Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
File:                     c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json)
Hash identifier:          TCYmSt4/lZ8e0pIh5mBwoXTue2pmC11+fQq98hXlsXU=
Subject key identifier:   C1:71:5C:D9:EC:F5:57:CD:D7:B1:93:6E:3C:47:89:98:8D:75:DF:BB
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584D04E235FF2BC92B72D7EC9C00
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     11611
IP address blocks:        23.158.112.0/24 maxlen: 24
                          2602:fd61::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:35:ff:2b:c9:2b:72:d7:ec:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=da3a7ce9-64a2-48e6-9215-9479c2307e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:62:d0:3c:60:81:16:07:7b:a1:62:f9:b1:
                    fb:fa:13:6c:34:a5:56:f6:ba:82:0f:12:ef:77:d7:
                    c9:cf:e8:c3:70:87:6e:a4:4a:42:01:6b:b9:85:42:
                    b6:93:91:6c:91:e8:03:23:3d:8a:07:02:9e:7d:ce:
                    de:b5:d4:ab:6d:9c:e7:88:ba:e8:fb:d4:69:a9:e0:
                    5e:22:17:d5:23:b8:23:93:87:d8:3d:4d:f2:33:a0:
                    47:3f:b0:13:7b:e8:91:b5:93:fe:36:fc:c5:e6:76:
                    93:ac:7c:3c:bc:a6:b4:9b:af:45:26:a5:3f:54:6c:
                    8c:bd:30:38:0e:a6:2d:55:94:4a:04:62:04:75:89:
                    15:c4:71:e4:71:98:84:a9:50:a1:c1:54:30:92:69:
                    d0:61:49:98:bb:49:36:9e:11:fe:e3:b0:df:71:d8:
                    55:b8:67:8d:39:1a:66:56:ee:af:b5:e2:87:be:a4:
                    da:21:64:50:03:ae:0d:71:09:f5:35:85:5c:80:60:
                    ab:75:de:d0:57:2d:07:fe:2e:94:d5:23:16:96:78:
                    d5:b7:cc:ad:73:cb:2d:14:14:c8:cb:15:ce:1d:d3:
                    2a:5d:d1:6c:51:68:73:ca:51:64:a1:90:36:1a:b9:
                    0d:b9:10:b3:14:da:79:a6:b4:7d:1d:70:77:8c:15:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:5C:D9:EC:F5:57:CD:D7:B1:93:6E:3C:47:89:98:8D:75:DF:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.112.0/24
                IPv6:
                  2602:fd61::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:24:3f:9a:53:ed:be:94:cc:be:6d:54:64:70:4f:82:32:
         65:53:01:1b:1f:10:eb:ef:0e:1c:a6:2b:ed:d4:39:13:21:d2:
         19:2a:fc:8d:0e:2f:9b:04:b2:50:5f:82:07:37:55:12:cc:c5:
         d6:43:fd:60:8c:b2:ea:d7:8e:94:82:9d:26:49:63:20:9f:bf:
         f3:73:e7:2d:25:5d:14:09:c3:f4:dc:a6:15:df:57:71:86:58:
         6c:42:01:a4:b6:f6:1b:5e:29:c3:46:3c:a9:4d:f1:15:f1:aa:
         81:12:4f:2e:68:d3:fe:1e:df:54:be:ac:e8:42:c9:bd:90:c3:
         91:71:df:9f:9d:00:78:4c:e7:ff:e8:1a:d6:14:72:3a:78:83:
         dd:27:09:6d:38:74:a3:54:fa:cb:06:b8:f9:1e:29:b2:d4:39:
         c7:99:19:5b:8b:be:fe:2e:d8:6c:08:a2:c2:e4:d1:18:5f:7a:
         3e:13:ca:7f:90:89:ee:3b:8b:7c:32:cd:7c:c6:f4:51:97:00:
         04:e3:b0:ff:fa:71:e6:e2:d8:48:a4:1b:fb:58:02:24:e7:8e:
         cd:f5:b9:73:91:cb:c4:cf:00:aa:59:82:e9:06:c4:c7:77:07:
         81:5b:c6:03:16:23:a0:d9:d4:ff:5c:b8:7f:38:73:bc:fe:ca:
         ea:ab:0c:9b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0E4jX/K8krctfsnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBiMWI2MmUtOWFiYS00NzMzLTlkOTYtOWI3YzU5ZGQ5
NTY5MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZGEzYTdjZTktNjRhMi00OGU2LTkyMTUtOTQ3OWMyMzA3ZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX1i0DxggRYHe6Fi+bH7+hNsNKVW9rqCDxLv
d9fJz+jDcIdupEpCAWu5hUK2k5FskegDIz2KBwKefc7etdSrbZzniLro+9RpqeBe
IhfVI7gjk4fYPU3yM6BHP7ATe+iRtZP+NvzF5naTrHw8vKa0m69FJqU/VGyMvTA4
DqYtVZRKBGIEdYkVxHHkcZiEqVChwVQwkmnQYUmYu0k2nhH+47DfcdhVuGeNORpm
Vu6vteKHvqTaIWRQA64NcQn1NYVcgGCrdd7QVy0H/i6U1SMWlnjVt8ytc8stFBTI
yxXOHdMqXdFsUWhzylFkoZA2GrkNuRCzFNp5prR9HXB3jBVhFQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFMFxXNns9VfN17GTbjxHiZiNdd+7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMGIx
YjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlkZDk1NjkvYzAwZWYxNTUtODVjNC0z
NmZhLTk4YjEtZTEyZmU5NjI1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzBiMWI2MmUtOWFiYS00NzMzLTlk
OTYtOWI3YzU5ZGQ5NTY5L2MwYjFiNjJlLTlhYmEtNDczMy05ZDk2LTliN2M1OWRk
OTU2OS5jcmwwHwYDVR0jBBgwFoAU2IOrpvrW+CVSJ/cFIGamIHys7YMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05Yjdj
NTlkZDk1NjkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF55wMA0E
AgACMAcDBQAmAv1hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACjoJD+aU+2+lMy+bVRkcE+CMmVTARsfEOvv
DhymK+3UORMh0hkq/I0OL5sEslBfggc3VRLMxdZD/WCMsurXjpSCnSZJYyCfv/Nz
5y0lXRQJw/TcphXfV3GGWGxCAaS29hteKcNGPKlN8RXxqoESTy5o0/4e31S+rOhC
yb2Qw5Fx35+dAHhM5//oGtYUcjp4g90nCW04dKNU+ssGuPkeKbLUOceZGVuLvv4u
2GwIosLk0Rhfej4Tyn+Qie47i3wyzXzG9FGXAATjsP/6cebi2EikG/tYAiTnjs31
uXORy8TPAKpZgukGxMd3B4FbxgMWI6DZ1P9cuH84c7z+yuqrDJs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:41 2026 by rpki-client