Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
File:                     d8a375e5-b89e-3f90-9327-3c71a184061b.roa (raw, json)
Hash identifier:          t4giEZKrS4P+iPtkSYcUVjbCeX/nDXnIBnyMCNjfBeY=
Subject key identifier:   51:D8:2E:97:67:D6:A3:3E:7C:13:72:0D:D8:4D:35:40:5B:2D:76:86
Certificate issuer:       /CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
Certificate serial:       010D0C9F4328584F2957C3665377028D55B4EE00
Authority key identifier: F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     394109
IP address blocks:        23.146.0.0/24 maxlen: 24
                          146.71.72.0/24 maxlen: 24
                          146.71.73.0/24 maxlen: 24
                          146.71.74.0/24 maxlen: 24
                          146.71.75.0/24 maxlen: 24
                          2606:3b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c3:66:53:77:02:8d:55:b4:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905aef82-72e9-43e1-9a66-0acee9d79d3b
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=791761e2-30e5-4b9a-9087-b31d6abe0ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ae:e3:30:43:0b:23:78:25:13:73:89:0b:f0:
                    25:9a:fb:1f:9f:e3:50:1b:19:9a:8d:d6:c2:46:77:
                    c1:3c:b4:7f:52:61:44:d5:5f:49:e3:95:7b:c5:e6:
                    76:f1:fd:41:48:67:16:ad:c7:ae:d8:5f:45:14:23:
                    a9:e9:e6:c1:4a:eb:53:36:cb:d7:31:00:bd:f4:73:
                    46:25:14:0b:58:25:5d:b3:74:ec:b4:d2:73:d7:13:
                    13:e0:a1:38:5f:2a:f9:7a:e0:84:58:01:62:48:1c:
                    bd:82:57:a6:32:b2:7a:09:24:4e:2b:13:e7:a4:ab:
                    bd:ac:db:71:e7:d5:07:f4:64:7e:b5:1d:21:37:cf:
                    04:97:50:82:dc:d8:62:dc:9f:df:a9:c6:ce:cb:66:
                    b8:74:a0:1d:69:a5:4e:9a:94:fa:87:d0:6d:f2:c8:
                    cf:7a:db:fc:4a:04:a7:10:9e:ab:ad:5c:76:0d:d3:
                    b1:be:ec:02:13:95:83:b4:78:25:98:ec:b5:a6:26:
                    e5:a5:e1:41:87:bc:29:5e:ec:b0:67:4f:82:a9:87:
                    5d:60:8a:45:5d:7a:17:0c:84:54:85:e6:43:d8:2a:
                    d0:c3:16:66:e2:ac:2f:af:88:f4:98:3b:ef:59:18:
                    65:4c:3e:07:67:72:c7:34:bb:fd:18:ac:cf:a4:de:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:2E:97:67:D6:A3:3E:7C:13:72:0D:D8:4D:35:40:5B:2D:76:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/d8a375e5-b89e-3f90-9327-3c71a184061b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b/905aef82-72e9-43e1-9a66-0acee9d79d3b.crl

            X509v3 Authority Key Identifier:
                keyid:F4:E2:F5:AA:81:19:91:77:11:BE:66:F3:75:3B:15:BF:BD:8B:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/905aef82-72e9-43e1-9a66-0acee9d79d3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.0.0/24
