Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/40203385-df82-351b-9c7e-5fb9e3906241.roa
File:                     40203385-df82-351b-9c7e-5fb9e3906241.roa (raw, json)
Hash identifier:          shJ5QzL5E2H1hKN8DmEiaWJrCuMxxgNGD8Q1HepzpLA=
Subject key identifier:   A5:DE:3F:26:C1:26:06:29:48:D3:DC:E6:68:64:D1:8B:90:65:A6:A6
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584EA786F6D2E219B006388780E0
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/40203385-df82-351b-9c7e-5fb9e3906241.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     211061
IP address blocks:        23.170.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f6:d2:e2:19:b0:06:38:87:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=80a0ec0b-6849-4628-9707-3249b432ebdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:e3:f1:8d:80:a3:9c:6f:1b:68:23:4f:7c:
                    5e:21:0a:17:d0:4b:9b:94:4d:45:8a:bb:0f:46:84:
                    3e:a4:4b:7d:cd:cb:ef:30:18:df:cd:21:da:3d:d4:
                    3e:55:09:d2:a1:44:a4:43:50:c0:80:c2:1a:0a:ed:
                    c3:cc:80:96:4b:ea:a0:f6:a1:45:12:de:c0:44:45:
                    e8:18:02:bd:7b:2c:53:19:ca:84:3e:87:17:d3:ce:
                    cc:5f:23:c0:ab:69:3e:f7:96:43:03:23:46:f5:ec:
                    53:d6:dd:cd:51:12:c9:95:9e:cf:1b:4c:47:4a:21:
                    db:d9:09:c1:7d:4b:04:f0:94:a1:48:0b:23:3f:11:
                    c8:2f:87:d0:2a:61:d9:15:c4:c4:3a:e1:9a:47:c6:
                    bd:be:01:df:e0:76:5d:a9:a8:32:7f:85:00:e4:e5:
                    bb:61:80:cb:a9:5c:7a:ab:19:69:6b:83:ac:ed:0b:
                    33:f8:e7:90:16:57:97:87:4a:de:d5:43:fe:d4:06:
                    13:ba:e5:de:92:c3:3d:7e:1c:09:71:4c:33:3d:79:
                    21:b5:9d:73:37:bb:ab:84:82:eb:27:04:b2:20:30:
                    bc:b9:fc:23:8b:54:9c:73:1c:f4:c5:d7:65:8a:c7:
                    8d:43:70:1f:99:82:22:78:15:88:56:5e:63:8f:ad:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:3F:26:C1:26:06:29:48:D3:DC:E6:68:64:D1:8B:90:65:A6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/40203385-df82-351b-9c7e-5fb9e3906241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:45:08:6d:d9:c7:1f:b0:0c:97:69:cb:58:41:a0:f8:ea:b3:
         11:ae:04:ef:f3:27:14:a4:8b:88:e0:5f:59:64:04:9b:60:bc:
         5c:03:2d:2b:fe:1a:ff:10:88:b9:a3:fd:0c:d9:2c:b0:d5:35:
         ab:94:25:da:43:15:13:fb:7c:47:70:51:4c:26:07:17:e6:e2:
         6a:2d:4d:1a:f0:8c:2c:4d:29:58:04:dc:4c:b1:44:80:49:31:
         0e:e2:54:93:d9:44:0e:aa:60:f8:48:04:08:a1:83:01:07:60:
         e7:4a:24:46:54:bf:c9:ce:64:e6:cc:36:46:0f:28:0c:c8:36:
         cc:00:94:13:1c:ef:de:11:5a:9a:4d:2d:7f:c2:f3:1e:6c:90:
         6c:7a:87:08:ae:69:92:ea:0b:c0:5f:47:ae:67:a3:d2:de:5c:
         da:00:c3:7b:59:27:15:11:45:ec:95:89:66:cb:11:b1:7b:4e:
         62:9c:2a:6b:ef:15:bf:dc:ae:57:4e:ae:01:f9:85:88:d5:89:
         b8:7d:23:77:ae:d8:d8:7c:a7:3a:07:57:62:45:ae:51:97:c2:
         24:ce:0b:11:f4:ba:e5:42:2f:bc:09:84:7f:32:4d:f6:25:92:
         55:57:ac:31:6a:0a:2f:fb:27:48:1e:e6:86:b0:ef:75:da:c7:
         9d:fc:a1:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvbS4hmwBjiHgOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODBhMGVjMGItNjg0OS00NjI4LTk3MDctMzI0OWI0MzJlYmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUzj8Y2Ao5xvG2gjT3xeIQoX0EublE1FirsP
RoQ+pEt9zcvvMBjfzSHaPdQ+VQnSoUSkQ1DAgMIaCu3DzICWS+qg9qFFEt7AREXo
GAK9eyxTGcqEPocX087MXyPAq2k+95ZDAyNG9exT1t3NURLJlZ7PG0xHSiHb2QnB
fUsE8JShSAsjPxHIL4fQKmHZFcTEOuGaR8a9vgHf4HZdqagyf4UA5OW7YYDLqVx6
qxlpa4Os7Qsz+OeQFleXh0re1UP+1AYTuuXeksM9fhwJcUwzPXkhtZ1zN7urhILr
JwSyIDC8ufwji1Sccxz0xddliseNQ3AfmYIieBWIVl5jj63Q2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXePybBJgYpSNPc5mhk0YuQZaamMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvNDAyMDMzODUtZGY4Mi0z
NTFiLTljN2UtNWZiOWUzOTA2MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6r3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRFCG3Zxx+wDJdpy1hBoPjqsxGuBO/zJxSki4jgX1lkBJtgvFwDLSv+
Gv8QiLmj/QzZLLDVNauUJdpDFRP7fEdwUUwmBxfm4motTRrwjCxNKVgE3EyxRIBJ
MQ7iVJPZRA6qYPhIBAihgwEHYOdKJEZUv8nOZObMNkYPKAzINswAlBMc794RWppN
LX/C8x5skGx6hwiuaZLqC8BfR65no9LeXNoAw3tZJxURReyViWbLEbF7TmKcKmvv
Fb/crldOrgH5hYjVibh9I3eu2Nh8pzoHV2JFrlGXwiTOCxH0uuVCL7wJhH8yTfYl
klVXrDFqCi/7J0ge5oaw73Xax538obU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:03 2026 by rpki-client