Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa
File:                     000b0e7b-afe6-3c46-a731-42662fdc95f2.roa (raw, json)
Hash identifier:          Ob9B5+VWAFE/UfRhkcEK5rwSdgrjPJkv5JM7AI7p57A=
Subject key identifier:   61:EB:0C:4B:21:9F:67:CE:CD:AA:98:24:7E:30:30:C4:04:74:0B:D3
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F4328584D7CCFCFDE7D463B3AC570C940
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     31867
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:cf:de:7d:46:3b:3a:c5:70:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=a46ea628-7a85-49f4-8bcb-906b65e73326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:94:e2:98:10:79:ce:80:ac:bb:01:33:2f:
                    84:1b:65:dd:af:5b:80:63:e7:47:e5:1e:5d:c9:bd:
                    d5:72:2e:35:d4:4f:6e:54:45:65:cc:74:5a:18:49:
                    e2:ce:6a:62:96:1d:c0:ba:4f:ce:4f:53:41:5d:47:
                    54:a8:0f:a8:e6:57:b2:86:82:61:a5:5b:9a:ae:68:
                    a4:d5:b5:36:e1:ae:3c:4e:e0:03:31:89:8c:9a:9f:
                    92:9c:e6:05:1a:eb:a2:ca:da:f8:ce:34:fc:b3:13:
                    ee:22:0d:86:6e:fa:92:19:6b:ec:01:70:14:c8:6a:
                    ec:8e:bf:cb:98:5c:0b:2e:5d:00:67:eb:22:4a:22:
                    2e:7a:b8:11:1f:ad:a7:df:a0:84:06:a8:9e:a2:e5:
                    d0:a5:0e:68:ee:0e:00:75:63:70:53:ca:5f:34:19:
                    b9:6b:0e:9e:c8:b7:c6:e3:cf:11:78:88:ea:7c:c3:
                    16:86:f2:74:1c:6f:94:6d:e8:ff:15:23:66:a6:c4:
                    3f:3a:e1:b8:b8:0d:5a:ac:44:a5:1b:6a:9f:3d:f1:
                    53:36:15:91:6a:e4:66:63:d4:cd:c5:43:6a:cb:50:
                    fd:3d:9b:92:e4:a7:92:c8:64:83:6b:df:e0:ff:06:
                    15:17:2d:cf:1b:a6:45:9d:cb:23:38:82:a9:1d:7a:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:0C:4B:21:9F:67:CE:CD:AA:98:24:7E:30:30:C4:04:74:0B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/000b0e7b-afe6-3c46-a731-42662fdc95f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:08:09:fe:c6:8c:e2:c6:7f:7a:0c:28:af:04:fb:2b:e5:
         8a:91:f6:d5:d0:db:79:c8:3b:5b:97:74:4f:60:b9:c5:98:cc:
         7a:c3:af:2d:8a:b7:03:a6:8e:d4:61:bd:22:54:c3:2c:eb:4f:
         ff:af:9a:e7:9a:db:49:a9:ad:a9:3f:d6:44:aa:32:91:61:c0:
         31:ca:44:79:da:4b:fe:64:15:70:92:78:9c:f4:ff:8b:3a:cf:
         49:a2:73:a5:fc:fa:fc:d9:54:12:f3:53:e3:9f:c6:86:8f:77:
         7d:7f:ab:68:1a:07:b8:9a:0b:23:e7:a6:7e:a4:1d:c1:95:83:
         78:81:62:1d:82:57:7f:36:f6:0b:4d:d7:4e:a8:2e:e4:db:db:
         44:e2:c1:1a:92:8f:c4:ab:88:8f:a5:2b:26:89:7a:53:39:37:
         fa:c0:8b:4f:b7:a6:3a:6c:86:7c:e9:56:57:d7:77:b3:db:09:
         2b:42:05:e7:af:de:35:3e:3a:7b:67:b8:4d:7b:1a:4c:6d:c3:
         50:4b:76:36:86:c9:ed:cc:ee:78:25:48:56:83:51:9c:2e:73:
         5a:ad:b8:88:ae:46:3c:7b:ba:44:58:85:ed:f0:e3:26:84:6a:
         0b:0f:57:9b:75:48:e7:c2:55:c7:79:3d:5d:d4:b5:3a:f0:64:
         29:ed:9b:11
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE18z8/efUY7OsVwyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Y5NmQxOTAtNWIzNS00YjI0LWFjNzgtNTk5YWEwZTUw
NDA1MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk
YTQ2ZWE2MjgtN2E4NS00OWY0LThiY2ItOTA2YjY1ZTczMzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3eU4pgQec6ArLsBMy+EG2Xdr1uAY+dH5R5d
yb3Vci411E9uVEVlzHRaGEnizmpilh3Auk/OT1NBXUdUqA+o5leyhoJhpVuarmik
1bU24a48TuADMYmMmp+SnOYFGuuiytr4zjT8sxPuIg2GbvqSGWvsAXAUyGrsjr/L
mFwLLl0AZ+siSiIuergRH62n36CEBqieouXQpQ5o7g4AdWNwU8pfNBm5aw6eyLfG
488ReIjqfMMWhvJ0HG+Ubej/FSNmpsQ/OuG4uA1arESlG2qfPfFTNhWRauRmY9TN
xUNqy1D9PZuS5KeSyGSDa9/g/wYVFy3PG6ZFncsjOIKpHXoNZQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGHrDEshn2fOzaqYJH4wMMQEdAvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2
ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlhYTBlNTA0MDUvMDAwYjBlN2ItYWZlNi0z
YzQ2LWE3MzEtNDI2NjJmZGM5NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y5NmQxOTAtNWIzNS00YjI0LWFj
NzgtNTk5YWEwZTUwNDA1L2NmOTZkMTkwLTViMzUtNGIyNC1hYzc4LTU5OWFhMGU1
MDQwNS5jcmwwHwYDVR0jBBgwFoAUVpcdu5PTUs4VYZuBIrKntkJR+6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjk2ZDE5MC01YjM1LTRiMjQtYWM3OC01OTlh
YTBlNTA0MDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7+4MA4E
AgACMAgDBgAmAvfkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTjQgJ/saM4sZ/egworwT7K+WKkfbV0Nt5
yDtbl3RPYLnFmMx6w68tircDpo7UYb0iVMMs60//r5rnmttJqa2pP9ZEqjKRYcAx
ykR52kv+ZBVwknic9P+LOs9JonOl/Pr82VQS81Pjn8aGj3d9f6toGge4mgsj56Z+
pB3BlYN4gWIdgld/NvYLTddOqC7k29tE4sEako/Eq4iPpSsmiXpTOTf6wItPt6Y6
bIZ86VZX13ez2wkrQgXnr941Pjp7Z7hNexpMbcNQS3Y2hsntzO54JUhWg1GcLnNa
rbiIrkY8e7pEWIXt8OMmhGoLD1ebdUjnwlXHeT1d1LU68GQp7ZsR
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:08 2026 by rpki-client