Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/9489729a-3538-3394-b9cf-f65deb3665bd.roa
File:                     9489729a-3538-3394-b9cf-f65deb3665bd.roa (raw, json)
Hash identifier:          Wj7099YTyCohgIT+o0eH2uVZXuBZd8euuU0hMMU0kKs=
Subject key identifier:   A2:79:8A:80:81:01:65:2D:80:DD:CC:00:0B:7E:DB:B7:DC:90:39:3E
Certificate issuer:       /CN=4230aeba-5973-48a9-9310-489feb13237b
Certificate serial:       010D0C9F4328584F2527A2B5D394FDE75BD7CE10
Authority key identifier: CB:F6:B2:E5:BD:DB:B8:4E:AF:7B:FF:35:4E:F1:2C:BA:36:70:C0:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/9489729a-3538-3394-b9cf-f65deb3665bd.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     54384
IP address blocks:        74.123.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/4230aeba-5973-48a9-9310-489feb13237b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/4230aeba-5973-48a9-9310-489feb13237b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a2:b5:d3:94:fd:e7:5b:d7:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4230aeba-5973-48a9-9310-489feb13237b
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=800ad43e-464d-419b-9bf1-47430c5fe502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:04:52:aa:9d:c5:f4:11:66:cc:71:4e:17:
                    d8:a6:77:39:87:fd:cf:81:86:85:eb:10:5f:07:67:
                    b6:a9:b2:40:f8:ec:bf:4b:89:99:2f:5d:61:ab:39:
                    96:8d:5c:6c:63:17:09:dd:c6:a7:64:17:8a:fc:c2:
                    65:2b:ce:c2:ef:5b:9b:91:55:a3:1c:d0:2b:6f:a0:
                    26:7f:8a:f6:da:58:07:7b:2a:bd:b3:d0:7e:ab:f3:
                    2f:b3:2e:c7:8a:37:5b:ed:d3:a7:9a:62:c0:d9:65:
                    2f:d2:74:f4:d9:54:d6:e0:54:e4:af:e3:e2:05:15:
                    23:fd:e8:68:aa:21:7a:d6:00:fc:29:45:98:a3:18:
                    51:5a:83:e7:a6:00:e6:15:8e:4c:96:eb:af:14:b6:
                    1f:b4:a3:2d:27:81:bd:f0:ba:30:f5:fb:b8:a0:bc:
                    7e:54:11:3e:12:f6:f8:4b:e9:fb:68:82:8a:a7:d5:
                    ab:99:60:a2:cf:36:94:1a:0a:08:55:60:41:24:10:
                    6d:7a:38:e1:ab:44:3d:fc:b7:0f:89:20:7a:c7:2b:
                    0b:75:4c:92:b5:57:36:27:ab:3a:ca:95:db:58:dd:
                    c3:eb:8c:f7:64:a7:7e:9e:f8:b0:26:c1:0f:62:77:
                    bf:db:64:ca:2c:a2:27:4b:2b:91:d6:03:53:5b:bd:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:8A:80:81:01:65:2D:80:DD:CC:00:0B:7E:DB:B7:DC:90:39:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/9489729a-3538-3394-b9cf-f65deb3665bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b/4230aeba-5973-48a9-9310-489feb13237b.crl

            X509v3 Authority Key Identifier:
