Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa
File:                     b1d22641-4320-33c9-af60-60b017e65ac3.roa (raw, json)
Hash identifier:          ymYBQPKrhF6Iz1mgSgDR3/QHc+E0xpY3HAq99IZsobo=
Subject key identifier:   81:8D:FF:94:71:B1:E9:80:A4:C8:35:37:32:BF:C8:D8:D6:9F:7F:8B
Certificate issuer:       /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
Certificate serial:       010D0C9F4328584EA788235E357699A407921300
Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398999
IP address blocks:        23.132.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:23:5e:35:76:99:a4:07:92:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0bcf27ab-02d0-4b30-b0eb-53de9e2c8883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:78:dc:fd:82:0c:76:38:03:5d:61:61:07:
                    8c:f9:7e:92:0b:c5:4e:be:73:97:2b:31:6a:76:21:
                    c4:3e:2e:7b:59:42:67:15:b5:28:78:30:30:87:16:
                    13:81:e2:8f:7e:1b:08:c3:9d:de:d9:d1:ca:9b:c2:
                    f9:8c:00:fa:8f:2c:eb:53:bb:71:69:39:8a:f6:2f:
                    71:71:ed:d9:2e:38:4b:9c:09:a7:96:4d:b6:10:51:
                    31:7e:a5:27:49:ec:2c:1e:1f:c5:35:27:6f:96:44:
                    10:b4:87:26:d6:bd:e5:75:01:39:40:f7:2c:e7:49:
                    48:e2:51:da:7a:33:52:16:ab:9f:cf:cd:b0:e9:6c:
                    eb:b6:d0:79:4e:ff:d2:c3:2a:12:cf:00:c6:83:91:
                    af:83:83:a2:f0:02:05:1e:98:e3:c1:fe:05:ca:c0:
                    3e:34:fb:59:aa:2d:bb:92:a2:f0:92:00:25:a2:2e:
                    48:88:d5:84:7a:7d:a5:3b:b6:32:30:53:78:90:12:
                    8b:6c:ec:d5:da:ff:69:57:87:00:31:bd:bd:2e:bd:
                    83:aa:b6:33:53:5d:72:bc:0b:ec:56:dd:dc:ca:ef:
                    b1:0d:b8:3c:0a:09:c2:f0:b6:08:1e:c6:ae:d2:be:
                    d7:d2:2b:73:ef:b4:9f:d1:12:0c:0e:02:22:65:0f:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8D:FF:94:71:B1:E9:80:A4:C8:35:37:32:BF:C8:D8:D6:9F:7F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/b1d22641-4320-33c9-af60-60b017e65ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:58:ab:96:bd:3f:b7:2e:4a:72:3e:d3:58:98:95:2c:fa:
         61:ce:62:eb:49:0c:f4:84:fe:81:75:dd:fc:52:87:4d:09:ec:
         bc:d6:e7:73:80:ba:66:22:ef:19:56:e2:32:27:3e:b7:65:ad:
         15:75:2f:56:c7:bc:aa:7f:91:3a:13:e3:c6:bd:c0:bb:8b:fd:
         ad:15:e3:a1:29:ab:76:83:a5:a3:12:77:53:ea:b7:12:b0:78:
         65:37:4a:04:36:47:d1:cf:0d:cb:52:dd:15:05:ae:ba:a9:b8:
         55:4d:1d:b4:34:a8:81:34:f7:24:84:2d:e1:56:71:5b:48:75:
         4e:be:36:65:5b:28:ec:26:8f:41:30:08:cb:c0:1e:a9:b9:0f:
         43:c6:75:ac:e5:e5:e5:b5:59:6e:18:57:55:ba:c3:da:25:d2:
         00:67:91:a2:81:c4:0b:55:29:bf:0d:04:34:2d:27:5b:f3:c4:
         bc:38:3e:ca:4c:64:a3:bc:25:21:68:57:b6:20:5b:68:66:10:
         c2:2a:b7:c9:b4:29:2d:76:76:0f:fc:37:0e:99:a1:74:28:1d:
         66:02:0a:5c:92:37:75:8b:55:a7:ef:23:26:b1:ea:4c:4a:0c:
         07:df:15:6b:e4:30:67:54:41:68:07:42:fc:bf:f4:7f:ab:ce:
         50:1e:03:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCNeNXaZpAeSEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJkZjllYWUtNjQ0Ny00ZDNiLTkxODItN2EwNGNlNmYy
ZGI5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MGJjZjI3YWItMDJkMC00YjMwLWIwZWItNTNkZTllMmM4ODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdd43P2CDHY4A11hYQeM+X6SC8VOvnOXKzFq
diHEPi57WUJnFbUoeDAwhxYTgeKPfhsIw53e2dHKm8L5jAD6jyzrU7txaTmK9i9x
ce3ZLjhLnAmnlk22EFExfqUnSewsHh/FNSdvlkQQtIcm1r3ldQE5QPcs50lI4lHa
ejNSFqufz82w6WzrttB5Tv/SwyoSzwDGg5Gvg4Oi8AIFHpjjwf4FysA+NPtZqi27
kqLwkgAloi5IiNWEen2lO7YyMFN4kBKLbOzV2v9pV4cAMb29Lr2DqrYzU11yvAvs
Vt3cyu+xDbg8CgnC8LYIHsau0r7X0itz77Sf0RIMDgIiZQ/HgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGN/5RxsemApMg1NzK/yNjWn3+LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mYmRm
OWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0Y2U2ZjJkYjkvYjFkMjI2NDEtNDMyMC0z
M2M5LWFmNjAtNjBiMDE3ZTY1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmJkZjllYWUtNjQ0Ny00ZDNiLTkx
ODItN2EwNGNlNmYyZGI5L2ZiZGY5ZWFlLTY0NDctNGQzYi05MTgyLTdhMDRjZTZm
MmRiOS5jcmwwHwYDVR0jBBgwFoAUjaAY3SaxKgm0LMdpzwaxRu+Dy2wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mYmRmOWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0
Y2U2ZjJkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrJWKuWvT+3LkpyPtNYmJUs+mHOYutJDPSE/oF13fxSh00J7LzW53OA
umYi7xlW4jInPrdlrRV1L1bHvKp/kToT48a9wLuL/a0V46Epq3aDpaMSd1PqtxKw
eGU3SgQ2R9HPDctS3RUFrrqpuFVNHbQ0qIE09ySELeFWcVtIdU6+NmVbKOwmj0Ew
CMvAHqm5D0PGdazl5eW1WW4YV1W6w9ol0gBnkaKBxAtVKb8NBDQtJ1vzxLw4PspM
ZKO8JSFoV7YgW2hmEMIqt8m0KS12dg/8Nw6ZoXQoHWYCClySN3WLVafvIyax6kxK
DAffFWvkMGdUQWgHQvy/9H+rzlAeA00=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:44 2026 by rpki-client