Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa
File:                     adaee9a8-3fae-398f-8a75-f2925243deb0.roa (raw, json)
Hash identifier:          sJ9AN2sseARvDQ0iCOCxboBgO8SSFirxB5suxKgyUg4=
Subject key identifier:   75:00:6B:34:23:C2:87:A5:7A:B2:14:37:40:E8:C5:57:E3:01:34:3E
Certificate issuer:       /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
Certificate serial:       010D0C9F4328584CDF323F2231F7E6529FDBAA40
Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     401561
IP address blocks:        23.133.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:3f:22:31:f7:e6:52:9f:db:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=36fbd737-5ef1-4e92-8387-9212189b7a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:f4:53:1e:ae:f1:de:66:83:fc:79:c8:b1:
                    dd:c1:5e:e8:6d:d4:38:07:7a:8f:5f:38:47:de:b7:
                    9e:ff:cb:83:46:e1:bc:52:9c:72:91:94:c6:33:06:
                    02:22:ec:f1:ce:e9:0f:7a:d8:b2:5f:ab:b3:5b:4f:
                    6a:a5:29:e7:ff:72:89:cc:5c:9e:41:3a:0f:55:57:
                    09:a5:02:b8:40:20:40:c0:bc:c3:b9:1a:77:6c:ad:
                    e3:b5:62:e7:25:69:66:e6:90:18:2c:05:65:e6:d3:
                    d8:ff:d6:3a:14:f7:e7:ef:11:d8:fd:cd:e0:1f:48:
                    bc:7b:c1:52:f8:20:8b:11:ed:7e:92:00:ed:2a:27:
                    41:85:b5:74:17:eb:95:b2:5f:48:12:03:8e:10:ad:
                    6e:0a:5d:0f:63:38:f0:c3:dc:ac:d8:b6:42:00:d5:
                    5f:c8:dd:00:46:bb:82:42:17:68:9f:c7:70:67:22:
                    01:05:38:b1:7b:89:ac:ae:d7:4e:7e:57:a4:1d:82:
                    1f:2e:02:ad:60:c8:cb:c5:32:f2:1b:e2:74:76:fc:
                    07:f2:4b:17:0a:98:03:54:8b:da:98:60:cc:0a:c0:
                    d2:b9:13:70:ba:01:d3:fe:61:4e:81:16:b7:ab:40:
                    c6:1a:43:b0:81:43:38:98:8d:42:e2:cb:7f:c6:2a:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:6B:34:23:C2:87:A5:7A:B2:14:37:40:E8:C5:57:E3:01:34:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl

            X509v3 Authority Key Identifier:
                keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:46:58:69:cd:ed:79:49:9b:1c:0b:9c:bc:6a:44:3e:ec:38:
         c6:ba:4c:1d:48:36:dd:f1:63:4a:0d:ef:dc:72:f5:6a:ee:49:
         d4:87:35:5a:4c:88:1a:14:f5:3b:c1:af:2e:aa:72:f4:d1:b5:
         46:f8:41:bc:88:a4:6e:24:80:27:ae:1a:72:2e:7b:4d:24:6d:
         c9:db:7e:24:e0:67:b2:9a:9b:a8:3c:0a:65:03:dd:6a:53:a8:
         4d:6c:6d:2b:cc:01:1a:bc:c4:75:30:57:a9:0d:51:b2:eb:4c:
         77:e7:e8:35:60:71:a4:6a:08:b3:65:b0:1e:bc:17:e7:1b:79:
         4d:8e:cb:9e:6d:6c:63:a1:2a:3a:3c:a3:5c:b4:66:c6:10:af:
         73:e3:1f:6f:96:ff:4a:22:dd:1e:46:9c:14:e2:cd:23:f1:8a:
         f2:12:62:ea:c6:04:89:46:88:ab:52:d9:8b:1e:11:a2:c5:27:
         3c:22:f4:e9:a9:04:ac:6b:df:a7:4e:77:36:a4:b8:6c:2a:9a:
         3f:f9:ec:57:d4:33:b6:ad:c1:0c:c5:14:d9:a0:a8:0d:7c:e4:
         68:50:3b:a2:34:fa:12:84:1c:2f:28:d6:92:5c:a1:05:d9:03:
         bf:f0:63:66:c6:95:43:56:ad:3d:fe:23:0e:87:bb:3c:5c:fe:
         5a:4a:be:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMj8iMffmUp/bqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZkZDc0ZTYtN2U2NS00MmQ0LWE0OWEtMDdlMGNjMThj
MWVmMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
MzZmYmQ3MzctNWVmMS00ZTkyLTgzODctOTIxMjE4OWI3YTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrr0Ux6u8d5mg/x5yLHdwV7obdQ4B3qPXzhH
3ree/8uDRuG8UpxykZTGMwYCIuzxzukPetiyX6uzW09qpSnn/3KJzFyeQToPVVcJ
pQK4QCBAwLzDuRp3bK3jtWLnJWlm5pAYLAVl5tPY/9Y6FPfn7xHY/c3gH0i8e8FS
+CCLEe1+kgDtKidBhbV0F+uVsl9IEgOOEK1uCl0PYzjww9ys2LZCANVfyN0ARruC
Qhdon8dwZyIBBTixe4msrtdOflekHYIfLgKtYMjLxTLyG+J0dvwH8ksXCpgDVIva
mGDMCsDSuRNwugHT/mFOgRa3q0DGGkOwgUM4mI1C4st/xipfzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUAazQjwoelerIUN0DoxVfjATQ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNmRk
NzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2UwY2MxOGMxZWYvYWRhZWU5YTgtM2ZhZS0z
OThmLThhNzUtZjI5MjUyNDNkZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDZkZDc0ZTYtN2U2NS00MmQ0LWE0
OWEtMDdlMGNjMThjMWVmLzA2ZGQ3NGU2LTdlNjUtNDJkNC1hNDlhLTA3ZTBjYzE4
YzFlZi5jcmwwHwYDVR0jBBgwFoAUYi13yGYulJlhcXxC8kNoQfFqT1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNmRkNzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2Uw
Y2MxOGMxZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNGWGnN7XlJmxwLnLxqRD7sOMa6TB1INt3xY0oN79xy9WruSdSHNVpM
iBoU9TvBry6qcvTRtUb4QbyIpG4kgCeuGnIue00kbcnbfiTgZ7Kam6g8CmUD3WpT
qE1sbSvMARq8xHUwV6kNUbLrTHfn6DVgcaRqCLNlsB68F+cbeU2Oy55tbGOhKjo8
o1y0ZsYQr3PjH2+W/0oi3R5GnBTizSPxivISYurGBIlGiKtS2YseEaLFJzwi9Omp
BKxr36dOdzakuGwqmj/57FfUM7atwQzFFNmgqA185GhQO6I0+hKEHC8o1pJcoQXZ
A7/wY2bGlUNWrT3+Iw6Huzxc/lpKvhk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:13 2026 by rpki-client