Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa
File:                     273c7059-3aa2-3179-abe5-d96978ef5884.roa (raw, json)
Hash identifier:          DOEfh+4c3dDuqdD22EreOysOjT4uZPM8ULaApa8xPrU=
Subject key identifier:   1A:D8:CA:75:3F:A9:0E:08:45:E6:7D:E6:D4:7B:F5:A0:8D:32:5A:E4
Certificate issuer:       /CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
Certificate serial:       010D0C9F4328584C751C2D22D7DD47EAE32DE980
Authority key identifier: C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa
Signing time:             Thu 08 Jan 2026 14:00:39 +0000
ROA not before:           Thu 08 Jan 2026 14:00:39 +0000
ROA not after:            Wed 08 Apr 2026 13:00:39 +0000
asID:                     17243
IP address blocks:        23.159.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:75:1c:2d:22:d7:dd:47:ea:e3:2d:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
        Validity
            Not Before: Jan  8 14:00:39 2026 GMT
            Not After : Apr  8 13:00:39 2026 GMT
        Subject: CN=7762514c-228d-4b05-9783-8d425e9255ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:f6:ac:02:1e:ce:07:53:9d:ae:30:aa:f9:
                    6e:20:62:4a:d8:48:bf:e6:f7:9d:a7:e5:16:45:3f:
                    d6:96:90:99:d4:e4:5f:ab:8f:cd:2b:e7:0b:a2:cb:
                    c6:c7:c4:7a:e9:ba:47:23:b5:5f:3e:a4:7d:cb:88:
                    f4:e4:cf:75:9b:b1:9c:14:9c:73:3d:f5:6c:9b:c5:
                    3c:c2:2d:27:bc:6d:aa:ec:84:b2:a4:6d:d8:92:e6:
                    ca:f1:7c:01:9a:49:f0:36:46:24:71:25:72:b5:87:
                    e6:ae:0a:e2:07:74:4a:34:ae:49:1b:db:5e:11:1d:
                    95:a0:a6:40:cb:27:92:3b:ef:66:05:0e:7c:ab:5d:
                    db:cc:67:b4:43:ab:5d:2b:de:66:10:eb:25:5d:69:
                    08:7b:2b:be:d7:f4:c2:16:5d:05:19:2e:90:22:82:
                    f7:73:69:f7:13:7a:93:2e:23:0f:ff:e9:37:d3:95:
                    2e:b8:ab:f1:8b:54:78:e9:8d:a9:02:b6:40:5a:ef:
                    02:93:fe:cd:3b:bc:50:e6:34:68:84:66:ad:a7:07:
                    d3:11:03:90:39:e8:01:5c:17:66:84:60:19:53:06:
                    c5:c5:8c:28:d1:65:c8:e5:1f:47:6b:8c:9b:a3:94:
                    e7:83:4f:1e:09:d2:cf:a7:14:76:44:3b:6e:77:7f:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:CA:75:3F:A9:0E:08:45:E6:7D:E6:D4:7B:F5:A0:8D:32:5A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e3:78:af:72:e9:fb:66:cf:37:8d:28:29:ae:4c:07:0e:34:
         3d:be:40:55:56:20:cd:d8:e5:ab:f6:00:ee:d4:0f:f0:7e:9c:
         85:6c:fe:aa:23:da:80:08:76:48:0a:45:a0:44:37:74:6d:a3:
         e3:23:be:ef:d6:f0:a8:7d:e6:53:d2:b0:75:09:00:ed:16:2e:
         5e:b9:c3:6d:dc:11:4b:d2:dc:94:88:3c:f8:d5:81:40:ef:a2:
         ab:6a:48:52:bc:58:6e:21:18:2a:97:f6:3b:a5:86:ea:33:b0:
         71:ca:d5:21:1e:b9:ec:6b:e1:e9:cc:bf:2f:f6:22:2b:ef:03:
         e9:aa:85:ba:6f:15:52:c4:ee:18:d9:24:81:32:03:e6:55:8e:
         19:a5:66:bc:46:3c:4e:04:12:30:ca:41:a5:b9:61:2b:29:69:
         fc:0a:40:69:c4:dc:82:6d:82:e5:1b:d6:25:7d:5f:72:61:3a:
         15:c3:80:42:16:1c:66:7b:51:f4:d9:c3:10:45:b4:23:f5:35:
         63:8d:5c:d3:db:66:47:8e:1c:d2:7e:e0:03:7c:7d:8e:d1:19:
         fe:01:5c:7f:34:87:89:f2:94:0a:1c:5c:89:de:7c:ca:ec:60:
         2f:71:ce:d5:fe:2f:79:4a:5a:20:80:94:b7:21:66:ea:2d:ab:
         bd:d9:a9:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HC0i191H6uMt6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNjYzFjZjgtMjRkNi00ZTdmLWIwMDktYThkYzUxNGFl
ODVmMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
Nzc2MjUxNGMtMjI4ZC00YjA1LTk3ODMtOGQ0MjVlOTI1NWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozr2rAIezgdTna4wqvluIGJK2Ei/5vedp+UW
RT/WlpCZ1ORfq4/NK+cLosvGx8R66bpHI7VfPqR9y4j05M91m7GcFJxzPfVsm8U8
wi0nvG2q7ISypG3YkubK8XwBmknwNkYkcSVytYfmrgriB3RKNK5JG9teER2VoKZA
yyeSO+9mBQ58q13bzGe0Q6tdK95mEOslXWkIeyu+1/TCFl0FGS6QIoL3c2n3E3qT
LiMP/+k305UuuKvxi1R46Y2pArZAWu8Ck/7NO7xQ5jRohGatpwfTEQOQOegBXBdm
hGAZUwbFxYwo0WXI5R9Ha4ybo5Tng08eCdLPpxR2RDtud38wOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrYynU/qQ4IReZ95tR79aCNMlrkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kY2Nj
MWNmOC0yNGQ2LTRlN2YtYjAwOS1hOGRjNTE0YWU4NWYvMjczYzcwNTktM2FhMi0z
MTc5LWFiZTUtZDk2OTc4ZWY1ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGNjYzFjZjgtMjRkNi00ZTdmLWIw
MDktYThkYzUxNGFlODVmL2RjY2MxY2Y4LTI0ZDYtNGU3Zi1iMDA5LWE4ZGM1MTRh
ZTg1Zi5jcmwwHwYDVR0jBBgwFoAUyWBnFL3a7NwOsOqq4bp8jCyvZBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kY2NjMWNmOC0yNGQ2LTRlN2YtYjAwOS1hOGRj
NTE0YWU4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5/YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTjeK9y6ftmzzeNKCmuTAcOND2+QFVWIM3Y5av2AO7UD/B+nIVs/qoj
2oAIdkgKRaBEN3Rto+Mjvu/W8Kh95lPSsHUJAO0WLl65w23cEUvS3JSIPPjVgUDv
oqtqSFK8WG4hGCqX9julhuozsHHK1SEeuexr4enMvy/2IivvA+mqhbpvFVLE7hjZ
JIEyA+ZVjhmlZrxGPE4EEjDKQaW5YSspafwKQGnE3IJtguUb1iV9X3JhOhXDgEIW
HGZ7UfTZwxBFtCP1NWONXNPbZkeOHNJ+4AN8fY7RGf4BXH80h4nylAocXInefMrs
YC9xztX+L3lKWiCAlLchZuotq73ZqUk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:39 2026 by rpki-client