Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/af32c2d5-29ec-337e-97b7-de447c725ddb.roa
File:                     af32c2d5-29ec-337e-97b7-de447c725ddb.roa (raw, json)
Hash identifier:          KqRhT48YYBY7XcMgHxxyzBk0LjJG9RbouAfxdHuLoKY=
Subject key identifier:   37:AE:A6:F0:6F:FD:CA:35:49:C1:E3:65:2E:C6:61:BF:AC:21:A3:41
Certificate issuer:       /CN=6990a0d3-5e5b-4bde-8f56-8decc806f26b
Certificate serial:       010D0C9F4328584F19ECE659B428401CFF8A87A0
Authority key identifier: F1:5A:3D:30:A0:50:DB:BA:48:6C:1B:C3:10:A5:4C:43:1F:98:CF:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/af32c2d5-29ec-337e-97b7-de447c725ddb.roa
Signing time:             Tue 08 Sep 2026 00:27:59 +0000
ROA not before:           Tue 08 Sep 2026 00:27:59 +0000
ROA not after:            Mon 07 Dec 2026 01:27:59 +0000
asID:                     46910
IP address blocks:        23.164.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/6990a0d3-5e5b-4bde-8f56-8decc806f26b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/6990a0d3-5e5b-4bde-8f56-8decc806f26b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:ec:e6:59:b4:28:40:1c:ff:8a:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6990a0d3-5e5b-4bde-8f56-8decc806f26b
        Validity
            Not Before: Sep  8 00:27:59 2026 GMT
            Not After : Dec  7 01:27:59 2026 GMT
        Subject: CN=a18751ef-28b9-464e-bd8f-2187669db55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:15:91:ed:5a:c7:d8:3e:40:00:07:41:9b:
                    f6:9d:e4:bc:61:ca:4c:07:a7:5a:d0:d4:06:83:29:
                    02:a7:40:06:5c:20:47:27:f8:74:f7:a0:55:a1:ec:
                    b1:a0:bf:61:ee:4b:d2:c9:33:1c:8f:08:75:92:3c:
                    ba:41:0f:0a:9b:fa:09:4d:13:f1:2d:ba:f9:cc:b6:
                    2d:ca:88:f1:46:ab:63:0b:ab:ce:63:53:8d:58:8e:
                    c3:db:8e:16:6b:21:57:fe:11:42:bf:a6:47:ed:10:
                    2f:d5:70:49:6e:70:88:81:9a:22:6a:48:50:92:8f:
                    de:ae:5f:fe:ff:89:45:fe:01:d1:e7:4b:df:b8:d8:
                    3f:4d:68:cc:5e:a8:c9:f9:d6:d2:23:89:cb:c9:4e:
                    ca:88:92:bf:1d:3f:ea:a8:f1:95:0a:a2:c0:62:13:
                    f2:7e:2c:51:f2:de:b3:0a:12:58:16:73:90:44:ed:
                    63:9f:e7:84:c3:73:b5:a1:92:58:e0:ce:54:ab:6e:
                    28:6e:53:af:30:27:81:13:a0:83:63:be:eb:59:ba:
                    d8:df:74:a6:fd:b2:a7:75:a6:3b:18:b2:6e:89:0c:
                    7d:57:43:e0:1c:20:f9:90:44:e1:34:4d:8f:cb:1e:
                    79:ad:9e:a2:24:3d:86:47:31:17:b1:61:0f:d9:88:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:A6:F0:6F:FD:CA:35:49:C1:E3:65:2E:C6:61:BF:AC:21:A3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/af32c2d5-29ec-337e-97b7-de447c725ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b/6990a0d3-5e5b-4bde-8f56-8decc806f26b.crl

            X509v3 Authority Key Identifier:
