Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa
File:                     c5ba2b12-4ea3-3178-8518-06d35223dfba.roa (raw, json)
Hash identifier:          lwxFJMZLV9PTlhG8b1rcUynARx5ooxQFY/SAUD0UK0Y=
Subject key identifier:   0E:6F:75:73:A7:98:B4:A2:F1:28:D6:88:36:DC:67:A1:9B:B4:A9:C1
Certificate issuer:       /CN=b5da4659-9af2-4ab9-90ed-27de1a1c01e6
Certificate serial:       010D0C9F4328584FAF588CE378A25DEFAFA36000
Authority key identifier: 89:69:B5:9D:42:D3:19:5A:3F:EF:B5:CF:A6:88:A5:3D:D3:F2:C4:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa
Signing time:             Sat 31 Oct 2026 13:00:13 +0000
ROA not before:           Sat 31 Oct 2026 13:00:13 +0000
ROA not after:            Fri 29 Jan 2027 14:00:13 +0000
asID:                     214483
IP address blocks:        23.148.244.0/24 maxlen: 24
                          2602:f4e0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:af:58:8c:e3:78:a2:5d:ef:af:a3:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5da4659-9af2-4ab9-90ed-27de1a1c01e6
        Validity
            Not Before: Oct 31 13:00:13 2026 GMT
            Not After : Jan 29 14:00:13 2027 GMT
        Subject: CN=24f11d3f-9141-449d-88f2-42048ccc5476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:31:b8:38:94:e9:c3:f5:16:fa:90:ac:17:
                    a1:dd:18:e9:9f:d0:51:ba:95:ac:fa:9a:e0:14:25:
                    f2:84:77:2a:ca:28:65:f6:5b:9c:50:e1:1a:aa:0b:
                    5c:60:e3:f9:e3:ca:21:ea:61:c5:9f:00:f6:a5:4a:
                    51:07:c1:76:4c:df:a9:fe:d0:c3:91:90:d1:8f:d1:
                    ca:b2:d1:10:91:26:88:e1:da:cf:13:4e:69:a5:28:
                    75:45:90:a3:56:67:d1:15:13:05:1e:0f:7d:d5:1d:
                    a9:13:3c:31:bf:10:52:c3:fa:5b:6c:de:4a:03:21:
                    e4:70:4b:2f:d8:55:22:9d:25:3e:aa:c2:0a:8d:fa:
                    e3:98:40:44:c0:2c:f4:1a:b3:5b:19:4c:1a:d4:53:
                    6f:8c:63:ff:26:a9:6e:18:7a:9f:aa:46:04:10:a8:
                    b6:2b:b4:b8:1b:94:84:32:fd:8e:66:ed:86:60:a2:
                    17:e1:60:4b:76:f0:f3:f5:ff:00:0d:08:d8:16:61:
                    7e:e7:fe:74:26:28:44:b4:34:b6:99:f4:52:64:ed:
                    81:9b:31:88:21:0a:f3:a0:18:c3:c7:02:de:d0:48:
                    76:66:a3:9d:b1:68:a3:b1:ea:86:e1:e1:bb:43:82:
                    50:50:38:a6:a9:77:02:1e:dd:df:78:c3:36:03:26:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:75:73:A7:98:B4:A2:F1:28:D6:88:36:DC:67:A1:9B:B4:A9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/c5ba2b12-4ea3-3178-8518-06d35223dfba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.crl

            X509v3 Authority Key Identifier:
                keyid:89:69:B5:9D:42:D3:19:5A:3F:EF:B5:CF:A6:88:A5:3D:D3:F2:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b5da4659-9af2-4ab9-90ed-27de1a1c01e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.244.0/24
