Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa
File:                     dd7132e7-ed6f-397c-94c8-b875d4492b10.roa (raw, json)
Hash identifier:          T0Nt7gI7fub1tEh6t/K/5wYCw20YUV3lD5I4B4yKje0=
Subject key identifier:   29:D3:B1:1E:C5:A6:9F:34:5F:3D:C9:42:25:8B:BE:BA:77:4A:9E:85
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584D7A05329DD091EAB1A1E43E80
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     198100
IP address blocks:        23.175.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:32:9d:d0:91:ea:b1:a1:e4:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=a9f818e0-c27c-4899-b618-4677314ca4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:d4:24:80:97:3a:40:92:12:98:d2:6a:73:
                    f5:0e:77:af:01:b4:7a:20:cc:9d:8f:f6:d1:69:39:
                    ff:7a:b3:5d:fe:51:cb:f8:99:5a:20:3f:cd:10:e6:
                    fe:24:46:11:18:ff:f5:2d:42:4b:e6:67:cf:8b:cb:
                    05:52:a2:16:9f:45:03:2d:d5:bf:36:e1:d0:0e:db:
                    e8:b0:34:19:c6:88:47:1b:e1:8e:8f:cc:34:be:78:
                    40:7b:eb:b0:f5:3d:c3:54:ac:0a:52:ec:fa:ee:dc:
                    00:04:e9:74:9e:04:04:33:c0:6e:7b:5f:bd:d6:c7:
                    e3:21:dd:5d:24:6d:8b:11:8d:5a:31:be:db:7a:0f:
                    03:b6:c1:d5:19:c9:af:8e:66:0d:4d:30:96:43:19:
                    35:25:f0:5a:6a:7b:b4:82:b9:fd:42:aa:e9:d6:f6:
                    de:43:cb:50:53:50:a3:9f:00:b7:b4:e2:56:f9:de:
                    59:61:3d:06:af:84:2d:8c:70:f1:c7:76:6f:44:22:
                    73:08:45:55:d2:82:4a:ec:f7:2b:32:3d:76:5f:9b:
                    01:de:1a:9f:c4:eb:e5:49:08:ce:66:db:4f:30:63:
                    93:55:d2:eb:6f:69:9a:d3:b2:39:c1:80:d3:f4:3f:
                    ca:ec:a6:fc:b0:e2:81:c2:f1:f4:ec:88:e9:22:ee:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:B1:1E:C5:A6:9F:34:5F:3D:C9:42:25:8B:BE:BA:77:4A:9E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/dd7132e7-ed6f-397c-94c8-b875d4492b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:57:56:6e:91:bc:4b:4b:c1:60:d1:02:fc:f9:79:27:71:
         ad:85:ba:32:b5:0b:4a:b6:07:ea:4e:45:c5:a0:65:89:ed:d0:
         31:e6:77:b0:97:d3:3a:86:fe:c2:2c:72:ab:40:81:46:ee:bd:
         72:4e:55:79:f5:d3:d0:8e:85:93:d9:57:91:0c:71:cd:6f:a9:
         08:73:b0:42:a1:71:bd:6c:10:56:4b:69:e7:8a:f2:50:bf:f4:
         a8:8d:fe:88:43:75:91:34:1b:70:d1:fe:3f:4d:ed:f5:5f:01:
         67:04:21:af:14:36:0d:05:d1:65:94:e9:e7:f9:ba:87:8b:34:
         f4:8f:59:f7:a8:32:ed:c1:7b:bc:a7:f4:2b:a8:92:38:98:6f:
         7b:b0:d1:f2:cd:5b:e9:7f:be:d9:fe:cb:78:c2:30:f3:f0:9c:
         0e:34:fc:9d:7c:e6:f2:a6:5d:92:9d:97:8c:e3:97:b9:f7:f4:
         0f:55:36:60:78:81:c7:35:31:e4:48:f9:e7:46:a9:d0:97:93:
         cd:60:d3:b9:71:fb:37:11:eb:46:f9:7f:66:98:c3:b9:03:eb:
         98:9f:2f:aa:0f:db:a0:f1:63:67:f0:18:ab:df:2d:b5:52:a5:
         5e:aa:22:09:61:fe:b2:4a:13:0f:53:35:5a:98:5e:b9:bb:eb:
         ab:bd:a7:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTKd0JHqsaHkPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBmMjE4MjctNmQ2NC00ODgwLTllNDYtYzNkMTMzMTNj
OTc1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
YTlmODE4ZTAtYzI3Yy00ODk5LWI2MTgtNDY3NzMxNGNhNGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDUJICXOkCSEpjSanP1DnevAbR6IMydj/bR
aTn/erNd/lHL+JlaID/NEOb+JEYRGP/1LUJL5mfPi8sFUqIWn0UDLdW/NuHQDtvo
sDQZxohHG+GOj8w0vnhAe+uw9T3DVKwKUuz67twABOl0ngQEM8Bue1+91sfjId1d
JG2LEY1aMb7beg8DtsHVGcmvjmYNTTCWQxk1JfBaanu0grn9Qqrp1vbeQ8tQU1Cj
nwC3tOJW+d5ZYT0Gr4QtjHDxx3ZvRCJzCEVV0oJK7PcrMj12X5sB3hqfxOvlSQjO
ZttPMGOTVdLrb2ma07I5wYDT9D/K7Kb8sOKBwvH07IjpIu4+LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCnTsR7Fpp80Xz3JQiWLvrp3Sp6FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MGYy
MTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2QxMzMxM2M5NzUvZGQ3MTMyZTctZWQ2Zi0z
OTdjLTk0YzgtYjg3NWQ0NDkyYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTBmMjE4MjctNmQ2NC00ODgwLTll
NDYtYzNkMTMzMTNjOTc1LzUwZjIxODI3LTZkNjQtNDg4MC05ZTQ2LWMzZDEzMzEz
Yzk3NS5jcmwwHwYDVR0jBBgwFoAU6x5xukiPrqQmrp9PrnGCEkf7LG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MGYyMTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2Qx
MzMxM2M5NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6/IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABstV1ZukbxLS8Fg0QL8+Xknca2FujK1C0q2B+pORcWgZYnt0DHmd7CX
0zqG/sIscqtAgUbuvXJOVXn109COhZPZV5EMcc1vqQhzsEKhcb1sEFZLaeeK8lC/
9KiN/ohDdZE0G3DR/j9N7fVfAWcEIa8UNg0F0WWU6ef5uoeLNPSPWfeoMu3Be7yn
9CuokjiYb3uw0fLNW+l/vtn+y3jCMPPwnA40/J185vKmXZKdl4zjl7n39A9VNmB4
gcc1MeRI+edGqdCXk81g07lx+zcR60b5f2aYw7kD65ifL6oP26DxY2fwGKvfLbVS
pV6qIglh/rJKEw9TNVqYXrm766u9p8o=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:21 2026 by rpki-client