Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
File:                     d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa (raw, json)
Hash identifier:          u703rz82ahOdeilMcCOD8ZkDAypJ8LXXj64wnCv0hEM=
Subject key identifier:   7B:13:B3:4F:47:C9:7F:56:FA:18:C5:49:1E:C5:90:B1:39:2D:0D:69
Certificate issuer:       /CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
Certificate serial:       010D0C9F4328584CEBC22A862B61602440473F80
Authority key identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     399861
IP address blocks:        23.131.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2a:86:2b:61:60:24:40:47:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=cabf23bf-e43b-446e-9d89-c61f0dfd7996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:cc:c2:0b:44:68:4a:a6:df:35:72:85:7c:
                    91:62:5f:3c:44:9c:31:2f:60:71:80:57:9e:13:c2:
                    42:12:39:85:8b:5d:7b:78:26:d0:cf:20:97:24:76:
                    49:8e:4b:09:46:74:90:46:3b:af:96:eb:92:dd:b4:
                    ac:30:61:8e:5a:e0:15:7c:71:82:f2:b1:85:a9:1f:
                    4c:da:10:72:0b:d8:c5:73:35:37:f3:83:ff:f8:7d:
                    56:9c:7b:86:0e:6b:14:bf:e6:0e:37:53:51:2c:ec:
                    c1:bb:5b:3f:16:9a:84:f2:b0:06:23:f1:6f:35:e2:
                    16:53:d2:65:c2:0c:b1:57:4d:00:d9:ea:80:10:a9:
                    e9:f1:a9:75:83:2a:fc:b9:53:f1:00:7a:1d:09:62:
                    f1:00:6d:18:fd:1a:d0:3c:97:b9:74:01:12:90:63:
                    01:fe:1c:66:3c:08:65:e7:ff:71:e8:12:e5:b3:48:
                    65:ff:02:cd:c0:2b:96:65:0a:6b:9f:7a:4a:92:14:
                    b9:c7:33:6a:31:9b:96:dc:9f:7a:dd:8b:c9:32:d9:
                    9f:e5:91:59:70:74:c2:d7:14:3c:92:53:89:c6:05:
                    46:f3:11:40:c9:fc:ce:14:6a:1f:f7:1a:cf:e0:bf:
                    37:0b:1d:86:d8:18:3c:12:b0:f2:81:c9:ab:17:b0:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:B3:4F:47:C9:7F:56:FA:18:C5:49:1E:C5:90:B1:39:2D:0D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl

            X509v3 Authority Key Identifier:
                keyid:81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:fc:dd:cd:ed:b2:bc:d2:fd:86:1c:c2:a6:e7:dd:b8:82:65:
         48:a6:7d:ba:6f:5d:ba:c4:ad:a0:a6:61:e6:cf:5e:44:ba:6e:
         f1:e2:2e:e6:8d:ad:8f:ec:41:ec:f3:7f:cc:0b:79:02:ec:39:
         99:74:88:be:a4:50:7e:fc:71:6f:c6:0d:d0:4b:4b:7f:21:5b:
         82:00:14:73:ae:f5:fa:3b:ab:29:86:bb:5f:05:1c:97:2f:c9:
         27:07:1a:b7:18:f4:b8:4d:cb:27:e4:ec:63:21:bd:e0:58:3c:
         4b:7c:82:a9:17:30:5e:d2:45:a6:e2:0f:a2:be:33:15:7c:95:
         51:e6:b8:1c:69:df:0b:07:05:77:ae:2d:11:23:d9:84:80:da:
         cc:39:12:63:b5:50:60:7c:34:83:40:4d:08:80:8e:11:dd:b0:
         1c:bd:1d:bd:a4:9d:bf:0d:b5:09:71:de:ba:7c:ee:6a:da:e4:
         e9:66:ea:c1:fe:3f:7b:ac:d5:18:b2:f4:01:7e:5b:46:2c:9c:
         81:70:f1:ac:e2:c5:7b:eb:35:fd:ab:30:9e:f1:89:8c:e1:ea:
         70:3e:fe:c8:6d:5c:c5:13:1e:2d:12:c9:f8:0f:34:f5:6e:32:
         d9:0e:ab:14:fe:9e:f3:69:bb:3c:36:dd:85:0e:36:d6:81:46:
         e7:1f:86:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwiqGK2FgJEBHP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFmZjRkZGQtYzM4ZC00MzA5LThmNGQtOTU0NDFkYzc2
NWY1MB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
Y2FiZjIzYmYtZTQzYi00NDZlLTlkODktYzYxZjBkZmQ3OTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphjMwgtEaEqm3zVyhXyRYl88RJwxL2BxgFee
E8JCEjmFi117eCbQzyCXJHZJjksJRnSQRjuvluuS3bSsMGGOWuAVfHGC8rGFqR9M
2hByC9jFczU384P/+H1WnHuGDmsUv+YON1NRLOzBu1s/FpqE8rAGI/FvNeIWU9Jl
wgyxV00A2eqAEKnp8al1gyr8uVPxAHodCWLxAG0Y/RrQPJe5dAESkGMB/hxmPAhl
5/9x6BLls0hl/wLNwCuWZQprn3pKkhS5xzNqMZuW3J963YvJMtmf5ZFZcHTC1xQ8
klOJxgVG8xFAyfzOFGof9xrP4L83Cx2G2Bg8ErDygcmrF7CHLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsTs09HyX9W+hjFSR7FkLE5LQ1pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MWZm
NGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0MWRjNzY1ZjUvZDZjYTBjZDAtMWNjNS0z
OGEwLWI0ZTktYjM5NjAxMmZmODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTFmZjRkZGQtYzM4ZC00MzA5LThm
NGQtOTU0NDFkYzc2NWY1LzUxZmY0ZGRkLWMzOGQtNDMwOS04ZjRkLTk1NDQxZGM3
NjVmNS5jcmwwHwYDVR0jBBgwFoAUgc7qDF0dx6RiENY5kzewxCmYLI0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81MWZmNGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0
MWRjNzY1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4P0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJj83c3tsrzS/YYcwqbn3biCZUimfbpvXbrEraCmYebPXkS6bvHiLuaN
rY/sQezzf8wLeQLsOZl0iL6kUH78cW/GDdBLS38hW4IAFHOu9fo7qymGu18FHJcv
yScHGrcY9LhNyyfk7GMhveBYPEt8gqkXMF7SRabiD6K+MxV8lVHmuBxp3wsHBXeu
LREj2YSA2sw5EmO1UGB8NINATQiAjhHdsBy9Hb2knb8NtQlx3rp87mra5Olm6sH+
P3us1Riy9AF+W0YsnIFw8azixXvrNf2rMJ7xiYzh6nA+/shtXMUTHi0SyfgPNPVu
MtkOqxT+nvNpuzw23YUONtaBRucfhkM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:58 2026 by rpki-client