Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
File:                     e7592285-1d81-39f4-b9ef-2e69e22050f1.roa (raw, json)
Hash identifier:          VB1G+HiqOTIIDRYPz5iehUSb2x7vAjxYV4Z1QM67ZeQ=
Subject key identifier:   ED:B1:CD:E6:27:95:9A:42:DA:5A:12:0E:A1:C9:D2:6E:FE:A9:7C:A2
Certificate issuer:       /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
Certificate serial:       010D0C9F4328584E00062B80CBFEC0FAF304BF40
Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     19710
IP address blocks:        23.138.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:2b:80:cb:fe:c0:fa:f3:04:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=438ed988-87b6-4198-9e07-031016dcda46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:30:35:25:ed:7a:43:6a:87:c8:d8:4a:a0:
                    89:09:8e:1a:9f:24:0c:1c:74:8c:0c:55:67:6c:a9:
                    4a:c1:90:86:8d:9e:36:8e:f1:57:18:9d:a5:21:e8:
                    fb:2b:b1:da:36:25:62:2c:ff:14:fd:f0:6c:24:3b:
                    b7:03:2d:cb:67:8d:3f:f3:dd:e4:2f:72:88:8b:ab:
                    bd:dc:20:ae:e9:aa:cc:ce:06:18:a0:40:ad:33:a5:
                    b6:ed:99:3c:c4:68:34:84:c3:a5:3f:f9:ca:87:3e:
                    0f:e4:4d:43:d7:a1:81:d5:7a:3c:88:c6:16:5f:b0:
                    b3:db:bb:bb:cc:db:86:a7:18:d4:95:dd:fa:f6:15:
                    5c:c5:8e:e1:d1:f2:47:69:14:d7:f7:fa:77:6f:6f:
                    da:4f:6c:06:05:08:20:3f:44:5f:47:5e:56:24:2c:
                    24:66:91:ce:23:98:81:2a:ec:a0:68:52:59:61:7d:
                    8e:89:af:71:5d:ab:d7:f1:87:1d:a8:3c:42:ef:9b:
                    37:85:0d:0f:ca:91:78:e5:5d:27:e8:bc:e2:c3:f5:
                    07:45:d3:be:83:3a:74:1f:6c:6a:cd:57:25:41:e6:
                    42:d3:6d:4d:9c:28:ab:97:d6:60:f9:37:a8:c6:cc:
                    50:61:15:e5:f2:64:82:a8:92:e7:62:80:e3:0b:36:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B1:CD:E6:27:95:9A:42:DA:5A:12:0E:A1:C9:D2:6E:FE:A9:7C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl

            X509v3 Authority Key Identifier:
                keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:41:2b:cd:ec:18:eb:9d:12:1e:e0:29:3e:ed:0c:6a:92:ce:
         ec:fa:ae:77:83:50:ce:99:57:77:7e:7f:df:1c:0a:c6:88:6c:
         cb:75:74:97:51:bf:14:ab:23:04:d0:eb:1b:50:45:11:0a:be:
         43:c2:01:bc:f4:fc:6b:8e:f1:33:7e:65:b1:d7:57:c1:1f:02:
         b2:62:39:41:c1:af:02:63:af:b7:f9:95:69:d5:29:63:18:09:
         b4:90:d4:eb:c2:1c:ee:a8:e2:66:6c:ba:e9:e8:6c:dd:b8:d7:
         59:e6:71:aa:40:ff:8e:f7:f3:f0:5c:db:50:63:7c:47:f0:2e:
         26:c8:dd:79:b3:b6:6a:59:2c:1b:02:23:a0:ec:43:ab:5e:e7:
         3f:4f:aa:10:80:a2:a8:c3:34:b8:99:27:de:ef:f3:9f:60:d4:
         7f:fb:f3:25:54:8c:81:77:e0:b8:61:8d:12:0b:83:41:90:80:
         76:58:2a:eb:a4:36:52:10:04:6a:63:c4:46:4e:7d:e3:e3:86:
         42:7f:03:08:2a:b7:dd:e8:b8:6d:1b:59:00:ad:2e:39:2e:ac:
         46:c5:8e:70:6e:ba:63:91:68:1d:cd:8d:00:28:92:d9:d5:05:
         48:28:74:30:ad:8f:86:c9:9f:95:82:65:ce:89:48:6f:8c:0c:
         92:ad:87:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABiuAy/7A+vMEv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTEyZTJmMmYtYzAzMS00YWEzLWIwZDQtNTQwMGFhNWE0
MzI1MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NDM4ZWQ5ODgtODdiNi00MTk4LTllMDctMDMxMDE2ZGNkYTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvgwNSXtekNqh8jYSqCJCY4anyQMHHSMDFVn
bKlKwZCGjZ42jvFXGJ2lIej7K7HaNiViLP8U/fBsJDu3Ay3LZ40/893kL3KIi6u9
3CCu6arMzgYYoECtM6W27Zk8xGg0hMOlP/nKhz4P5E1D16GB1Xo8iMYWX7Cz27u7
zNuGpxjUld369hVcxY7h0fJHaRTX9/p3b2/aT2wGBQggP0RfR15WJCwkZpHOI5iB
KuygaFJZYX2Oia9xXavX8YcdqDxC75s3hQ0PypF45V0n6Lziw/UHRdO+gzp0H2xq
zVclQeZC021NnCirl9Zg+TeoxsxQYRXl8mSCqJLnYoDjCzZZQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2xzeYnlZpC2loSDqHJ0m7+qXyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MTJl
MmYyZi1jMDMxLTRhYTMtYjBkNC01NDAwYWE1YTQzMjUvZTc1OTIyODUtMWQ4MS0z
OWY0LWI5ZWYtMmU2OWUyMjA1MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTEyZTJmMmYtYzAzMS00YWEzLWIw
ZDQtNTQwMGFhNWE0MzI1LzUxMmUyZjJmLWMwMzEtNGFhMy1iMGQ0LTU0MDBhYTVh
NDMyNS5jcmwwHwYDVR0jBBgwFoAUCYh2sRsVtPpVDOhe3gUh8CV1kswwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81MTJlMmYyZi1jMDMxLTRhYTMtYjBkNC01NDAw
YWE1YTQzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4o0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdBK83sGOudEh7gKT7tDGqSzuz6rneDUM6ZV3d+f98cCsaIbMt1dJdR
vxSrIwTQ6xtQRREKvkPCAbz0/GuO8TN+ZbHXV8EfArJiOUHBrwJjr7f5lWnVKWMY
CbSQ1OvCHO6o4mZsuunobN2411nmcapA/4738/Bc21BjfEfwLibI3XmztmpZLBsC
I6DsQ6te5z9PqhCAoqjDNLiZJ97v859g1H/78yVUjIF34LhhjRILg0GQgHZYKuuk
NlIQBGpjxEZOfePjhkJ/Awgqt93ouG0bWQCtLjkurEbFjnBuumORaB3NjQAoktnV
BUgodDCtj4bJn5WCZc6JSG+MDJKth+w=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:57 2026 by rpki-client