Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
File:                     afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json)
Hash identifier:          MPQbpzGQ9mvprGRrcrqHqx19oCqTHWrDkbpY1jzoRhc=
Subject key identifier:   80:99:60:0E:E1:B1:C7:54:EF:0C:8F:79:B7:30:6E:76:13:D7:04:14
Certificate issuer:       /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Certificate serial:       010D0C9F4328584F3FAD3C3CC4B8386B43CDD500
Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     399392
IP address blocks:        23.175.112.0/24 maxlen: 24
                          2602:fcb6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:3c:3c:c4:b8:38:6b:43:cd:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=ed4013d1-b08e-4a26-8be1-468dc00620d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:6e:03:aa:7d:b7:01:e1:de:af:6b:ba:82:
                    9e:d6:66:cf:be:f8:bb:52:7e:f5:a7:ab:63:79:bb:
                    65:87:54:43:fe:27:b1:e8:eb:d1:1c:f5:74:01:2a:
                    c4:d8:88:95:8f:a0:35:9e:9e:8a:24:6e:b8:c0:da:
                    04:fb:4e:1a:4e:ad:cf:17:0a:ca:bf:8b:02:88:2c:
                    4b:df:dc:4e:38:46:45:27:3c:21:85:18:dc:ac:72:
                    7e:05:c6:0c:72:28:7c:03:9a:29:9f:0e:7e:46:f2:
                    d9:63:fb:da:64:6a:c0:46:c4:2d:3b:8f:f6:74:40:
                    b1:7f:30:2c:36:bb:0d:72:50:1a:5f:21:4f:e2:c3:
                    c3:30:e1:0b:67:27:85:e6:6e:10:65:cc:47:ae:b8:
                    e8:03:7f:d8:46:62:69:3a:28:de:65:10:d8:c2:4c:
                    6d:e1:92:74:ab:a4:d8:94:e3:3c:73:29:4a:c8:9d:
                    91:80:0e:58:cb:c9:da:87:c2:d2:ac:45:f3:33:01:
                    16:91:74:86:45:42:22:da:97:14:a7:9b:e7:3b:2f:
                    99:e3:a8:46:94:41:f0:2b:dd:cc:76:a5:56:1b:a3:
                    6a:d4:c4:3c:f8:b6:39:d0:54:f1:18:c1:b8:80:3e:
                    a8:0d:a9:c2:51:3e:b6:3a:14:a5:2b:aa:c4:46:7a:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:60:0E:E1:B1:C7:54:EF:0C:8F:79:B7:30:6E:76:13:D7:04:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl

            X509v3 Authority Key Identifier:
                keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.112.0/24
                IPv6:
                  2602:fcb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:c8:21:f4:d5:5c:90:fc:ee:9b:52:05:d6:c9:6b:82:cd:
         62:d1:d9:e8:4f:81:23:2f:3d:ec:1d:55:ee:26:1d:4d:a0:fb:
         04:8d:e6:0d:16:fa:60:a1:bf:20:b0:79:b0:1c:87:6a:80:3f:
         f2:6c:26:83:bc:83:86:58:3f:22:e7:29:2e:97:cd:5e:08:86:
         e6:7c:d4:19:d9:06:14:05:45:93:a6:1c:73:ec:2d:d6:f6:ce:
         e5:8f:c1:4e:2f:7f:74:be:1a:0e:01:92:da:63:42:e9:7b:ec:
         f6:f6:40:93:7a:0e:7b:ca:a8:85:e0:48:e2:20:ab:cb:62:e2:
         72:7a:95:bf:27:ad:82:4c:b5:b1:33:6d:4f:cd:1f:e2:3d:78:
         68:a3:3e:c8:9b:82:bc:0f:ac:f7:16:6e:8d:2a:ae:86:54:58:
         fe:15:4e:da:bd:39:4c:44:0a:6f:94:d3:9f:ec:84:ba:22:a2:
         48:13:e5:3f:45:57:0f:b4:a9:88:77:be:b2:e2:c6:a4:52:97:
         49:6b:28:cd:71:d4:69:a3:b9:9d:4f:50:9d:94:5b:34:cd:70:
         11:4f:18:b2:f4:67:1f:89:b6:91:8b:a1:e2:b3:44:8e:35:69:
         f8:99:de:76:c4:99:9b:7d:3d:fe:3b:bc:80:49:af:cf:b2:31:
         7c:e6:39:3e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8/rTw8xLg4a0PN1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM4NGFkYjMtODQzYi00ZDZlLWEyYjQtNmRjMzcwOTNk
ZmUxMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZWQ0MDEzZDEtYjA4ZS00YTI2LThiZTEtNDY4ZGMwMDYyMGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29JuA6p9twHh3q9ruoKe1mbPvvi7Un71p6tj
ebtlh1RD/iex6OvRHPV0ASrE2IiVj6A1np6KJG64wNoE+04aTq3PFwrKv4sCiCxL
39xOOEZFJzwhhRjcrHJ+BcYMcih8A5opnw5+RvLZY/vaZGrARsQtO4/2dECxfzAs
NrsNclAaXyFP4sPDMOELZyeF5m4QZcxHrrjoA3/YRmJpOijeZRDYwkxt4ZJ0q6TY
lOM8cylKyJ2RgA5Yy8nah8LSrEXzMwEWkXSGRUIi2pcUp5vnOy+Z46hGlEHwK93M
dqVWG6Nq1MQ8+LY50FTxGMG4gD6oDanCUT62OhSlK6rERnqMdQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFICZYA7hscdU7wyPebcwbnYT1wQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0
YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMzNzA5M2RmZTEvYWZjZWM0N2YtMGFiZC0z
NDU1LTk4ZTEtMWM2NThlZWMwZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4NGFkYjMtODQzYi00ZDZlLWEy
YjQtNmRjMzcwOTNkZmUxLzEzODRhZGIzLTg0M2ItNGQ2ZS1hMmI0LTZkYzM3MDkz
ZGZlMS5jcmwwHwYDVR0jBBgwFoAUU41ctRjeiEpHXXXcXjTo22/Gbx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzg0YWRiMy04NDNiLTRkNmUtYTJiNC02ZGMz
NzA5M2RmZTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF69wMA4E
AgACMAgDBgQmAvy2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/1cgh9NVckPzum1IF1slrgs1i0dnoT4Ej
Lz3sHVXuJh1NoPsEjeYNFvpgob8gsHmwHIdqgD/ybCaDvIOGWD8i5ykul81eCIbm
fNQZ2QYUBUWTphxz7C3W9s7lj8FOL390vhoOAZLaY0Lpe+z29kCTeg57yqiF4Eji
IKvLYuJyepW/J62CTLWxM21PzR/iPXhooz7Im4K8D6z3Fm6NKq6GVFj+FU7avTlM
RApvlNOf7IS6IqJIE+U/RVcPtKmId76y4sakUpdJayjNcdRpo7mdT1CdlFs0zXAR
Txiy9GcfibaRi6His0SONWn4md52xJmbfT3+O7yASa/PsjF85jk+
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:03:19 2026 by rpki-client