Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa
File:                     1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (raw, json)
Hash identifier:          G6s1HefRqhaMS8Bhcvb7hPzwvT17aN5PcCe9y9z05QA=
Subject key identifier:   1B:1E:B7:3B:8A:77:45:3F:6F:75:9A:2E:54:5A:A2:8A:8E:B5:71:60
Certificate issuer:       /CN=2da4b7dc-6e43-4290-86d6-84e81139f164
Certificate serial:       010D0C9F4328584D04E244A4DA40630CD7FBCDC0
Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     399861
IP address blocks:        23.130.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:44:a4:da:40:63:0c:d7:fb:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=93413ca0-9e3b-4a2c-83a5-a50ae0735366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:e4:63:af:b0:4f:29:27:02:29:e7:49:85:
                    72:e4:8c:ba:5c:88:83:1b:e2:82:b0:09:92:17:b5:
                    aa:22:eb:d9:fc:ba:0d:5b:b5:60:d4:f3:d8:16:90:
                    3e:c9:68:84:ca:75:23:2f:19:93:10:98:5b:a4:2a:
                    45:46:b2:0e:ef:63:04:99:21:83:0a:da:90:15:06:
                    0e:26:e2:fb:95:de:31:a7:12:9e:a5:b9:e8:41:2c:
                    a7:32:f7:a8:5e:e8:bd:8c:0a:c5:c4:00:e3:58:94:
                    05:3a:54:94:25:a8:23:9a:d5:2d:1f:88:c7:b3:4e:
                    b5:e4:74:3d:56:23:8a:fc:dd:97:ad:a8:c7:18:39:
                    23:3d:88:39:c8:8a:c8:3b:ce:ee:c8:fb:c6:4b:9d:
                    e5:ce:77:d5:e8:8f:cb:a5:d0:ae:c5:9e:93:15:19:
                    36:8b:d0:82:8e:6b:c5:4b:7d:08:98:02:11:1b:d9:
                    15:c8:1f:cb:1c:9c:6b:6b:34:c2:4f:0b:8e:86:2e:
                    0f:63:54:b8:e6:68:06:47:54:88:1f:27:ab:75:64:
                    b5:0a:ac:2d:7a:71:dc:8d:cd:25:0f:ef:33:42:28:
                    f5:d1:2d:b4:3f:db:2a:86:43:c3:e8:e5:4b:d3:92:
                    df:5f:f6:d7:4d:04:c4:3d:1a:d0:00:32:ac:7a:67:
                    da:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:B7:3B:8A:77:45:3F:6F:75:9A:2E:54:5A:A2:8A:8E:B5:71:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl

            X509v3 Authority Key Identifier:
                keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:17:b0:c8:87:62:0d:e5:57:cb:a3:51:c8:bf:60:2b:f4:af:
         bf:33:ee:03:0d:1a:bb:b1:f7:b6:c3:5a:9a:13:5b:15:f9:8b:
         a8:03:d4:b9:53:1c:d8:f5:5e:49:bc:3b:09:62:a1:32:ac:ce:
         7d:45:be:2d:cd:07:27:68:55:4b:1f:a4:a8:be:d6:77:a5:2d:
         36:02:8f:b1:63:f4:e8:d6:5e:f8:54:99:8b:75:17:cf:d0:3a:
         2b:5d:f0:22:4f:d0:c3:6f:8b:17:b6:28:71:f1:7e:59:34:ba:
         e6:a6:52:e6:54:05:27:4f:ce:d3:61:60:fc:f2:4c:e7:07:3a:
         d0:03:42:3a:ae:ec:ba:3d:ea:38:74:e4:0c:6c:21:e0:b5:76:
         e8:83:4d:7b:9a:62:df:aa:b4:da:16:6e:7f:cd:36:96:db:4e:
         bf:f1:29:68:2d:12:1f:3e:78:ca:3c:fe:b6:ec:1d:f5:33:38:
         4c:aa:66:3b:69:00:6d:62:3e:97:24:f9:d7:0b:72:0a:7f:93:
         7a:bc:79:f0:75:b5:9e:b3:26:09:16:6a:25:95:be:71:04:13:
         50:9f:fc:3b:34:15:75:6d:b2:63:1d:ca:f7:10:63:65:5a:30:
         68:7b:e8:7e:d2:26:76:89:70:fc:2b:c0:06:1d:75:ae:16:15:
         0e:09:cb:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kSk2kBjDNf7zcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm
MTY0MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk
OTM0MTNjYTAtOWUzYi00YTJjLTgzYTUtYTUwYWUwNzM1MzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZHkY6+wTyknAinnSYVy5Iy6XIiDG+KCsAmS
F7WqIuvZ/LoNW7Vg1PPYFpA+yWiEynUjLxmTEJhbpCpFRrIO72MEmSGDCtqQFQYO
JuL7ld4xpxKepbnoQSynMveoXui9jArFxADjWJQFOlSUJagjmtUtH4jHs0615HQ9
ViOK/N2XrajHGDkjPYg5yIrIO87uyPvGS53lznfV6I/LpdCuxZ6TFRk2i9CCjmvF
S30ImAIRG9kVyB/LHJxrazTCTwuOhi4PY1S45mgGR1SIHyerdWS1CqwtenHcjc0l
D+8zQij10S20P9sqhkPD6OVL05LfX/bXTQTEPRrQADKsemfaQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsetzuKd0U/b3WaLlRaooqOtXFgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0
YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMWJiMTUyOWYtN2Y0NC0z
MDRjLWFmNGUtYjBjM2Q4ZDBlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2
ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5
ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4
MTEzOWYxNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4LsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0XsMiHYg3lV8ujUci/YCv0r78z7gMNGrux97bDWpoTWxX5i6gD1LlT
HNj1Xkm8OwlioTKszn1Fvi3NBydoVUsfpKi+1nelLTYCj7Fj9OjWXvhUmYt1F8/Q
Oitd8CJP0MNvixe2KHHxflk0uuamUuZUBSdPztNhYPzyTOcHOtADQjqu7Lo96jh0
5AxsIeC1duiDTXuaYt+qtNoWbn/NNpbbTr/xKWgtEh8+eMo8/rbsHfUzOEyqZjtp
AG1iPpck+dcLcgp/k3q8efB1tZ6zJgkWaiWVvnEEE1Cf/Ds0FXVtsmMdyvcQY2Va
MGh76H7SJnaJcPwrwAYdda4WFQ4Jy3k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:17 2026 by rpki-client