Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa
File:                     ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa (raw, json)
Hash identifier:          n/1mvNQSQn2HZ7qOWBNZjqonnduyejXPfHmq8dgb3UA=
Subject key identifier:   1D:71:F7:43:E0:F8:1F:7F:FC:48:2C:8A:6E:58:B7:00:11:E8:0A:E1
Certificate issuer:       /CN=87754807-d7dd-439f-8bea-ec0c7728d019
Certificate serial:       010D0C9F4328584F4C3D3DA3518C34DAE1986F80
Authority key identifier: 58:F5:DE:94:6F:7C:AE:F4:DD:7E:0D:AA:80:58:15:1A:0F:9C:21:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     400929
IP address blocks:        23.171.248.0/24 maxlen: 24
                          165.140.55.0/24 maxlen: 24
                          2602:f976::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:3d:a3:51:8c:34:da:e1:98:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87754807-d7dd-439f-8bea-ec0c7728d019
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=e41cf191-e5fe-42ac-a7c0-84db0836d626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:c3:9a:8e:58:d4:d9:11:35:1c:fd:25:f0:
                    03:d0:50:c6:30:c6:8f:96:7c:e9:a5:c8:5b:65:05:
                    6d:1a:10:21:53:bd:ac:5b:9b:6c:e4:8a:6e:ff:51:
                    cf:ec:f8:84:03:9c:12:f5:c4:69:77:6b:9a:f3:cb:
                    3c:0e:11:b4:b0:8c:80:9b:18:64:c8:db:de:b1:fb:
                    c9:45:35:20:a5:ee:e6:0f:71:8d:93:9f:bb:01:5d:
                    4c:76:3d:57:d0:b2:a8:fd:99:ec:de:4d:50:48:27:
                    b4:9b:e8:cb:1e:29:85:84:1a:97:44:bd:0c:47:df:
                    be:65:05:2c:b6:a6:05:de:87:4a:81:bf:4d:75:d5:
                    fa:24:5f:d5:af:42:66:97:70:c3:93:c4:1b:d1:37:
                    4d:4e:40:1b:f2:0e:51:52:8c:fc:b7:8e:d0:dc:26:
                    04:31:9e:01:83:65:75:88:28:d9:2b:bc:d6:a0:23:
                    85:71:4b:d1:9a:e3:d3:4e:85:f0:31:54:4e:02:43:
                    f7:5f:6e:58:f5:05:77:61:bc:8c:d8:54:0c:87:01:
                    f9:f0:8c:7f:ba:77:45:cb:44:cd:51:37:31:fe:e9:
                    a4:06:9c:2a:88:4c:2b:e2:ae:bb:ca:ed:8e:69:94:
                    16:f8:25:aa:c4:6b:7c:ad:11:d7:c7:bc:66:cd:d3:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:F7:43:E0:F8:1F:7F:FC:48:2C:8A:6E:58:B7:00:11:E8:0A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/ec8eebc2-b359-38e8-8fc3-576f554fc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019/87754807-d7dd-439f-8bea-ec0c7728d019.crl

            X509v3 Authority Key Identifier:
                keyid:58:F5:DE:94:6F:7C:AE:F4:DD:7E:0D:AA:80:58:15:1A:0F:9C:21:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/87754807-d7dd-439f-8bea-ec0c7728d019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.248.0/24
                  165.140.55.0/24
                IPv6:
