Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/64a51f52-0065-3b7c-a3d7-4498d016803e.roa
File:                     64a51f52-0065-3b7c-a3d7-4498d016803e.roa (raw, json)
Hash identifier:          /LV2uVCcpgWrtjk+02XewYP02iisPC/3CVNnLn2Nw+Y=
Subject key identifier:   1C:93:B2:26:31:3B:99:30:21:FF:13:94:94:B4:D1:34:AA:FF:5A:91
Certificate issuer:       /CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
Certificate serial:       010D0C9F4328584C9106E5149DC4C394D4986F00
Authority key identifier: 79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/64a51f52-0065-3b7c-a3d7-4498d016803e.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     19779
IP address blocks:        23.135.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:91:06:e5:14:9d:c4:c3:94:d4:98:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=068a8c48-3497-4fc2-be71-22c78bd72941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:99:cc:37:8c:34:f6:c1:f9:2b:c7:66:17:
                    9b:98:5a:5c:ed:57:54:c9:a0:b1:19:52:0a:7c:d9:
                    8b:1c:63:96:92:6a:0c:17:e0:cc:85:02:9b:ff:8b:
                    47:d7:b0:53:9d:ab:15:6c:d5:72:6b:5d:0c:ff:9d:
                    6a:ce:25:8f:a6:ae:c6:8c:8a:ab:86:e3:4c:7e:f9:
                    79:6d:d0:ee:6d:2a:25:28:c7:c9:ad:00:28:50:7d:
                    1c:0e:26:fe:93:15:6a:30:8a:d7:ff:93:96:23:32:
                    7c:98:2f:4b:57:96:e4:a6:fa:35:1b:96:55:6f:38:
                    c3:b5:02:a8:12:63:61:94:fd:8f:4f:68:cb:34:6a:
                    ab:84:22:9b:e1:a9:83:a8:2d:70:c8:17:58:06:05:
                    9f:08:16:f2:85:5c:2a:3e:0b:4b:57:f4:7d:21:b1:
                    fb:df:2a:be:67:77:c5:cb:f0:c7:8f:a8:59:d3:6f:
                    90:d0:95:e9:be:92:04:c0:10:42:3e:7d:11:fd:bc:
                    9c:ca:e2:33:5e:56:86:0d:96:37:e5:b8:97:7f:e6:
                    3a:5a:af:dd:a8:41:20:ea:a4:a5:b3:25:c1:d7:66:
                    5d:cb:48:50:98:d2:ef:d3:5b:7a:8b:fe:33:02:c6:
                    d2:73:0f:cd:44:34:5c:28:76:9c:e6:7e:65:8a:7e:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:93:B2:26:31:3B:99:30:21:FF:13:94:94:B4:D1:34:AA:FF:5A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/64a51f52-0065-3b7c-a3d7-4498d016803e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl

            X509v3 Authority Key Identifier:
                keyid:79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f8:91:a0:10:74:8f:0b:06:fb:d7:6c:1e:10:a9:84:93:c9:
         a9:17:9a:2d:c0:10:12:35:d4:82:14:02:eb:c0:bc:85:dd:c6:
         27:db:1d:e5:e0:2f:c9:d9:f2:da:34:ba:07:8e:6d:9d:89:3d:
         1f:48:f3:fb:92:2d:05:f3:05:af:29:b0:1d:61:19:dc:47:4c:
         42:5b:8c:23:03:63:eb:35:72:cc:08:01:6f:bc:bb:3a:07:32:
         e8:09:a7:0d:7d:23:aa:62:5b:ed:f9:a6:eb:44:b7:6b:36:b9:
         a4:19:f7:1f:8b:50:fd:36:0e:fd:29:61:d7:85:40:ac:b8:eb:
         c3:8e:76:08:c6:47:f8:5e:7e:a5:17:33:61:eb:4e:5b:14:77:
         e8:d2:38:b2:3f:4f:96:36:c5:d5:4d:37:70:88:95:a4:b4:9f:
         2a:aa:3c:2f:13:a7:af:66:c0:27:b3:48:b2:da:ba:3e:71:35:
         4e:32:f7:db:3a:7c:07:ae:82:29:09:26:bc:82:22:b5:75:22:
         a1:4d:a1:01:5d:ab:d1:62:ce:70:8e:f9:43:6f:99:a0:fc:ee:
         ed:b9:1f:4b:28:93:a7:0e:83:0f:0c:1c:b8:e9:ae:06:82:9f:
         8e:8c:47:0c:d2:fd:da:1e:1f:99:d9:c3:be:48:b8:69:35:74:
         1f:72:5a:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyRBuUUncTDlNSYbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1YzE1ODEtN2ZhOS00ZTAzLTliOGEtYjEwMzM2NTQ0
NjVmMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk
MDY4YThjNDgtMzQ5Ny00ZmMyLWJlNzEtMjJjNzhiZDcyOTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZmZzDeMNPbB+SvHZhebmFpc7VdUyaCxGVIK
fNmLHGOWkmoMF+DMhQKb/4tH17BTnasVbNVya10M/51qziWPpq7GjIqrhuNMfvl5
bdDubSolKMfJrQAoUH0cDib+kxVqMIrX/5OWIzJ8mC9LV5bkpvo1G5ZVbzjDtQKo
EmNhlP2PT2jLNGqrhCKb4amDqC1wyBdYBgWfCBbyhVwqPgtLV/R9IbH73yq+Z3fF
y/DHj6hZ02+Q0JXpvpIEwBBCPn0R/bycyuIzXlaGDZY35biXf+Y6Wq/dqEEg6qSl
syXB12Zdy0hQmNLv01t6i/4zAsbScw/NRDRcKHac5n5lin611QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFByTsiYxO5kwIf8TlJS00TSq/1qRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMTVj
MTU4MS03ZmE5LTRlMDMtOWI4YS1iMTAzMzY1NDQ2NWYvNjRhNTFmNTItMDA2NS0z
YjdjLWEzZDctNDQ5OGQwMTY4MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTE1YzE1ODEtN2ZhOS00ZTAzLTli
OGEtYjEwMzM2NTQ0NjVmL2UxNWMxNTgxLTdmYTktNGUwMy05YjhhLWIxMDMzNjU0
NDY1Zi5jcmwwHwYDVR0jBBgwFoAUeSDjvf22h/kzAscxHBBtrCaza58wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMTVjMTU4MS03ZmE5LTRlMDMtOWI4YS1iMTAz
MzY1NDQ2NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4eEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMD4kaAQdI8LBvvXbB4QqYSTyakXmi3AEBI11IIUAuvAvIXdxifbHeXg
L8nZ8to0ugeObZ2JPR9I8/uSLQXzBa8psB1hGdxHTEJbjCMDY+s1cswIAW+8uzoH
MugJpw19I6piW+35putEt2s2uaQZ9x+LUP02Dv0pYdeFQKy468OOdgjGR/hefqUX
M2HrTlsUd+jSOLI/T5Y2xdVNN3CIlaS0nyqqPC8Tp69mwCezSLLauj5xNU4y99s6
fAeugikJJryCIrV1IqFNoQFdq9FiznCO+UNvmaD87u25H0sok6cOgw8MHLjprgaC
n46MRwzS/doeH5nZw75IuGk1dB9yWvg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:31 2026 by rpki-client