Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/2656c7b8-e4b1-3f90-b404-736cb6534625.roa
File:                     2656c7b8-e4b1-3f90-b404-736cb6534625.roa (raw, json)
Hash identifier:          DfanZHypsFMFEGTva+OiBZaUkdjBic5d4mtFPZkOKQ8=
Subject key identifier:   FB:67:E0:53:1F:20:A9:E2:87:F3:59:F1:DF:5B:E1:78:50:9C:98:08
Certificate issuer:       /CN=42dddf7d-e477-4329-92ff-234b96cc88c2
Certificate serial:       010D0C9F4328584FB670FD7D3FE59D5029022F80
Authority key identifier: 50:D9:C3:C5:97:A5:0D:70:F0:A6:0B:53:66:5D:4C:B3:0A:10:D4:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/2656c7b8-e4b1-3f90-b404-736cb6534625.roa
Signing time:             Tue 03 Nov 2026 02:00:13 +0000
ROA not before:           Tue 03 Nov 2026 02:00:13 +0000
ROA not after:            Mon 01 Feb 2027 02:00:13 +0000
asID:                     402959
IP address blocks:        23.163.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/42dddf7d-e477-4329-92ff-234b96cc88c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/42dddf7d-e477-4329-92ff-234b96cc88c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:70:fd:7d:3f:e5:9d:50:29:02:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dddf7d-e477-4329-92ff-234b96cc88c2
        Validity
            Not Before: Nov  3 02:00:13 2026 GMT
            Not After : Feb  1 02:00:13 2027 GMT
        Subject: CN=231b39f9-b968-48c5-bf6a-86901c79552c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:a1:cc:14:4d:c0:2a:9c:72:31:ce:b9:9e:
                    c6:48:60:2b:c0:c8:fe:fd:0f:48:eb:87:5a:63:95:
                    47:3e:3a:0c:5e:c7:6c:e5:4d:2d:fb:a1:87:98:0c:
                    e0:5b:7f:ab:ed:f9:61:91:de:19:3e:e6:65:d3:97:
                    3a:6f:06:af:52:4d:9f:08:96:d9:b0:89:1b:84:58:
                    d0:76:4c:f5:80:d8:63:ee:9e:ed:ea:f8:8f:4c:a8:
                    19:e4:58:ae:66:ed:29:d3:b4:fa:98:74:a7:8b:74:
                    f2:fd:04:20:3d:ca:59:69:b2:1a:ad:71:87:09:83:
                    8c:00:15:3f:cc:cc:66:8b:e1:56:4f:1f:13:db:6b:
                    f9:e0:f4:fe:27:ee:fd:83:d4:ff:5c:5e:21:e8:36:
                    86:6b:df:cc:f0:76:ee:b6:77:b0:86:5b:91:50:a3:
                    78:25:1b:09:a5:f3:cd:0b:11:e0:06:84:8e:54:b8:
                    b1:d2:e4:f7:0e:44:53:27:19:65:48:fe:53:04:96:
                    47:ae:e1:89:d6:b5:d8:be:ee:74:6c:7e:0d:c4:c6:
                    bc:44:d1:ee:93:9a:97:5a:9d:24:51:0f:fd:aa:2b:
                    ab:4e:4f:7c:92:a2:00:52:29:6d:d1:b9:e6:bc:a2:
                    d4:eb:b3:a5:a6:0c:bd:6c:37:c0:87:97:a6:53:5e:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:E0:53:1F:20:A9:E2:87:F3:59:F1:DF:5B:E1:78:50:9C:98:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/2656c7b8-e4b1-3f90-b404-736cb6534625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2/42dddf7d-e477-4329-92ff-234b96cc88c2.crl

            X509v3 Authority Key Identifier:
                keyid:50:D9:C3:C5:97:A5:0D:70:F0:A6:0B:53:66:5D:4C:B3:0A:10:D4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/42dddf7d-e477-4329-92ff-234b96cc88c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:70:50:78:c8:c2:73:94:68:0c:b0:76:ef:cf:16:c6:a6:4a:
         97:4b:c3:fe:16:28:6f:47:6e:de:4c:f2:20:90:15:cc:bb:da:
         35:90:97:9e:33:23:c4:5d:4e:45:d7:06:4d:f5:1e:60:72:0c:
         b5:84:fb:68:c6:df:bc:d3:4a:34:eb:36:2f:ed:e6:af:10:f4:
         36:09:c7:b0:15:19:4f:8e:11:79:d2:4a:5d:39:d1:45:e9:b5:
         24:81:78:e4:3a:dd:77:37:a5:9e:c2:95:55:fd:3f:9a:3b:7a:
         22:a7:46:be:49:24:90:b4:fd:a5:09:da:56:08:ac:cb:28:33:
         7b:b3:df:12:f7:c1:6d:fb:7f:9a:bd:72:5b:93:d2:ad:87:9d:
         b6:7f:39:62:9a:cc:d3:e7:34:14:13:30:3e:57:55:03:2e:21:
         fc:93:e9:84:8d:c9:3e:94:f8:a1:31:ed:e0:99:d3:f1:c6:8c:
         85:89:d6:59:c0:93:41:26:1f:a7:34:ef:1c:74:05:e9:f4:69:
         a9:04:1f:fb:6e:d7:f6:f9:29:e8:a3:06:30:47:62:69:73:f3:
         74:1b:d3:52:97:4d:28:a5:ad:fc:03:36:9a:51:be:e3:ff:68:
         c8:30:ed:e4:c9:99:f9:d2:ed:74:aa:68:6b:3d:0a:e4:d0:a5:
         eb:d2:00:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cP19P+WdUCkCL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJkZGRmN2QtZTQ3Ny00MzI5LTkyZmYtMjM0Yjk2Y2M4
OGMyMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk
MjMxYjM5ZjktYjk2OC00OGM1LWJmNmEtODY5MDFjNzk1NTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbihzBRNwCqccjHOuZ7GSGArwMj+/Q9I64da
Y5VHPjoMXsds5U0t+6GHmAzgW3+r7flhkd4ZPuZl05c6bwavUk2fCJbZsIkbhFjQ
dkz1gNhj7p7t6viPTKgZ5FiuZu0p07T6mHSni3Ty/QQgPcpZabIarXGHCYOMABU/
zMxmi+FWTx8T22v54PT+J+79g9T/XF4h6DaGa9/M8HbutnewhluRUKN4JRsJpfPN
CxHgBoSOVLix0uT3DkRTJxllSP5TBJZHruGJ1rXYvu50bH4NxMa8RNHuk5qXWp0k
UQ/9qiurTk98kqIAUilt0bnmvKLU67Olpgy9bDfAh5emU14AUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtn4FMfIKnih/NZ8d9b4XhQnJgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80MmRk
ZGY3ZC1lNDc3LTQzMjktOTJmZi0yMzRiOTZjYzg4YzIvMjY1NmM3YjgtZTRiMS0z
ZjkwLWI0MDQtNzM2Y2I2NTM0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDJkZGRmN2QtZTQ3Ny00MzI5LTky
ZmYtMjM0Yjk2Y2M4OGMyLzQyZGRkZjdkLWU0NzctNDMyOS05MmZmLTIzNGI5NmNj
ODhjMi5jcmwwHwYDVR0jBBgwFoAUUNnDxZelDXDwpgtTZl1MswoQ1F0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80MmRkZGY3ZC1lNDc3LTQzMjktOTJmZi0yMzRi
OTZjYzg4YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6M0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZwUHjIwnOUaAywdu/PFsamSpdLw/4WKG9Hbt5M8iCQFcy72jWQl54z
I8RdTkXXBk31HmByDLWE+2jG37zTSjTrNi/t5q8Q9DYJx7AVGU+OEXnSSl050UXp
tSSBeOQ63Xc3pZ7ClVX9P5o7eiKnRr5JJJC0/aUJ2lYIrMsoM3uz3xL3wW37f5q9
cluT0q2HnbZ/OWKazNPnNBQTMD5XVQMuIfyT6YSNyT6U+KEx7eCZ0/HGjIWJ1lnA
k0EmH6c07xx0Ben0aakEH/tu1/b5KeijBjBHYmlz83Qb01KXTSilrfwDNppRvuP/
aMgw7eTJmfnS7XSqaGs9CuTQpevSAO8=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:10:18 2026 by rpki-client