                keyid:F1:5A:3D:30:A0:50:DB:BA:48:6C:1B:C3:10:A5:4C:43:1F:98:CF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/6990a0d3-5e5b-4bde-8f56-8decc806f26b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:75:7b:0c:56:3f:8b:df:3d:50:53:9f:95:5a:f3:40:75:10:
         8b:e2:0e:f2:d6:3b:eb:d2:00:1a:59:cb:f2:f5:4f:29:cf:9f:
         ba:9c:b4:0f:da:01:9a:b6:d2:0d:ff:52:d0:fe:f4:b7:a6:6d:
         48:de:bf:20:84:94:de:a5:3a:b8:04:88:e5:ac:65:da:36:cf:
         72:c8:56:d5:f4:56:23:e5:eb:31:a6:ff:99:dc:66:8f:f8:19:
         89:83:c6:d3:83:e2:0a:cb:bf:e5:78:ce:37:6e:04:9e:62:53:
         d9:bc:a9:fd:74:3c:a7:20:24:6e:ac:ba:c3:b5:bf:4a:ea:04:
         ba:08:60:a5:cd:6c:5e:c3:35:78:2b:dd:85:cc:87:8d:59:f0:
         3b:42:52:4e:5c:0d:50:39:b4:a9:8a:a4:b0:ed:b2:e5:25:3d:
         c2:94:78:66:3b:c1:10:70:d3:2c:3d:43:f9:4e:f5:e5:f1:ae:
         39:b7:43:49:4a:9b:4d:b5:29:0a:4a:52:47:0a:46:3a:53:c9:
         d9:7f:c6:da:64:1e:c9:ca:b1:9f:53:e2:d7:b4:08:e3:d3:bc:
         ed:51:8e:1a:1c:10:e7:51:36:4d:8d:3e:4a:fd:d2:63:16:3b:
         a8:aa:81:c2:a2:5e:a7:e8:7d:b5:85:40:c7:fb:91:4b:8b:fe:
         3a:fb:10:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z7OZZtChAHP+Kh6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk5MGEwZDMtNWU1Yi00YmRlLThmNTYtOGRlY2M4MDZm
MjZiMB4XDTI2MDkwODAwMjc1OVoXDTI2MTIwNzAxMjc1OVowLzEtMCsGA1UEAxMk
YTE4NzUxZWYtMjhiOS00NjRlLWJkOGYtMjE4NzY2OWRiNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhQVke1ax9g+QAAHQZv2neS8YcpMB6da0NQG
gykCp0AGXCBHJ/h096BVoeyxoL9h7kvSyTMcjwh1kjy6QQ8Km/oJTRPxLbr5zLYt
yojxRqtjC6vOY1ONWI7D244WayFX/hFCv6ZH7RAv1XBJbnCIgZoiakhQko/erl/+
/4lF/gHR50vfuNg/TWjMXqjJ+dbSI4nLyU7KiJK/HT/qqPGVCqLAYhPyfixR8t6z
ChJYFnOQRO1jn+eEw3O1oZJY4M5Uq24oblOvMCeBE6CDY77rWbrY33Sm/bKndaY7
GLJuiQx9V0PgHCD5kEThNE2Pyx55rZ6iJD2GRzEXsWEP2YiKmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeupvBv/co1ScHjZS7GYb+sIaNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82OTkw
YTBkMy01ZTViLTRiZGUtOGY1Ni04ZGVjYzgwNmYyNmIvYWYzMmMyZDUtMjllYy0z
MzdlLTk3YjctZGU0NDdjNzI1ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNjk5MGEwZDMtNWU1Yi00YmRlLThm
NTYtOGRlY2M4MDZmMjZiLzY5OTBhMGQzLTVlNWItNGJkZS04ZjU2LThkZWNjODA2
ZjI2Yi5jcmwwHwYDVR0jBBgwFoAU8Vo9MKBQ27pIbBvDEKVMQx+Yz40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi82OTkwYTBkMy01ZTViLTRiZGUtOGY1Ni04ZGVj
YzgwNmYyNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6T4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALd1ewxWP4vfPVBTn5Va80B1EIviDvLWO+vSABpZy/L1TynPn7qctA/a
AZq20g3/UtD+9LembUjevyCElN6lOrgEiOWsZdo2z3LIVtX0ViPl6zGm/5ncZo/4
GYmDxtOD4grLv+V4zjduBJ5iU9m8qf10PKcgJG6susO1v0rqBLoIYKXNbF7DNXgr
3YXMh41Z8DtCUk5cDVA5tKmKpLDtsuUlPcKUeGY7wRBw0yw9Q/lO9eXxrjm3Q0lK
m021KQpKUkcKRjpTydl/xtpkHsnKsZ9T4te0COPTvO1RjhocEOdRNk2NPkr90mMW
O6iqgcKiXqfofbWFQMf7kUuL/jr7EGI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:47 2026 by rpki-client