Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/ebd7de09-73e8-3b0e-93b1-db908aee4cb6.roa
File:                     ebd7de09-73e8-3b0e-93b1-db908aee4cb6.roa (raw, json)
Hash identifier:          cydrftnPNEhAvnJeHyw1HVCVYmbHxJU60gjhH45XDBI=
Subject key identifier:   86:7B:EF:EE:5F:49:6F:71:93:B4:E7:3B:AA:98:EB:95:F2:9C:E5:D7
Certificate issuer:       /CN=bde4205a-0fa2-486d-b281-cafc7f3140cc
Certificate serial:       010D0C9F4328584EE445941E7547123FA4619280
Authority key identifier: 1C:87:6E:6A:C0:77:8F:4D:B2:6B:C2:76:F9:95:FD:41:81:27:10:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/ebd7de09-73e8-3b0e-93b1-db908aee4cb6.roa
Signing time:             Wed 19 Aug 2026 19:13:00 +0000
ROA not before:           Wed 19 Aug 2026 19:13:00 +0000
ROA not after:            Tue 17 Nov 2026 20:10:29 +0000
asID:                     46584
IP address blocks:        23.162.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/bde4205a-0fa2-486d-b281-cafc7f3140cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/bde4205a-0fa2-486d-b281-cafc7f3140cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:45:94:1e:75:47:12:3f:a4:61:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde4205a-0fa2-486d-b281-cafc7f3140cc
        Validity
            Not Before: Aug 19 19:13:00 2026 GMT
            Not After : Nov 17 20:10:29 2026 GMT
        Subject: CN=5bd3f7fc-3f79-4ad2-ac0e-0231160463e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:68:3e:bc:a4:89:ac:ea:a4:a1:f5:dd:3e:
                    7f:c3:da:b7:26:69:26:25:6f:39:1a:37:6b:bd:71:
                    f6:fa:2c:53:c3:c5:ae:f6:91:94:7f:69:f0:12:46:
                    92:15:57:f9:c9:0c:8a:b3:8b:f2:e5:1e:e5:eb:dd:
                    23:05:e8:17:c6:13:5e:d0:89:fc:9d:c5:59:3d:53:
                    29:a4:58:c2:45:d5:04:a0:9f:34:5f:a0:bc:35:c2:
                    fd:8a:42:a5:f0:fb:c9:71:f1:05:cd:23:b2:20:56:
                    20:52:cc:87:2e:90:fa:66:62:00:89:33:a3:b5:0d:
                    76:1d:bd:87:33:56:f2:84:d8:d7:83:78:a9:78:4c:
                    1d:42:24:4e:02:69:2b:0a:1e:6f:f0:e6:21:21:b3:
                    f8:37:66:8b:5d:d8:a1:ef:6f:3b:34:a4:55:0f:bf:
                    ae:82:d8:d6:be:90:de:cf:21:d7:75:3b:d8:a8:e3:
                    b8:e4:97:d5:c8:ae:d7:44:a2:78:10:76:e5:a4:69:
                    08:eb:b9:67:09:bf:5d:b4:a8:fc:46:e8:f1:be:05:
                    54:4a:eb:00:fd:de:18:36:0d:40:2e:4c:c8:4b:0e:
                    46:8a:aa:c2:a2:13:3e:d7:cd:90:1d:02:d1:d7:5a:
                    13:dd:d9:5d:c8:1e:17:11:4e:42:9b:d3:57:b6:2b:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:EF:EE:5F:49:6F:71:93:B4:E7:3B:AA:98:EB:95:F2:9C:E5:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/ebd7de09-73e8-3b0e-93b1-db908aee4cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc/bde4205a-0fa2-486d-b281-cafc7f3140cc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:87:6E:6A:C0:77:8F:4D:B2:6B:C2:76:F9:95:FD:41:81:27:10:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bde4205a-0fa2-486d-b281-cafc7f3140cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:03:7c:37:c0:b1:c4:5d:e9:f3:5a:62:8f:96:1d:5a:9a:bc:
