Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
File:                     74cca517-9428-314a-9bf6-c27e43608e8b.roa (raw, json)
Hash identifier:          9WqlX/eYu4Xb8lg6vvrsxqpExs/p7BX+GNAs7gWwt+4=
Subject key identifier:   43:30:A1:13:D6:5C:34:78:E3:2B:AD:41:C3:A4:CA:7C:B1:7E:08:21
Certificate issuer:       /CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Certificate serial:       010D0C9F4328584F10378CCBD52879CDF0CB5B80
Authority key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     394935
IP address blocks:        23.136.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:8c:cb:d5:28:79:cd:f0:cb:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=8b3ff157-c6e9-4497-9b08-6e39da7fa076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:1c:f4:ea:9b:b2:52:ed:c5:85:c6:bd:df:
                    51:77:c9:27:dc:a4:54:14:df:c2:a6:28:a2:04:e7:
                    b2:7c:ab:9a:b0:31:cf:da:65:18:58:81:3d:c4:b2:
                    b0:ab:37:43:65:11:90:3e:17:b7:67:38:a5:ab:25:
                    a8:d6:b0:35:db:aa:bb:d2:5e:06:97:01:c6:d0:82:
                    1e:06:ce:c2:09:6e:ce:34:f8:46:0b:b2:2e:6e:6a:
                    3e:9d:5d:8d:4b:d3:94:3d:c0:9e:38:9f:99:0e:50:
                    d3:d4:cb:61:43:ae:2d:a8:2c:16:e6:ba:2c:3f:7e:
                    ba:c0:bb:44:71:cd:d3:33:37:8a:e5:43:21:47:25:
                    df:f7:f8:b5:d7:48:17:f7:9d:d4:c7:7d:63:ef:7e:
                    c0:49:cb:de:9c:76:17:98:2a:6e:cd:a4:42:24:84:
                    87:75:67:ca:30:3c:0b:49:d5:ec:a0:25:96:fc:74:
                    e6:a1:91:4f:e4:f0:81:30:6e:80:b0:c5:b6:89:49:
                    b2:f4:af:bf:ed:7a:1b:62:47:f0:61:81:d1:78:0c:
                    7a:35:c1:a0:9c:5d:53:7c:4c:5b:53:8f:7e:dc:fe:
                    ab:8b:8b:75:84:14:94:6c:a7:0b:78:93:79:8e:e8:
                    94:87:59:9a:2a:2c:5e:1c:56:5d:81:48:c6:12:b2:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:30:A1:13:D6:5C:34:78:E3:2B:AD:41:C3:A4:CA:7C:B1:7E:08:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/74cca517-9428-314a-9bf6-c27e43608e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl

            X509v3 Authority Key Identifier:
                keyid:F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:69:80:ba:5d:bd:d8:57:cc:76:15:5a:00:12:ba:94:14:
         9f:cb:87:61:c0:59:15:d7:ee:7d:b2:e5:5c:11:8f:13:da:12:
         22:34:43:a7:2e:7d:13:f8:55:38:26:a0:e5:8d:4d:81:89:b9:
         5a:16:ce:cb:a2:1c:ef:01:53:ec:88:80:da:99:7d:a7:43:ae:
         2c:ae:8e:bc:20:9c:7d:ca:73:d3:2f:31:c4:27:a2:06:5a:04:
         ca:df:4e:e4:19:67:2e:1c:bb:e3:65:55:96:c3:77:56:40:9e:
         50:16:44:8c:10:f1:9b:74:83:e5:7b:43:b2:4e:66:c7:a0:e7:
         8c:e6:cd:e5:bd:a6:98:ed:32:2d:1f:19:d0:03:0d:0d:8f:30:
         e4:7b:c9:0d:d5:38:8d:9a:5c:d9:78:3c:66:1e:b5:4f:8b:41:
         b7:ca:7a:86:ae:e3:a4:a5:9a:81:cd:44:fe:d3:6b:4c:b9:7e:
         dd:39:73:6d:2d:45:22:c3:9f:42:69:69:07:31:ae:e9:7c:ef:
         06:db:5b:36:d8:08:81:bd:dd:31:ad:ef:fc:34:cf:08:ae:9b:
         be:1a:52:f5:62:ef:81:99:84:13:d7:4a:59:3f:b6:fb:c3:7d:
         d3:45:44:ea:66:ba:cc:87:34:12:de:18:72:73:c2:f1:f1:f1:
         e2:16:6c:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4zL1Sh5zfDLW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVm
YTU0MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
OGIzZmYxNTctYzZlOS00NDk3LTliMDgtNmUzOWRhN2ZhMDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdEc9OqbslLtxYXGvd9Rd8kn3KRUFN/Cpiii
BOeyfKuasDHP2mUYWIE9xLKwqzdDZRGQPhe3ZzilqyWo1rA126q70l4GlwHG0IIe
Bs7CCW7ONPhGC7Iubmo+nV2NS9OUPcCeOJ+ZDlDT1MthQ64tqCwW5rosP366wLtE
cc3TMzeK5UMhRyXf9/i110gX953Ux31j737AScvenHYXmCpuzaRCJISHdWfKMDwL
SdXsoCWW/HTmoZFP5PCBMG6AsMW2iUmy9K+/7XobYkfwYYHReAx6NcGgnF1TfExb
U49+3P6ri4t1hBSUbKcLeJN5juiUh1maKixeHFZdgUjGErJPowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMwoRPWXDR44yutQcOkynyxfgghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4
MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvNzRjY2E1MTctOTQyOC0z
MTRhLTliZjYtYzI3ZTQzNjA4ZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDlhODI4ZWQtYzllMi00ODFiLTg3
MTUtNDFiNGQ1ZjVmYTU0LzA5YTgyOGVkLWM5ZTItNDgxYi04NzE1LTQxYjRkNWY1
ZmE1NC5jcmwwHwYDVR0jBBgwFoAU9De2wyqBMn9+7TP2eXzabHVxEzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0
ZDVmNWZhNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsuaYC6Xb3YV8x2FVoAErqUFJ/Lh2HAWRXX7n2y5VwRjxPaEiI0Q6cu
fRP4VTgmoOWNTYGJuVoWzsuiHO8BU+yIgNqZfadDriyujrwgnH3Kc9MvMcQnogZa
BMrfTuQZZy4cu+NlVZbDd1ZAnlAWRIwQ8Zt0g+V7Q7JOZseg54zmzeW9ppjtMi0f
GdADDQ2PMOR7yQ3VOI2aXNl4PGYetU+LQbfKeoau46SlmoHNRP7Ta0y5ft05c20t
RSLDn0JpaQcxrul87wbbWzbYCIG93TGt7/w0zwium74aUvVi74GZhBPXSlk/tvvD
fdNFROpmusyHNBLeGHJzwvHx8eIWbEg=
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:43:14 2026 by rpki-client