                  2602:f976::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:76:45:b7:05:73:c9:7f:39:c5:0c:c7:3e:2a:2c:ab:76:
         01:21:c3:c2:14:2c:48:7b:46:da:20:19:6f:21:f3:57:c8:74:
         90:2a:46:cb:b2:eb:32:31:66:3a:cb:e7:26:46:53:a7:0f:a4:
         2e:a7:63:b7:c5:5c:d6:f5:ed:aa:3a:32:e4:ec:21:ad:0f:d1:
         7d:17:2d:30:8f:4b:3c:12:30:32:88:1e:dd:06:eb:41:53:f8:
         92:4b:12:01:7f:cf:90:32:d8:09:11:22:e3:8c:52:67:95:8b:
         b5:81:85:0a:bc:48:aa:ea:bc:05:9d:73:3b:7a:fe:51:d3:76:
         0d:e6:61:2a:4f:ba:be:83:59:ff:43:2d:51:a0:08:87:e9:13:
         dc:19:d3:42:f8:21:ab:bd:20:5c:90:d6:b2:9b:d4:e4:7c:68:
         f6:17:a7:60:4c:f5:8f:bb:e1:21:3d:b3:2c:9a:ed:d3:26:8e:
         a1:8a:22:63:6f:be:df:8b:0b:68:e7:6d:36:05:2b:2e:64:d9:
         d2:d3:a4:4e:11:f2:c9:58:a2:7b:8d:62:11:ff:38:4f:14:94:
         cc:a8:d2:82:94:f0:ed:e1:46:18:bf:1f:ad:3d:c8:2b:9f:55:
         64:f8:f3:92:52:5f:f3:64:92:6e:58:d6:14:83:cf:07:b7:f3:
         20:9e:a4:d2
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9MPT2jUYw02uGYb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc3NTQ4MDctZDdkZC00MzlmLThiZWEtZWMwYzc3Mjhk
MDE5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZTQxY2YxOTEtZTVmZS00MmFjLWE3YzAtODRkYjA4MzZkNjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HDmo5Y1NkRNRz9JfAD0FDGMMaPlnzppchb
ZQVtGhAhU72sW5ts5Ipu/1HP7PiEA5wS9cRpd2ua88s8DhG0sIyAmxhkyNvesfvJ
RTUgpe7mD3GNk5+7AV1Mdj1X0LKo/Zns3k1QSCe0m+jLHimFhBqXRL0MR9++ZQUs
tqYF3odKgb9NddX6JF/Vr0Jml3DDk8Qb0TdNTkAb8g5RUoz8t47Q3CYEMZ4Bg2V1
iCjZK7zWoCOFcUvRmuPTToXwMVROAkP3X25Y9QV3YbyM2FQMhwH58Ix/undFy0TN
UTcx/umkBpwqiEwr4q67yu2OaZQW+CWqxGt8rRHXx7xmzdPHvwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFB1x90Pg+B9//Egsim5YtwAR6ArhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Nzc1
NDgwNy1kN2RkLTQzOWYtOGJlYS1lYzBjNzcyOGQwMTkvZWM4ZWViYzItYjM1OS0z
OGU4LThmYzMtNTc2ZjU1NGZjM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODc3NTQ4MDctZDdkZC00MzlmLThi
ZWEtZWMwYzc3MjhkMDE5Lzg3NzU0ODA3LWQ3ZGQtNDM5Zi04YmVhLWVjMGM3NzI4
ZDAxOS5jcmwwHwYDVR0jBBgwFoAUWPXelG98rvTdfg2qgFgVGg+cIZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84Nzc1NDgwNy1kN2RkLTQzOWYtOGJlYS1lYzBj
NzcyOGQwMTkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6v4AwQA
pYw3MA4EAgACMAgDBgQmAvl2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgtXZFtwVzyX85xQzHPiosq3YB
IcPCFCxIe0baIBlvIfNXyHSQKkbLsusyMWY6y+cmRlOnD6Qup2O3xVzW9e2qOjLk
7CGtD9F9Fy0wj0s8EjAyiB7dButBU/iSSxIBf8+QMtgJESLjjFJnlYu1gYUKvEiq
6rwFnXM7ev5R03YN5mEqT7q+g1n/Qy1RoAiH6RPcGdNC+CGrvSBckNaym9TkfGj2
F6dgTPWPu+EhPbMsmu3TJo6hiiJjb77fiwto5202BSsuZNnS06ROEfLJWKJ7jWIR
/zhPFJTMqNKClPDt4UYYvx+tPcgrn1Vk+POSUl/zZJJuWNYUg88Ht/MgnqTS
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:28:18 2026 by rpki-client