Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/213b8e08-f513-3d22-81ed-50457e75dd0f.roa
File:                     213b8e08-f513-3d22-81ed-50457e75dd0f.roa (raw, json)
Hash identifier:          5EAopEWC9qL8/vObF3bppJJxo2qIcRwJFrkWB2dOSvo=
Subject key identifier:   15:31:4C:27:2A:74:A1:BE:E6:20:99:F0:B6:A6:FD:23:81:4A:EA:C1
Certificate issuer:       /CN=b7862bc4-6389-47d6-bd67-0cfdcba83125
Certificate serial:       010D0C9F4328584D59EA5FDBDB63BC5E9379BB80
Authority key identifier: 8B:36:67:57:60:2D:63:6C:93:66:81:E5:6E:49:13:EB:2F:EC:C9:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/213b8e08-f513-3d22-81ed-50457e75dd0f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     35876
IP address blocks:        23.140.244.0/24 maxlen: 24
                          82.158.88.0/22 maxlen: 24
                          2602:f602::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:5f:db:db:63:bc:5e:93:79:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7862bc4-6389-47d6-bd67-0cfdcba83125
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=3225884e-bb2e-43e0-b988-7ac94ffc75cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:07:d9:87:b9:23:84:7d:21:db:25:b1:20:
                    8f:4f:d3:b8:75:85:e1:e0:e9:46:87:a1:72:16:a7:
                    36:91:55:94:43:30:14:a5:b2:31:93:f5:68:1e:77:
                    26:d8:ad:f9:d0:d5:87:74:9e:f3:fb:70:98:fe:ab:
                    11:0a:58:a7:f1:0b:32:b1:f7:63:42:cb:1b:87:8e:
                    de:26:8c:f4:12:06:71:b9:b2:89:1f:6d:a5:b5:c2:
                    32:2c:22:af:20:93:06:d5:b4:94:35:12:a5:56:5c:
                    30:1a:17:9f:82:55:76:05:30:10:ee:a1:f9:7b:b4:
                    a7:3b:25:42:33:1e:54:00:3f:e6:1b:05:95:68:d9:
                    ec:88:8a:14:d0:a5:c7:22:8b:3a:fd:8b:03:d4:41:
                    ed:3f:9f:cf:c6:a6:cf:48:9d:36:6f:14:c2:de:38:
                    b9:82:c6:2e:7e:32:aa:ec:d2:53:35:a6:8c:b0:aa:
                    9d:74:76:fc:6a:1d:41:0c:aa:67:ea:68:5f:b2:52:
                    ea:1d:e0:41:e2:ba:98:21:7a:55:0e:58:11:d0:68:
                    cc:eb:e2:01:38:0b:c3:bf:9f:9a:f0:e1:0f:8a:6d:
                    3a:cb:48:09:89:0b:43:14:a8:ce:fb:51:a1:ad:b6:
                    57:2f:53:41:2f:cd:76:e1:9d:e0:e9:d4:b5:97:e6:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:4C:27:2A:74:A1:BE:E6:20:99:F0:B6:A6:FD:23:81:4A:EA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/213b8e08-f513-3d22-81ed-50457e75dd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125/b7862bc4-6389-47d6-bd67-0cfdcba83125.crl

            X509v3 Authority Key Identifier:
                keyid:8B:36:67:57:60:2D:63:6C:93:66:81:E5:6E:49:13:EB:2F:EC:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7862bc4-6389-47d6-bd67-0cfdcba83125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.244.0/24