                IPv6:
                  2602:f4e0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:53:dd:c0:e6:34:df:f7:1e:42:33:e4:a2:0c:be:16:51:
         2d:d4:5f:43:8a:ff:58:f2:92:3a:67:d9:4d:22:2c:bd:09:a6:
         a4:d8:91:2c:49:be:97:1d:8c:e0:38:89:5c:c3:92:83:75:e7:
         ac:f5:cf:01:8c:e1:02:10:44:c8:19:fb:fc:e7:fb:9d:1f:25:
         b3:41:51:65:9b:49:b6:31:19:6e:f8:6e:32:eb:1b:8a:d5:20:
         c3:be:df:45:ce:ac:9c:d7:bb:50:db:a0:af:a9:56:b1:e2:d5:
         e2:4a:dd:b2:24:7e:60:52:44:5f:0b:a8:0e:e4:41:dd:7f:b9:
         c0:a2:44:b7:d3:57:f3:64:ef:4f:06:d4:d8:79:e9:2f:23:a3:
         cc:23:3f:53:02:f6:ff:95:26:6f:85:93:b8:0a:ba:52:9a:33:
         1a:0e:68:ee:25:6d:5f:8d:0a:b7:d0:93:eb:f8:3c:54:f9:67:
         fc:78:7d:cd:32:b0:b2:a6:90:2a:66:bb:26:10:43:91:f3:75:
         60:39:0c:16:07:17:d9:b4:a8:a5:b8:4a:15:8b:ce:69:22:ab:
         88:88:5f:3d:b0:90:43:b7:5d:17:20:5d:94:7a:a9:18:84:71:
         1e:51:77:7d:94:6c:d8:56:54:fc:02:6f:05:c3:46:00:86:68:
         45:e6:ca:17
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+vWIzjeKJd76+jYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkYTQ2NTktOWFmMi00YWI5LTkwZWQtMjdkZTFhMWMw
MWU2MB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk
MjRmMTFkM2YtOTE0MS00NDlkLTg4ZjItNDIwNDhjY2M1NDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiwxuDiU6cP1FvqQrBeh3Rjpn9BRupWs+prg
FCXyhHcqyihl9lucUOEaqgtcYOP548oh6mHFnwD2pUpRB8F2TN+p/tDDkZDRj9HK
stEQkSaI4drPE05ppSh1RZCjVmfRFRMFHg991R2pEzwxvxBSw/pbbN5KAyHkcEsv
2FUinSU+qsIKjfrjmEBEwCz0GrNbGUwa1FNvjGP/JqluGHqfqkYEEKi2K7S4G5SE
Mv2OZu2GYKIX4WBLdvDz9f8ADQjYFmF+5/50JihEtDS2mfRSZO2BmzGIIQrzoBjD
xwLe0Eh2ZqOdsWijseqG4eG7Q4JQUDimqXcCHt3feMM2Ayb2RwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFA5vdXOnmLSi8SjWiDbcZ6GbtKnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNWRh
NDY1OS05YWYyLTRhYjktOTBlZC0yN2RlMWExYzAxZTYvYzViYTJiMTItNGVhMy0z
MTc4LTg1MTgtMDZkMzUyMjNkZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjVkYTQ2NTktOWFmMi00YWI5LTkw
ZWQtMjdkZTFhMWMwMWU2L2I1ZGE0NjU5LTlhZjItNGFiOS05MGVkLTI3ZGUxYTFj
MDFlNi5jcmwwHwYDVR0jBBgwFoAUiWm1nULTGVo/77XPpoilPdPyxMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNWRhNDY1OS05YWYyLTRhYjktOTBlZC0yN2Rl
MWExYzAxZTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5T0MA4E
AgACMAgDBgAmAvTgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGKlPdwOY03/ceQjPkogy+FlEt1F9Div9Y
8pI6Z9lNIiy9Caak2JEsSb6XHYzgOIlcw5KDdees9c8BjOECEETIGfv85/udHyWz
QVFlm0m2MRlu+G4y6xuK1SDDvt9Fzqyc17tQ26CvqVax4tXiSt2yJH5gUkRfC6gO
5EHdf7nAokS301fzZO9PBtTYeekvI6PMIz9TAvb/lSZvhZO4CrpSmjMaDmjuJW1f
jQq30JPr+DxU+Wf8eH3NMrCyppAqZrsmEEOR83VgOQwWBxfZtKiluEoVi85pIquI
iF89sJBDt10XIF2UeqkYhHEeUXd9lGzYVlT8Am8Fw0YAhmhF5soX
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:44 2026 by rpki-client