Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa
File:                     23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa (raw, json)
Hash identifier:          lM9JEqyHgIVOqSre+ADgDo3bEtCqtjgGQH710KQq/C4=
Subject key identifier:   7F:69:D1:2E:8F:6F:EE:13:91:4F:48:94:F8:0F:38:E9:77:A7:66:EB
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796357ABDEAC527FB3B3700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.46.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:35:7a:bd:ea:c5:27:fb:3b:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2f91e43a-0cd8-4957-b7d4-768393e7d294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:93:dc:5f:ff:23:b4:b0:e8:53:15:52:75:
                    8f:4e:97:40:e3:83:b9:0c:71:0b:58:f0:3e:e9:58:
                    d0:5b:39:4f:5c:e1:cb:49:05:36:f0:bb:89:06:15:
                    81:39:5b:78:e5:e8:ce:e8:59:9f:9e:f7:b0:36:dd:
                    22:c9:ca:bf:f3:01:87:0d:e5:50:14:b3:3f:cf:1d:
                    dc:65:fe:99:25:8b:ea:4d:4a:ef:f7:0d:2d:c8:8b:
                    51:07:78:ee:a0:ea:66:e0:83:6d:84:1e:93:ec:76:
                    cb:d1:bb:eb:df:2b:c5:63:bb:7c:7b:71:da:a8:87:
                    9d:c7:d6:3e:96:56:04:89:7e:e7:9d:8a:89:3c:62:
                    48:95:c2:27:ea:94:77:b2:b7:de:c2:72:48:c0:42:
                    4c:52:2e:e5:e7:2a:48:d0:37:0e:59:3e:98:fc:cc:
                    21:f8:25:74:16:a9:90:e1:aa:b7:f2:7b:74:c3:4d:
                    3c:bc:bc:90:5a:ce:d6:46:f4:cb:46:5a:61:30:75:
                    97:83:7a:06:75:b0:38:70:39:7f:02:d6:6c:4d:dd:
                    bb:4d:f9:7b:e2:a1:a8:f2:b4:5f:d7:b0:a0:e0:67:
                    f5:35:49:87:c3:57:12:bd:8f:76:40:d6:97:b0:98:
                    95:0c:df:4b:23:ef:ea:a3:08:44:31:8e:60:10:77:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:69:D1:2E:8F:6F:EE:13:91:4F:48:94:F8:0F:38:E9:77:A7:66:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:23:06:85:5f:de:1c:fa:bc:2a:b1:50:be:36:61:63:b0:
         c2:25:8b:e6:9f:80:11:68:15:7c:02:87:a1:f2:23:67:48:a0:
         27:d1:44:9d:7b:dd:2f:ff:9e:b0:b1:40:72:7b:af:04:a4:76:
         91:88:89:01:85:3c:bb:34:07:54:6f:2c:a3:a6:c9:c3:62:5b:
         00:c1:93:65:41:ff:9e:d1:9f:58:2d:37:33:00:09:c5:ba:0f:
         ce:1a:38:87:a6:69:8f:78:71:10:2d:5c:b9:59:d5:6d:b9:ff:
         0b:5a:3a:63:ca:11:4d:db:e7:94:64:f6:3a:d1:2e:da:ed:40:
         cc:4c:04:f9:b9:b0:c9:c3:14:98:92:f7:ca:63:de:d8:96:63:
         6d:4b:f4:c9:4f:2b:c9:61:ac:a8:b7:a2:22:2f:eb:2d:7a:01:
         aa:b5:96:7b:91:94:cb:ae:e1:5c:64:26:55:43:d7:14:e9:36:
         f6:aa:4d:94:c6:b3:f3:07:cd:af:2a:52:28:58:5c:52:6d:0e:
         1d:c5:bf:da:93:2a:e4:19:0e:5f:e8:56:46:40:d8:6f:a2:2b:
         7c:00:75:d4:e6:2b:08:ad:4a:fa:52:f7:52:23:da:54:52:ca:
         5b:00:61:df:da:55:fa:2e:88:f4:ca:04:65:7c:1d:72:f1:55:
         5e:8e:5b:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nljV6verFJ/s7NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmY5MWU0M2EtMGNkOC00OTU3LWI3ZDQtNzY4MzkzZTdkMjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiOT3F//I7Sw6FMVUnWPTpdA44O5DHELWPA+
6VjQWzlPXOHLSQU28LuJBhWBOVt45ejO6FmfnvewNt0iycq/8wGHDeVQFLM/zx3c
Zf6ZJYvqTUrv9w0tyItRB3juoOpm4INthB6T7HbL0bvr3yvFY7t8e3HaqIedx9Y+
llYEiX7nnYqJPGJIlcIn6pR3srfewnJIwEJMUi7l5ypI0DcOWT6Y/Mwh+CV0FqmQ
4aq38nt0w008vLyQWs7WRvTLRlphMHWXg3oGdbA4cDl/AtZsTd27Tfl74qGo8rRf
17Cg4Gf1NUmHw1cSvY92QNaXsJiVDN9LI+/qowhEMY5gEHe91wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9p0S6Pb+4TkU9IlPgPOOl3p2brMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjNiZjRmMGQtNmVkMC0z
M2VhLWJlYWQtMDBiZjlhMDU1YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx1IwaFX94c+rwqsVC+NmFjsMIli+afgBFoFXwCh6HyI2dIoCfRRJ17
3S//nrCxQHJ7rwSkdpGIiQGFPLs0B1RvLKOmycNiWwDBk2VB/57Rn1gtNzMACcW6
D84aOIemaY94cRAtXLlZ1W25/wtaOmPKEU3b55Rk9jrRLtrtQMxMBPm5sMnDFJiS
98pj3tiWY21L9MlPK8lhrKi3oiIv6y16Aaq1lnuRlMuu4VxkJlVD1xTpNvaqTZTG
s/MHza8qUihYXFJtDh3Fv9qTKuQZDl/oVkZA2G+iK3wAddTmKwitSvpS91Ij2lRS
ylsAYd/aVfouiPTKBGV8HXLxVV6OW1k=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:36 2026 by rpki-client