Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa
File:                     70832e38-c84d-3a35-8dba-711ac64c0596.roa (raw, json)
Hash identifier:          EH0sm1izeXLJgz2XApJaQx6PuUPTq9WJrAAJovwf9xA=
Subject key identifier:   98:0B:F6:00:C2:A9:70:B7:B2:A3:5B:3D:18:A1:9A:9E:9E:3D:E0:45
Certificate issuer:       /CN=817b315d-32a3-4ee9-ba5d-557007a627ae
Certificate serial:       010D0C9F4328584ED001F0FCF1D2112B846D1380
Authority key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     62836
IP address blocks:        23.129.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f0:fc:f1:d2:11:2b:84:6d:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817b315d-32a3-4ee9-ba5d-557007a627ae
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=b58641c8-4f24-4cdf-8f65-820f06145fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:e8:bb:66:7c:fb:70:20:73:64:a6:1e:3a:
                    ea:70:06:c7:ba:7d:06:7d:9b:d1:0e:8a:3c:bc:c5:
                    2a:b3:36:f2:52:39:dc:72:97:7f:56:c6:79:77:32:
                    0a:87:66:09:d1:a6:35:ca:e2:ae:a0:e2:19:70:b5:
                    3c:a0:15:c4:0a:78:d6:cc:20:ad:5e:af:d5:05:60:
                    a9:41:15:55:1f:ed:97:e9:a2:a1:a6:5d:ed:4f:61:
                    8a:3b:01:d0:fe:1b:53:4d:da:0e:67:5c:fe:77:bb:
                    88:47:65:45:7b:a1:af:e6:e4:52:f4:6a:d6:d9:9f:
                    15:ac:30:bd:23:18:e4:fd:ae:3f:69:27:0f:0f:55:
                    51:44:09:8f:81:25:50:62:71:be:18:0a:2c:86:a4:
                    3c:6b:47:70:d4:7b:22:c3:a0:3f:f1:57:b4:6e:fb:
                    b5:70:18:6b:4b:6f:99:0d:02:af:3a:9f:aa:47:0d:
                    1b:2f:20:48:f0:a2:1a:e3:3a:67:6a:41:43:ba:6e:
                    67:c3:5e:52:9e:23:05:b5:54:ad:b5:71:f3:66:d3:
                    e2:71:28:5a:2b:14:ef:88:e2:0c:88:34:0d:bd:03:
                    ec:b5:ab:1c:9c:cb:0b:89:7f:fa:6d:b4:bf:27:ef:
                    49:ed:a4:cb:bc:88:9b:aa:91:ef:f1:c3:a5:4e:11:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0B:F6:00:C2:A9:70:B7:B2:A3:5B:3D:18:A1:9A:9E:9E:3D:E0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/70832e38-c84d-3a35-8dba-711ac64c0596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:31:a6:41:0d:c0:41:b6:8b:44:77:81:10:6e:22:4d:76:
         db:06:90:d5:7b:f2:e6:c3:83:81:d1:e6:23:a1:9a:2b:4a:71:
         e1:39:15:de:33:e7:ba:10:db:2e:18:d5:c9:b9:53:b5:ea:c9:
         b1:31:53:74:b1:71:1c:ea:48:ff:56:2e:bc:67:ca:60:6d:0d:
         ff:a8:c8:80:3d:32:15:f4:24:db:50:9c:6c:2b:63:e7:ef:c2:
         95:24:73:4c:8b:36:89:4c:82:18:d0:3e:1c:1b:ab:3b:fa:49:
         af:e2:a8:49:1e:59:bb:86:8e:65:0a:b6:fe:35:fd:ba:d4:df:
         dc:9c:f4:df:a9:05:f5:66:5e:76:ff:b7:64:70:74:fb:59:ef:
         4a:14:ad:0e:29:df:15:51:0f:a8:e5:89:08:88:8c:d6:d4:43:
         03:c0:d8:b8:34:fd:9f:45:e9:bd:5b:7f:e1:dc:51:da:c3:73:
         95:8c:a6:d0:21:67:2d:a8:87:a3:80:af:60:1d:75:33:e0:d2:
         24:de:ab:d9:68:4e:0b:5e:5a:bf:62:5b:ea:f4:92:0c:f3:e7:
         13:07:dc:dd:7b:28:f6:26:ee:21:44:0a:d8:6b:de:d9:98:ff:
         9b:c1:41:4b:c4:b2:1a:f4:14:c9:f0:9a:fc:c5:f1:df:10:75:
         89:2a:29:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfD88dIRK4RtE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODE3YjMxNWQtMzJhMy00ZWU5LWJhNWQtNTU3MDA3YTYy
N2FlMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
YjU4NjQxYzgtNGYyNC00Y2RmLThmNjUtODIwZjA2MTQ1ZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcrou2Z8+3Agc2SmHjrqcAbHun0GfZvRDoo8
vMUqszbyUjnccpd/VsZ5dzIKh2YJ0aY1yuKuoOIZcLU8oBXECnjWzCCtXq/VBWCp
QRVVH+2X6aKhpl3tT2GKOwHQ/htTTdoOZ1z+d7uIR2VFe6Gv5uRS9GrW2Z8VrDC9
Ixjk/a4/aScPD1VRRAmPgSVQYnG+GAoshqQ8a0dw1Hsiw6A/8Ve0bvu1cBhrS2+Z
DQKvOp+qRw0bLyBI8KIa4zpnakFDum5nw15SniMFtVSttXHzZtPicShaKxTviOIM
iDQNvQPstascnMsLiX/6bbS/J+9J7aTLvIibqpHv8cOlThESNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgL9gDCqXC3sqNbPRihmp6ePeBFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84MTdi
MzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdhNjI3YWUvNzA4MzJlMzgtYzg0ZC0z
YTM1LThkYmEtNzExYWM2NGMwNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODE3YjMxNWQtMzJhMy00ZWU5LWJh
NWQtNTU3MDA3YTYyN2FlLzgxN2IzMTVkLTMyYTMtNGVlOS1iYTVkLTU1NzAwN2E2
MjdhZS5jcmwwHwYDVR0jBBgwFoAU+l9VLXbjSPrrqZEqBBSqVyQ3WFEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcw
MDdhNjI3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4F8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFP3MaZBDcBBtotEd4EQbiJNdtsGkNV78ubDg4HR5iOhmitKceE5Fd4z
57oQ2y4Y1cm5U7XqybExU3SxcRzqSP9WLrxnymBtDf+oyIA9MhX0JNtQnGwrY+fv
wpUkc0yLNolMghjQPhwbqzv6Sa/iqEkeWbuGjmUKtv41/brU39yc9N+pBfVmXnb/
t2RwdPtZ70oUrQ4p3xVRD6jliQiIjNbUQwPA2Lg0/Z9F6b1bf+HcUdrDc5WMptAh
Zy2oh6OAr2AddTPg0iTeq9loTgteWr9iW+r0kgzz5xMH3N17KPYm7iFECthr3tmY
/5vBQUvEshr0FMnwmvzF8d8QdYkqKec=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:12:34 2026 by rpki-client