                  146.71.72.0/22
                IPv6:
                  2606:3b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:ed:ee:95:e4:f6:7a:29:29:43:8e:79:71:c0:52:95:92:
         4c:ed:cb:97:31:5b:41:75:6c:6b:42:f0:70:b6:57:c2:e3:74:
         98:f6:67:63:04:72:ba:a7:b9:b3:9b:90:0f:b8:15:90:40:6e:
         6b:28:5d:16:2c:28:ad:b8:78:92:a9:43:f7:03:07:c8:66:5e:
         a0:26:9c:65:d8:cf:81:99:06:21:7a:41:1c:43:a9:4e:d5:45:
         a1:6e:b6:96:fd:98:42:b7:4a:4a:b8:99:09:7e:df:8a:99:28:
         88:5e:66:da:d2:32:b2:51:6a:3d:ff:1d:42:b9:b9:c5:73:ec:
         e3:5f:e1:2c:61:f6:94:6e:4b:23:b9:a6:c4:19:25:dd:f0:aa:
         2f:8e:68:7d:a0:e7:ba:f2:d7:fd:6f:9c:e8:43:7c:e8:d1:23:
         87:5d:f9:9e:1d:b2:0a:6a:6a:b2:b7:a9:af:93:51:c9:96:cd:
         c2:66:1c:56:e6:f2:bd:fa:ff:39:73:60:4e:25:86:fc:2f:32:
         a1:f8:bb:47:52:e6:35:fa:e5:b8:58:5e:cd:8b:ee:47:86:7c:
         f7:97:0f:43:88:2f:39:a8:04:2f:5f:f6:2e:42:d6:02:4a:56:
         86:57:05:b4:a7:04:c2:59:17:c3:a9:a5:d6:dc:eb:f7:51:a0:
         a7:c8:fb:0d
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8pV8NmU3cCjVW07gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1YWVmODItNzJlOS00M2UxLTlhNjYtMGFjZWU5ZDc5
ZDNiMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
NzkxNzYxZTItMzBlNS00YjlhLTkwODctYjMxZDZhYmUwZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha7jMEMLI3glE3OJC/Almvsfn+NQGxmajdbC
RnfBPLR/UmFE1V9J45V7xeZ28f1BSGcWrceu2F9FFCOp6ebBSutTNsvXMQC99HNG
JRQLWCVds3TstNJz1xMT4KE4Xyr5euCEWAFiSBy9glemMrJ6CSROKxPnpKu9rNtx
59UH9GR+tR0hN88El1CC3Nhi3J/fqcbOy2a4dKAdaaVOmpT6h9Bt8sjPetv8SgSn
EJ6rrVx2DdOxvuwCE5WDtHglmOy1piblpeFBh7wpXuywZ0+CqYddYIpFXXoXDIRU
heZD2CrQwxZm4qwvr4j0mDvvWRhlTD4HZ3LHNLv9GKzPpN6YdQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFFHYLpdn1qM+fBNyDdhNNUBbLXaGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MDVh
ZWY4Mi03MmU5LTQzZTEtOWE2Ni0wYWNlZTlkNzlkM2IvZDhhMzc1ZTUtYjg5ZS0z
ZjkwLTkzMjctM2M3MWExODQwNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTA1YWVmODItNzJlOS00M2UxLTlh
NjYtMGFjZWU5ZDc5ZDNiLzkwNWFlZjgyLTcyZTktNDNlMS05YTY2LTBhY2VlOWQ3
OWQzYi5jcmwwHwYDVR0jBBgwFoAU9OL1qoEZkXcRvmbzdTsVv72Lg6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MDVhZWY4Mi03MmU5LTQzZTEtOWE2Ni0wYWNl
ZTlkNzlkM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5IAAwQC
kkdIMA0EAgACMAcDBQAmBjuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGv77e6V5PZ6KSlDjnlxwFKVkkzt
y5cxW0F1bGtC8HC2V8LjdJj2Z2MEcrqnubObkA+4FZBAbmsoXRYsKK24eJKpQ/cD
B8hmXqAmnGXYz4GZBiF6QRxDqU7VRaFutpb9mEK3Skq4mQl+34qZKIheZtrSMrJR
aj3/HUK5ucVz7ONf4Sxh9pRuSyO5psQZJd3wqi+OaH2g57ry1/1vnOhDfOjRI4dd
+Z4dsgpqarK3qa+TUcmWzcJmHFbm8r36/zlzYE4lhvwvMqH4u0dS5jX65bhYXs2L
7keGfPeXD0OILzmoBC9f9i5C1gJKVoZXBbSnBMJZF8Oppdbc6/dRoKfI+w0=
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:48:47 2026 by rpki-client