                keyid:CB:F6:B2:E5:BD:DB:B8:4E:AF:7B:FF:35:4E:F1:2C:BA:36:70:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4230aeba-5973-48a9-9310-489feb13237b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:62:4e:8c:be:89:1a:70:5c:15:07:50:e2:7f:5c:45:bc:ef:
         39:87:39:55:df:86:61:4e:c6:36:24:eb:6d:c7:84:c7:bf:1e:
         d0:15:d3:9b:a0:28:ad:d2:20:48:05:4d:2e:41:5a:f6:66:8a:
         5e:86:70:13:64:63:a6:49:80:32:c6:c5:a9:ae:98:7f:e6:a0:
         2a:30:36:4e:b0:82:35:5e:c2:c5:00:7e:5a:f5:c3:51:37:9d:
         9a:9a:a7:b4:b5:1b:02:5d:bf:09:8c:33:ba:de:81:d3:d9:dc:
         d0:0b:2e:e6:76:94:d0:ed:42:1d:99:c1:c6:0e:99:4c:1d:e0:
         ce:63:d8:87:e5:e4:e6:7c:33:83:71:7e:37:94:09:01:4a:b0:
         c9:fe:93:6a:8c:d7:2b:82:13:b7:5f:cb:2f:e0:cc:a5:1b:bf:
         52:03:88:f9:8a:7a:85:76:7f:1e:44:91:e9:8c:03:18:a5:8a:
         ce:b4:2a:e5:cc:9a:76:fd:84:b9:c8:27:87:19:68:72:c1:ae:
         d3:77:6a:55:65:11:91:b3:d0:dd:31:94:43:ee:82:55:34:d6:
         1b:09:b1:5b:08:a9:8f:9c:bc:ff:8e:88:ea:c8:77:19:ad:cc:
         5d:81:ee:cc:29:f1:31:34:d3:56:dd:89:8b:5a:8d:b1:fb:ab:
         25:ce:76:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6K105T951vXzhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzMGFlYmEtNTk3My00OGE5LTkzMTAtNDg5ZmViMTMy
MzdiMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk
ODAwYWQ0M2UtNDY0ZC00MTliLTliZjEtNDc0MzBjNWZlNTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/UEUqqdxfQRZsxxThfYpnc5h/3PgYaF6xBf
B2e2qbJA+Oy/S4mZL11hqzmWjVxsYxcJ3canZBeK/MJlK87C71ubkVWjHNArb6Am
f4r22lgHeyq9s9B+q/Mvsy7Hijdb7dOnmmLA2WUv0nT02VTW4FTkr+PiBRUj/eho
qiF61gD8KUWYoxhRWoPnpgDmFY5MluuvFLYftKMtJ4G98Low9fu4oLx+VBE+Evb4
S+n7aIKKp9WrmWCizzaUGgoIVWBBJBBtejjhq0Q9/LcPiSB6xysLdUyStVc2J6s6
ypXbWN3D64z3ZKd+nviwJsEPYne/22TKLKInSyuR1gNTW71FsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJ5ioCBAWUtgN3MAAt+27fckDk+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80MjMw
YWViYS01OTczLTQ4YTktOTMxMC00ODlmZWIxMzIzN2IvOTQ4OTcyOWEtMzUzOC0z
Mzk0LWI5Y2YtZjY1ZGViMzY2NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDIzMGFlYmEtNTk3My00OGE5LTkz
MTAtNDg5ZmViMTMyMzdiLzQyMzBhZWJhLTU5NzMtNDhhOS05MzEwLTQ4OWZlYjEz
MjM3Yi5jcmwwHwYDVR0jBBgwFoAUy/ay5b3buE6ve/81TvEsujZwwGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80MjMwYWViYS01OTczLTQ4YTktOTMxMC00ODlm
ZWIxMzIzN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnvCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZiToy+iRpwXBUHUOJ/XEW87zmHOVXfhmFOxjYk623HhMe/HtAV05ug
KK3SIEgFTS5BWvZmil6GcBNkY6ZJgDLGxamumH/moCowNk6wgjVewsUAflr1w1E3
nZqap7S1GwJdvwmMM7regdPZ3NALLuZ2lNDtQh2ZwcYOmUwd4M5j2Ifl5OZ8M4Nx
fjeUCQFKsMn+k2qM1yuCE7dfyy/gzKUbv1IDiPmKeoV2fx5EkemMAxilis60KuXM
mnb9hLnIJ4cZaHLBrtN3alVlEZGz0N0xlEPuglU01hsJsVsIqY+cvP+OiOrIdxmt
zF2B7swp8TE001bdiYtajbH7qyXOdik=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:50:27 2026 by rpki-client