         53:51:2c:44:b6:7f:72:04:b4:66:98:37:ed:44:de:55:39:29:
         70:01:11:ef:0d:45:f9:9c:58:1f:70:2f:3d:7b:19:60:c9:6e:
         e5:bb:17:86:cc:b8:22:39:ab:35:c9:06:81:e5:35:cc:00:8a:
         fb:1c:64:32:2b:5d:fd:09:f8:45:dd:0a:eb:38:83:b5:88:75:
         c9:80:05:3f:61:d5:01:22:37:32:6e:75:ce:80:b3:0a:9d:93:
         35:4f:c7:4c:f9:c8:44:6d:64:6f:f7:29:0b:65:fb:e7:4b:4b:
         e6:e2:e6:1d:4e:90:57:bd:c3:7d:b5:11:45:10:f8:21:64:67:
         fe:b9:16:34:55:09:99:92:a2:72:e7:73:6b:f2:87:39:1f:ee:
         e6:c0:4d:d2:34:47:fa:16:79:03:fa:8b:18:d5:fb:a0:d8:b5:
         66:19:90:0a:a7:90:74:75:02:68:0b:5a:54:19:fe:7b:63:3c:
         73:13:55:88:c6:1d:93:00:d4:0b:bc:19:42:51:ff:77:88:3b:
         58:75:f8:05:3c:05:36:f8:7d:f7:c2:08:3e:19:ce:ab:79:fd:
         d6:17:87:f1:27:27:ee:42:51:7d:dc:c5:42:ad:08:ce:55:65:
         0f:6d:2c:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kRZQedUcSP6RhkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRlNDIwNWEtMGZhMi00ODZkLWIyODEtY2FmYzdmMzE0
MGNjMB4XDTI2MDgxOTE5MTMwMFoXDTI2MTExNzIwMTAyOVowLzEtMCsGA1UEAxMk
NWJkM2Y3ZmMtM2Y3OS00YWQyLWFjMGUtMDIzMTE2MDQ2M2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHdoPrykiazqpKH13T5/w9q3JmkmJW85Gjdr
vXH2+ixTw8Wu9pGUf2nwEkaSFVf5yQyKs4vy5R7l690jBegXxhNe0In8ncVZPVMp
pFjCRdUEoJ80X6C8NcL9ikKl8PvJcfEFzSOyIFYgUsyHLpD6ZmIAiTOjtQ12Hb2H
M1byhNjXg3ipeEwdQiROAmkrCh5v8OYhIbP4N2aLXdih7287NKRVD7+ugtjWvpDe
zyHXdTvYqOO45JfVyK7XRKJ4EHblpGkI67lnCb9dtKj8RujxvgVUSusA/d4YNg1A
LkzISw5GiqrCohM+182QHQLR11oT3dldyB4XEU5Cm9NXtiu9GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZ77+5fSW9xk7TnO6qY65XynOXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZGU0
MjA1YS0wZmEyLTQ4NmQtYjI4MS1jYWZjN2YzMTQwY2MvZWJkN2RlMDktNzNlOC0z
YjBlLTkzYjEtZGI5MDhhZWU0Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYmRlNDIwNWEtMGZhMi00ODZkLWIy
ODEtY2FmYzdmMzE0MGNjL2JkZTQyMDVhLTBmYTItNDg2ZC1iMjgxLWNhZmM3ZjMx
NDBjYy5jcmwwHwYDVR0jBBgwFoAUHIduasB3j02ya8J2+ZX9QYEnEHgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZGU0MjA1YS0wZmEyLTQ4NmQtYjI4MS1jYWZj
N2YzMTQwY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6K0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQDfDfAscRd6fNaYo+WHVqavFNRLES2f3IEtGaYN+1E3lU5KXABEe8N
RfmcWB9wLz17GWDJbuW7F4bMuCI5qzXJBoHlNcwAivscZDIrXf0J+EXdCus4g7WI
dcmABT9h1QEiNzJudc6AswqdkzVPx0z5yERtZG/3KQtl++dLS+bi5h1OkFe9w321
EUUQ+CFkZ/65FjRVCZmSonLnc2vyhzkf7ubATdI0R/oWeQP6ixjV+6DYtWYZkAqn
kHR1AmgLWlQZ/ntjPHMTVYjGHZMA1Au8GUJR/3eIO1h1+AU8BTb4fffCCD4Zzqt5
/dYXh/EnJ+5CUX3cxUKtCM5VZQ9tLDc=
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:10 2026 by rpki-client