Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa
File:                     dbeb4e19-8874-3faf-807c-704874560370.roa (raw, json)
Hash identifier:          fscSEBTeRHM9SmqnVBDHs9H1yVU+wy4eF/2CDDU/+bs=
Subject key identifier:   02:E1:7E:5C:8D:2C:3D:10:E3:48:02:2B:68:04:E4:D8:A8:87:FE:15
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F4328584F623B589F160ED39A9EA44700
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa
Signing time:             Sat 03 Oct 2026 22:04:15 +0000
ROA not before:           Sat 03 Oct 2026 22:04:15 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     16611
IP address blocks:        23.163.136.0/24 maxlen: 24
                          2602:fa07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:3b:58:9f:16:0e:d3:9a:9e:a4:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Oct  3 22:04:15 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=71f364ba-e342-4679-91fa-92712c08b44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:a7:42:6f:d9:63:cf:7c:c3:b5:c9:2c:f0:
                    e5:58:30:ae:a6:c7:38:eb:c6:ea:25:2b:8f:f7:b0:
                    60:ad:eb:7a:e3:25:e1:50:17:a2:c8:57:7f:e3:6c:
                    ce:50:cc:d8:e5:66:39:98:d9:04:56:0b:4e:46:00:
                    f0:04:e2:90:d6:f1:35:19:ce:ec:9f:42:84:2e:1f:
                    94:1b:ff:63:62:ed:bc:9a:ce:b0:d3:91:7c:db:68:
                    52:83:18:d6:ca:0c:92:55:ad:44:53:71:a5:b6:ec:
                    2a:79:36:d3:39:52:8a:e3:be:8d:4a:2e:25:78:21:
                    54:8a:8b:df:00:19:c5:57:f5:0e:7a:0e:ff:0e:21:
                    5e:45:b4:04:01:fc:17:30:a6:de:dc:6e:6d:26:76:
                    e3:6a:02:f3:b9:45:fb:7f:81:76:00:0a:25:ef:bc:
                    a8:4f:26:2f:91:c2:90:bc:24:af:93:d7:1b:d4:0c:
                    a2:c9:9b:b0:09:61:7f:e9:61:db:ee:63:4f:55:5d:
                    95:3d:10:62:e4:39:52:0e:36:6d:fb:e2:41:48:14:
                    16:cd:a7:df:cb:f1:4a:61:34:3a:de:73:7b:05:1d:
                    bb:1a:23:5c:2e:65:d1:fe:d2:e0:80:25:6a:15:ec:
                    e6:2d:bb:0b:fb:6d:45:30:52:9b:f0:4d:04:8a:f9:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:7E:5C:8D:2C:3D:10:E3:48:02:2B:68:04:E4:D8:A8:87:FE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/dbeb4e19-8874-3faf-807c-704874560370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.136.0/24
                IPv6:
                  2602:fa07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:84:44:db:94:68:b3:e0:b3:94:df:88:3e:3f:33:fd:d2:
         81:49:05:a9:b4:fc:db:9d:8a:72:79:67:44:da:2a:40:a0:b3:
         83:36:44:41:db:b9:77:cd:a5:4d:11:24:fb:c5:fa:2b:ee:f3:
         d0:a7:80:a0:56:df:b7:fa:e7:b0:7b:21:5f:51:33:4a:b9:06:
         89:f6:db:e5:66:9e:28:e8:18:98:83:76:f3:7c:9f:e5:39:83:
         84:f9:66:1f:e6:00:60:97:da:3d:a7:81:d6:b0:4d:ee:83:08:
         5b:a6:49:ab:fd:81:5c:62:13:88:23:bb:34:71:3a:be:bb:5a:
         f9:e9:f5:fb:2c:9c:47:44:b0:80:4b:ef:0b:54:fd:27:97:c0:
         54:a5:7f:af:10:46:ca:b7:3e:51:33:f5:2f:10:39:78:c9:4b:
         0e:9c:c6:47:eb:c9:38:c1:ff:8b:9b:c9:50:8c:df:6e:f3:5e:
         42:d4:a2:cc:46:63:ea:84:86:35:80:d2:1f:d6:f9:a1:78:6a:
         2c:c5:42:c2:43:e8:5f:78:a0:e3:8a:5b:76:d0:0e:1f:88:91:
         be:ff:4b:95:24:d0:11:39:96:12:d8:37:e7:82:59:ee:55:18:
         59:cf:30:d9:e5:6c:52:be:cc:2c:bc:70:0f:b6:3b:bf:25:2b:
         71:2d:92:dc
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9iO1ifFg7Tmp6kRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxMGQ3YmEtZTI3My00ZDM0LTg2ODgtYzdjMWUzOGFi
NmRhMB4XDTI2MTAwMzIyMDQxNVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
NzFmMzY0YmEtZTM0Mi00Njc5LTkxZmEtOTI3MTJjMDhiNDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4qnQm/ZY898w7XJLPDlWDCupsc468bqJSuP
97Bgret64yXhUBeiyFd/42zOUMzY5WY5mNkEVgtORgDwBOKQ1vE1Gc7sn0KELh+U
G/9jYu28ms6w05F822hSgxjWygySVa1EU3GltuwqeTbTOVKK476NSi4leCFUiovf
ABnFV/UOeg7/DiFeRbQEAfwXMKbe3G5tJnbjagLzuUX7f4F2AAol77yoTyYvkcKQ
vCSvk9cb1AyiyZuwCWF/6WHb7mNPVV2VPRBi5DlSDjZt++JBSBQWzaffy/FKYTQ6
3nN7BR27GiNcLmXR/tLggCVqFezmLbsL+21FMFKb8E0EivlAMQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFALhflyNLD0Q40gCK2gE5Nioh/4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEw
ZDdiYS1lMjczLTRkMzQtODY4OC1jN2MxZTM4YWI2ZGEvZGJlYjRlMTktODg3NC0z
ZmFmLTgwN2MtNzA0ODc0NTYwMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2IxMGQ3YmEtZTI3My00ZDM0LTg2
ODgtYzdjMWUzOGFiNmRhLzdiMTBkN2JhLWUyNzMtNGQzNC04Njg4LWM3YzFlMzhh
YjZkYS5jcmwwHwYDVR0jBBgwFoAU1kXVwWz7OXhjCYzZhMaxExZymo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YjEwZDdiYS1lMjczLTRkMzQtODY4OC1jN2Mx
ZTM4YWI2ZGEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6OIMA8E
AgACMAkDBwAmAvoHAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfLCERNuUaLPgs5TfiD4/M/3SgUkFqbT8
252KcnlnRNoqQKCzgzZEQdu5d82lTREk+8X6K+7z0KeAoFbft/rnsHshX1EzSrkG
ifbb5WaeKOgYmIN283yf5TmDhPlmH+YAYJfaPaeB1rBN7oMIW6ZJq/2BXGITiCO7
NHE6vrta+en1+yycR0SwgEvvC1T9J5fAVKV/rxBGyrc+UTP1LxA5eMlLDpzGR+vJ
OMH/i5vJUIzfbvNeQtSizEZj6oSGNYDSH9b5oXhqLMVCwkPoX3ig44pbdtAOH4iR
vv9LlSTQETmWEtg354JZ7lUYWc8w2eVsUr7MLLxwD7Y7vyUrcS2S3A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:40:56 2026 by rpki-client