                  82.158.88.0/22
                IPv6:
                  2602:f602::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3f:98:b1:1b:60:07:52:9a:ea:6f:c7:e7:53:ed:17:00:df:
         82:34:fd:c7:b5:9b:42:8d:a0:e2:23:fa:33:85:eb:18:52:5a:
         73:e5:f5:79:d6:c5:97:f0:5c:9c:b9:bb:d0:31:ac:ae:68:f7:
         de:bf:83:19:7e:44:f0:88:60:8f:0a:99:44:52:f1:d7:79:9d:
         e2:76:81:af:10:7f:46:48:c4:4c:17:ea:48:7b:f5:1a:41:51:
         7d:a1:65:75:d6:dd:71:19:2e:f9:c1:ba:a8:a0:d9:5b:f6:e2:
         8d:1c:5b:b2:7d:41:b1:79:9e:b4:b7:e0:1f:e8:2c:f9:7c:bb:
         bf:b5:83:8a:6b:22:86:fd:41:33:fa:ff:86:58:5e:6a:b1:6d:
         08:e6:a4:0e:04:16:e1:9f:ae:97:40:11:fd:58:bb:ea:34:92:
         fe:63:7d:6b:88:bc:d4:79:00:71:08:8d:21:a0:72:e4:e8:08:
         09:cf:b5:ed:12:78:9a:25:b1:97:3a:e4:8a:d7:a3:74:96:85:
         f6:d4:5b:8d:26:cd:08:49:3c:0b:26:4d:3a:54:7d:ac:71:94:
         97:66:2f:3b:95:7c:e6:5b:78:6b:56:df:7b:70:2e:31:2c:73:
         57:ab:32:c1:87:74:00:cb:2e:57:40:a2:28:56:94:3e:68:63:
         5e:ad:54:b3
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1Z6l/b22O8XpN5u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc4NjJiYzQtNjM4OS00N2Q2LWJkNjctMGNmZGNiYTgz
MTI1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MzIyNTg4NGUtYmIyZS00M2UwLWI5ODgtN2FjOTRmZmM3NWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAgH2Ye5I4R9IdslsSCPT9O4dYXh4OlGh6Fy
Fqc2kVWUQzAUpbIxk/VoHncm2K350NWHdJ7z+3CY/qsRClin8QsysfdjQssbh47e
Joz0EgZxubKJH22ltcIyLCKvIJMG1bSUNRKlVlwwGhefglV2BTAQ7qH5e7SnOyVC
Mx5UAD/mGwWVaNnsiIoU0KXHIos6/YsD1EHtP5/PxqbPSJ02bxTC3ji5gsYufjKq
7NJTNaaMsKqddHb8ah1BDKpn6mhfslLqHeBB4rqYIXpVDlgR0GjM6+IBOAvDv5+a
8OEPim06y0gJiQtDFKjO+1GhrbZXL1NBL8124Z3g6dS1l+ZA9QIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFBUxTCcqdKG+5iCZ8Lam/SOBSurBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNzg2
MmJjNC02Mzg5LTQ3ZDYtYmQ2Ny0wY2ZkY2JhODMxMjUvMjEzYjhlMDgtZjUxMy0z
ZDIyLTgxZWQtNTA0NTdlNzVkZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjc4NjJiYzQtNjM4OS00N2Q2LWJk
NjctMGNmZGNiYTgzMTI1L2I3ODYyYmM0LTYzODktNDdkNi1iZDY3LTBjZmRjYmE4
MzEyNS5jcmwwHwYDVR0jBBgwFoAUizZnV2AtY2yTZoHlbkkT6y/sybcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNzg2MmJjNC02Mzg5LTQ3ZDYtYmQ2Ny0wY2Zk
Y2JhODMxMjUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4z0AwQC
Up5YMA4EAgACMAgDBgAmAvYCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYP5ixG2AHUprqb8fnU+0XAN+C
NP3HtZtCjaDiI/ozhesYUlpz5fV51sWX8FycubvQMayuaPfev4MZfkTwiGCPCplE
UvHXeZ3idoGvEH9GSMRMF+pIe/UaQVF9oWV11t1xGS75wbqooNlb9uKNHFuyfUGx
eZ60t+Af6Cz5fLu/tYOKayKG/UEz+v+GWF5qsW0I5qQOBBbhn66XQBH9WLvqNJL+
Y31riLzUeQBxCI0hoHLk6AgJz7XtEniaJbGXOuSK16N0loX21FuNJs0ISTwLJk06
VH2scZSXZi87lXzmW3hrVt97cC4xLHNXqzLBh3QAyy5XQKIoVpQ+aGNerVSz
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:19 2026 by rpki-client