Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
File:                     ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa (raw, json)
Hash identifier:          PNK9t6XupvcBhXr6JzKySvxjYUT2x5Byl2mWsPsdQfE=
Subject key identifier:   A2:11:3C:5D:86:D0:15:38:24:E1:AF:A4:61:D9:69:FC:7C:5A:87:94
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584F549D58D48DA44FD32E176BB0
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     33436
IP address blocks:        23.165.144.0/24 maxlen: 24
                          2602:fd09::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:58:d4:8d:a4:4f:d3:2e:17:6b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4f8c5f37-357c-41f0-a5c5-197b7eaf6647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:02:62:0b:ed:69:eb:7a:be:ec:2e:13:2d:
                    3a:ca:8d:35:90:ea:87:b5:9e:2f:d5:1d:93:60:0e:
                    f2:b8:1f:49:26:e0:7f:39:dc:1e:d2:55:03:2a:cc:
                    83:55:97:1f:4d:a6:98:d0:07:93:6d:55:59:b1:89:
                    d5:2d:45:38:c3:b8:f7:74:7a:3c:0a:50:a6:64:ea:
                    11:c6:c9:97:af:d2:da:98:3c:f7:a8:f4:d4:d6:df:
                    16:89:d1:c1:34:69:f3:c3:5c:3b:90:86:ec:cb:27:
                    72:c1:d0:21:c0:91:22:a7:88:70:ca:60:16:dc:63:
                    31:f3:65:ca:64:57:32:1d:30:17:f2:3e:24:f9:7f:
                    c2:3e:24:4b:7a:f8:41:12:00:9f:fe:29:7b:71:ee:
                    31:57:ee:57:e5:03:ff:84:82:ca:64:4f:1f:08:f0:
                    c4:6f:1b:5d:26:c4:9a:d3:2b:6c:b0:58:4e:34:7e:
                    b7:45:91:5e:27:eb:7d:bc:d5:5a:c1:a4:02:30:1e:
                    53:df:8f:95:a4:da:1e:5f:8d:22:d0:d3:76:65:e8:
                    16:15:1c:40:0f:da:51:30:6c:20:9c:52:74:49:4c:
                    c9:ec:08:8a:ba:45:a9:c3:0e:97:56:39:b9:b3:8b:
                    7c:14:0e:77:dc:fa:b0:c3:c8:52:aa:e1:2e:c1:50:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:3C:5D:86:D0:15:38:24:E1:AF:A4:61:D9:69:FC:7C:5A:87:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:b1:e6:8a:b2:41:c8:f2:37:0d:2b:69:b2:2c:3b:2f:bd:
         1e:b8:5f:c8:ab:e8:79:55:f1:6b:16:97:10:dd:57:61:b4:a6:
         70:65:fd:eb:da:38:5b:2b:09:67:01:31:65:32:98:33:20:dd:
         15:b2:51:d5:6e:d8:f8:cd:04:c2:f5:fb:36:2e:2b:45:6e:0c:
         9e:c0:a1:7e:4d:ba:92:94:72:2b:32:d0:7d:95:6d:43:cf:fa:
         bc:e9:6f:39:9a:5b:77:a6:ba:16:19:20:34:33:c4:bf:97:1b:
         47:5f:fe:a7:35:58:a1:e2:dc:8e:6b:e3:77:84:a1:0d:1a:17:
         44:a3:90:6a:22:17:05:7d:0a:b6:f4:b9:58:39:e4:67:6e:9e:
         f1:39:f9:1e:43:5b:4c:8f:28:32:fe:5a:69:ac:bf:02:26:5d:
         c6:65:25:59:ad:14:39:5f:11:80:66:5e:ff:67:78:eb:ce:03:
         18:72:d3:ef:f9:e5:98:92:73:6e:5d:be:8a:0c:d2:3a:14:a1:
         d4:ec:1d:1b:6b:15:20:7f:c4:e8:5d:f9:91:4a:67:2d:05:6c:
         c3:16:e3:b3:a0:49:4c:1c:c4:c3:07:c4:ad:f0:9d:36:b8:39:
         7b:62:f5:78:8f:d8:bc:f5:d5:48:5b:10:3f:c8:22:ee:10:fe:
         f1:8c:68:a5
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9UnVjUjaRP0y4Xa7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNjNDM5YTEtZjVlZC00OTM3LWI0NzgtNjRkYTZiNGZl
ODg3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NGY4YzVmMzctMzU3Yy00MWYwLWE1YzUtMTk3YjdlYWY2NjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIgCYgvtaet6vuwuEy06yo01kOqHtZ4v1R2T
YA7yuB9JJuB/Odwe0lUDKsyDVZcfTaaY0AeTbVVZsYnVLUU4w7j3dHo8ClCmZOoR
xsmXr9LamDz3qPTU1t8WidHBNGnzw1w7kIbsyydywdAhwJEip4hwymAW3GMx82XK
ZFcyHTAX8j4k+X/CPiRLevhBEgCf/il7ce4xV+5X5QP/hILKZE8fCPDEbxtdJsSa
0ytssFhONH63RZFeJ+t9vNVawaQCMB5T34+VpNoeX40i0NN2ZegWFRxAD9pRMGwg
nFJ0SUzJ7AiKukWpww6XVjm5s4t8FA533Pqww8hSquEuwVAKDQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKIRPF2G0BU4JOGvpGHZafx8WoeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0
MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRhNmI0ZmU4ODcvZWUwZGJiMWItNWEyMy0z
MmMwLWFiZmEtZjI5NzY3OGUwY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmNjNDM5YTEtZjVlZC00OTM3LWI0
NzgtNjRkYTZiNGZlODg3LzZjYzQzOWExLWY1ZWQtNDkzNy1iNDc4LTY0ZGE2YjRm
ZTg4Ny5jcmwwHwYDVR0jBBgwFoAU54Oux1f+8aa2yRyYWepU8k0eWVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82Y2M0MzlhMS1mNWVkLTQ5MzctYjQ3OC02NGRh
NmI0ZmU4ODcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6WQMA4E
AgACMAgDBgQmAv0JADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlL7HmirJByPI3DStpsiw7L70euF/Iq+h5
VfFrFpcQ3VdhtKZwZf3r2jhbKwlnATFlMpgzIN0VslHVbtj4zQTC9fs2LitFbgye
wKF+TbqSlHIrMtB9lW1Dz/q86W85mlt3proWGSA0M8S/lxtHX/6nNVih4tyOa+N3
hKENGhdEo5BqIhcFfQq29LlYOeRnbp7xOfkeQ1tMjygy/lpprL8CJl3GZSVZrRQ5
XxGAZl7/Z3jrzgMYctPv+eWYknNuXb6KDNI6FKHU7B0baxUgf8ToXfmRSmctBWzD
FuOzoElMHMTDB8St8J02uDl7YvV4j9i89dVIWxA/yCLuEP7xjGil
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:51:33 2026 by rpki-client