Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
File:                     cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa (raw, json)
Hash identifier:          N5Wu5cMHKDpKsMHgn71Qsub2wpJ6VR0KUInfIEUrWNc=
Subject key identifier:   C3:F3:4F:B5:BD:00:07:FB:3C:E2:C9:05:0E:3F:DA:38:69:B6:DE:EE
Certificate issuer:       /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial:       010D0C9F4328584EA0152DDF752FBAE09D57E540
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     6233
IP address blocks:        23.106.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2d:df:75:2f:ba:e0:9d:57:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=656d018d-f22c-48b4-98cd-fb0d898c3c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:27:20:13:3a:c6:59:f0:13:20:ce:2f:3c:
                    24:5c:d1:8d:43:9d:b3:19:17:c4:1d:9a:99:c5:ee:
                    42:b4:6a:48:cf:b0:ff:80:8f:9c:dd:45:6f:26:08:
                    43:fc:69:c6:b4:60:d3:88:0b:1a:76:9b:6a:52:a4:
                    ea:31:d5:88:ce:1e:f6:d0:d6:b3:f8:52:65:db:ef:
                    7b:5b:e6:06:64:fe:8e:fc:2a:46:64:c0:50:1d:01:
                    17:46:62:f6:b8:27:2d:3a:14:9f:41:b7:b9:18:1f:
                    5d:b9:6f:7e:48:1a:62:1b:61:0e:b7:9a:71:18:c1:
                    5b:28:1a:70:7d:8b:1f:13:10:52:a4:7b:dc:03:a7:
                    03:55:62:2a:c8:fe:73:dc:9e:06:66:03:a4:d0:51:
                    27:34:ac:04:2b:11:43:fd:d0:fc:bd:3f:98:7e:6a:
                    67:46:36:a5:ca:3a:c7:6c:8e:52:13:e0:83:44:90:
                    3c:d1:60:11:e9:fe:d3:3b:6d:1d:0a:93:fa:b3:74:
                    12:8a:a4:eb:4a:0f:e4:a6:40:16:79:91:03:b3:01:
                    20:a8:a8:3f:8c:33:ac:3e:80:92:19:70:07:51:44:
                    0e:cd:99:ad:5e:08:02:6d:a2:e8:5d:5a:63:80:63:
                    fc:ec:7d:d8:c0:4c:c9:ed:25:51:79:fe:02:7f:02:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:4F:B5:BD:00:07:FB:3C:E2:C9:05:0E:3F:DA:38:69:B6:DE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/cacbbade-97c0-3e8c-9183-6a94e609a8cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl

            X509v3 Authority Key Identifier:
                keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:91:7e:4b:83:b8:5e:54:41:65:c0:8b:78:b4:d1:b4:c4:
         8f:48:4b:f2:4f:ae:78:cd:b7:8a:ff:bd:0a:6f:3a:49:d0:68:
         64:15:ee:67:39:fc:a0:24:e3:fa:b7:dd:4f:10:a0:7d:22:8f:
         97:a7:42:d1:be:15:6d:a4:82:76:6a:28:0e:10:fa:77:eb:b2:
         c5:51:66:1c:ae:3e:cc:f2:34:05:29:80:97:12:6a:ee:98:8f:
         1f:4c:0b:d2:08:52:76:30:4f:ca:b8:54:c3:04:34:9f:e6:7b:
         fa:22:93:65:30:15:65:16:49:d2:cc:0e:de:7c:0f:80:c7:02:
         b7:3b:a5:9a:87:4d:af:2a:e4:bc:6f:87:41:0b:6b:5c:3d:84:
         00:66:bb:8c:1f:58:88:40:85:2c:b9:a1:25:38:b1:e8:6a:9d:
         17:0b:c0:03:e5:59:f9:51:69:66:73:bc:b0:92:08:1a:61:e6:
         40:60:ba:3f:13:32:df:b5:b9:71:64:82:10:5c:c8:92:aa:36:
         6b:7d:de:de:0f:be:61:c5:b0:40:c2:da:fe:c3:0b:d1:b8:89:
         0c:57:06:ba:31:22:48:f5:42:71:bd:0a:af:44:b9:bf:f5:7e:
         ae:ad:ea:64:c7:80:e0:a5:61:db:45:e6:2a:88:8f:66:51:59:
         88:ff:2d:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFS3fdS+64J1X5UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1
ZTM5MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NjU2ZDAxOGQtZjIyYy00OGI0LTk4Y2QtZmIwZDg5OGMzYzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRsnIBM6xlnwEyDOLzwkXNGNQ52zGRfEHZqZ
xe5CtGpIz7D/gI+c3UVvJghD/GnGtGDTiAsadptqUqTqMdWIzh720Naz+FJl2+97
W+YGZP6O/CpGZMBQHQEXRmL2uCctOhSfQbe5GB9duW9+SBpiG2EOt5pxGMFbKBpw
fYsfExBSpHvcA6cDVWIqyP5z3J4GZgOk0FEnNKwEKxFD/dD8vT+YfmpnRjalyjrH
bI5SE+CDRJA80WAR6f7TO20dCpP6s3QSiqTrSg/kpkAWeZEDswEgqKg/jDOsPoCS
GXAHUUQOzZmtXggCbaLoXVpjgGP87H3YwEzJ7SVRef4CfwJHQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPzT7W9AAf7POLJBQ4/2jhptt7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx
ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvY2FjYmJhZGUtOTdjMC0z
ZThjLTkxODMtNmE5NGU2MDlhOGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi
YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1
NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky
OTE2NTVlMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF2qAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/TkX5Lg7heVEFlwIt4tNG0xI9IS/JPrnjNt4r/vQpvOknQaGQV7mc5
/KAk4/q33U8QoH0ij5enQtG+FW2kgnZqKA4Q+nfrssVRZhyuPszyNAUpgJcSau6Y
jx9MC9IIUnYwT8q4VMMENJ/me/oik2UwFWUWSdLMDt58D4DHArc7pZqHTa8q5Lxv
h0ELa1w9hABmu4wfWIhAhSy5oSU4sehqnRcLwAPlWflRaWZzvLCSCBph5kBguj8T
Mt+1uXFkghBcyJKqNmt93t4PvmHFsEDC2v7DC9G4iQxXBroxIkj1QnG9Cq9Eub/1
fq6t6mTHgOClYdtF5iqIj2ZRWYj/LS4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:34:33 2026 by rpki-client