:02:05:3f:8b:13:50:be:7c:2f:cd:fe:0e:39:82:
                    1f:4f:8c:5c:b1:fe:3c:9b:8a:2a:6d:60:12:c9:b5:
                    35:86:d7:e4:cb:8d:cd:97:37:91:95:78:09:83:10:
                    dc:45:61:30:d0:4d:b1:f9:ff:d6:c3:bb:56:a2:ae:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9D:D2:17:4D:A5:59:C8:DD:20:97:71:21:49:31:94:94:E7:8A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/277201b5-0e55-3f61-95f0-78d34a5cbec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:29:60:5d:81:23:9a:b0:f4:00:c4:47:a2:74:7c:48:15:
         07:82:d6:af:33:e8:85:51:45:a4:8d:c0:21:57:79:93:a6:96:
         95:a0:3c:37:e0:64:15:1a:5f:35:4e:88:ac:b5:97:bf:ef:af:
         df:7e:ea:79:d3:96:b5:87:27:39:73:79:18:7b:c6:25:b0:ad:
         65:04:6b:5a:3d:48:1f:80:36:0e:2c:71:9f:46:05:79:39:44:
         c8:91:71:7c:55:2d:a3:85:93:54:f4:71:44:9b:92:d8:57:89:
         28:ed:27:97:a5:bf:10:fc:b0:f3:a1:e8:0e:c5:8a:e0:e1:fc:
         00:b6:49:4c:f3:39:0b:bb:36:14:ad:53:da:e7:1c:c5:ba:d6:
         05:82:fc:93:81:5f:2a:99:6d:0c:38:03:10:5c:28:78:7d:f2:
         dc:fd:8f:8d:15:65:fe:45:ce:10:3c:d0:a4:80:51:7b:ef:f8:
         4a:43:77:a5:2d:df:f5:9a:1b:1d:38:c5:3f:1f:aa:70:b9:74:
         34:09:70:df:ec:b5:8b:b5:4c:db:e1:09:9d:3f:d9:3e:01:44:
         96:dc:97:ab:5c:d8:76:5c:c2:94:32:43:85:4d:95:ae:60:bb:
         dc:9c:28:16:da:41:42:86:19:5d:a9:99:48:e5:0b:1f:60:17:
         b7:74:7d:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5RMB7ueBaU3PAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi
Mzk1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
YzgyNGFjM2QtMmU3Ny00YjlkLTgxMTAtZTY0YjBmOGZjYWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq722UjkAMY26404SRBcK9jIiP9tG2T9qvd3Z
WHIaZLk4Uv3EfS7uHL2z1mMPuZsomlPp4JznwbLxqHZdHsodz8EAsYCxgWg/VjxI
LJ/HhsmCPA/x9wW9nP2BfX4r9PJ6Wxphz4D/w+Sw2YStac0aIpu70qItqhA/8PgX
sn4BcrmFcEgadnNGjKA37N5baXOzmGcso12u3aC6pNZ41cjKEynzaqiDvAyrjxuZ
WIyEP80Ce4b+OSJfl/oyiHxt+WZ/7+0sAgU/ixNQvnwvzf4OOYIfT4xcsf48m4oq
bWASybU1htfky43NlzeRlXgJgxDcRWEw0E2x+f/Ww7tWoq6miQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOd0hdNpVnI3SCXcSFJMZSU54qmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1
NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvMjc3MjAxYjUtMGU1NS0z
ZjYxLTk1ZjAtNzhkMzRhNWNiZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk
M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk
YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk
NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHvKWBdgSOasPQAxEeidHxIFQeC1q8z6IVRRaSNwCFXeZOmlpWgPDfg
ZBUaXzVOiKy1l7/vr99+6nnTlrWHJzlzeRh7xiWwrWUEa1o9SB+ANg4scZ9GBXk5
RMiRcXxVLaOFk1T0cUSbkthXiSjtJ5elvxD8sPOh6A7FiuDh/AC2SUzzOQu7NhSt
U9rnHMW61gWC/JOBXyqZbQw4AxBcKHh98tz9j40VZf5FzhA80KSAUXvv+EpDd6Ut
3/WaGx04xT8fqnC5dDQJcN/stYu1TNvhCZ0/2T4BRJbcl6tc2HZcwpQyQ4VNla5g
u9ycKBbaQUKGGV2pmUjlCx9gF7d0fZw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:57:52 2026 by rpki-client