Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
File:                     ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (raw, json)
Hash identifier:          COT4sJFLJbTJYXuSWlSqfn4bgZMtmGPSFfARzcUfY+8=
Subject key identifier:   BA:6E:15:FE:A9:A9:74:EA:4D:13:AE:10:F3:44:75:0A:EB:B3:2A:CD
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F4328584DE9B08619DB6FB5F94C27CC40
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     30114
IP address blocks:        23.146.88.0/24 maxlen: 24
                          2602:fab0:20::/44 maxlen: 48
                          2602:fab0:30::/44 maxlen: 48
                          2602:fab0:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:86:19:db:6f:b5:f9:4c:27:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=ecb4f1bd-f657-45b1-8c5d-1bb79312436d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:04:4e:65:1d:56:a1:9e:b7:3d:35:d1:60:
                    34:4a:7f:42:7c:46:30:55:01:d4:3d:a6:9d:cd:ab:
                    b5:8c:8c:2c:de:f6:fc:49:a0:2f:a2:c4:18:71:4a:
                    46:be:a3:fb:d7:dd:b3:49:7e:db:70:82:4e:c0:8b:
                    14:24:59:33:aa:f7:35:a9:00:d1:47:04:a1:df:b6:
                    ce:59:20:27:ab:57:00:72:22:35:35:99:32:2e:c7:
                    a4:49:54:f7:86:9c:b0:fc:af:3a:99:70:d5:7d:80:
                    4f:14:64:42:cf:f0:49:de:ee:d6:9b:b1:1c:87:31:
                    a6:66:57:8a:1f:0f:dd:f0:6a:76:ed:fe:0b:8c:e8:
                    be:43:b3:c5:34:aa:a0:a8:1c:dd:0d:d6:53:3c:1d:
                    0e:d0:fe:2a:3a:83:4f:3b:1c:21:a9:59:ab:fc:c5:
                    60:89:fd:9f:6c:12:a2:95:dd:21:6c:f1:00:bb:b6:
                    a1:92:ec:d9:69:0a:56:62:15:94:d0:b7:0d:a6:67:
                    3f:82:4c:ff:2d:03:f4:51:0b:a8:28:84:38:b7:7c:
                    fb:96:82:f6:bc:81:80:c7:4f:69:ce:0a:f4:8e:45:
                    e5:d2:f4:dd:a5:78:4d:a4:c9:3c:15:2d:41:9f:41:
                    a5:fa:43:06:69:67:fd:71:34:3d:f6:47:2b:2d:e9:
                    88:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:15:FE:A9:A9:74:EA:4D:13:AE:10:F3:44:75:0A:EB:B3:2A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.88.0/24
                IPv6:
                  2602:fab0:20::-2602:fab0:4f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0d:3f:f2:55:94:53:21:82:37:40:38:b7:28:36:e1:46:6f:
         96:60:1d:55:f2:fe:ca:d2:af:a2:26:a6:ea:24:b7:20:dd:25:
         dc:e4:f1:a9:90:98:a5:fa:c7:cc:1b:e5:4d:f4:3d:00:74:d1:
         46:d9:a4:31:5d:39:0f:8e:12:fc:91:5f:f4:a5:8b:fa:bc:37:
         73:be:e6:05:f5:36:45:d2:d5:27:21:db:7b:46:26:ac:68:3c:
         1f:27:e7:73:76:fd:50:08:2d:68:48:44:c5:cb:56:44:7b:2b:
         ad:15:d8:b9:84:ec:de:e5:c2:db:38:51:e7:4e:f8:f9:da:ca:
         0d:8a:a8:5e:aa:17:11:26:02:19:68:21:ee:cb:f3:e4:c1:05:
         7a:0d:d9:cb:c0:8f:8d:a9:0b:1f:f8:da:6f:3f:14:d8:04:0a:
         f4:66:ee:2a:24:97:12:79:c7:20:fa:48:1c:d4:a7:7a:b2:e0:
         e8:b3:45:5a:4d:c9:12:66:7b:d1:43:44:26:85:da:a5:fa:73:
         6f:4c:7f:1e:fc:a3:49:e4:88:95:d4:9f:e8:c7:67:c7:02:dd:
         15:aa:11:fe:aa:e3:9a:cd:43:3d:88:8c:42:93:ea:c2:0d:3c:
         8f:e5:f1:10:01:fd:1c:3e:88:c1:32:08:0f:3b:27:2b:0a:20:
         43:99:0d:9b
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE3psIYZ22+1+UwnzEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh
MjdlMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZWNiNGYxYmQtZjY1Ny00NWIxLThjNWQtMWJiNzkzMTI0MzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgwETmUdVqGetz010WA0Sn9CfEYwVQHUPaad
zau1jIws3vb8SaAvosQYcUpGvqP7192zSX7bcIJOwIsUJFkzqvc1qQDRRwSh37bO
WSAnq1cAciI1NZkyLsekSVT3hpyw/K86mXDVfYBPFGRCz/BJ3u7Wm7EchzGmZleK
Hw/d8Gp27f4LjOi+Q7PFNKqgqBzdDdZTPB0O0P4qOoNPOxwhqVmr/MVgif2fbBKi
ld0hbPEAu7ahkuzZaQpWYhWU0LcNpmc/gkz/LQP0UQuoKIQ4t3z7loL2vIGAx09p
zgr0jkXl0vTdpXhNpMk8FS1Bn0Gl+kMGaWf9cTQ99kcrLemI9wIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFLpuFf6pqXTqTROuEPNEdQrrsyrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi
YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvY2E2MmYxYTUtNWVjYi0z
MDQwLTg1ZjMtMWY4YjZjY2FkNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1
ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm
YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1
OWUxZmEyN2UuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAF5JYMBoE
AgACMBQwEgMHBSYC+rAAIAMHBCYC+rAAQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIDT/yVZRTIYI3QDi3
KDbhRm+WYB1V8v7K0q+iJqbqJLcg3SXc5PGpkJil+sfMG+VN9D0AdNFG2aQxXTkP
jhL8kV/0pYv6vDdzvuYF9TZF0tUnIdt7RiasaDwfJ+dzdv1QCC1oSETFy1ZEeyut
Fdi5hOze5cLbOFHnTvj52soNiqheqhcRJgIZaCHuy/PkwQV6DdnLwI+NqQsf+Npv
PxTYBAr0Zu4qJJcSeccg+kgc1Kd6suDos0VaTckSZnvRQ0Qmhdql+nNvTH8e/KNJ
5IiV1J/ox2fHAt0VqhH+quOazUM9iIxCk+rCDTyP5fEQAf0cPojBMggPOycrCiBD
mQ2b
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:54 2026 by rpki-client