Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
File:                     47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json)
Hash identifier:          wSrxYuL63SHP8scevDzEK9kWplrkBL+WeogX0Hg1kKo=
Subject key identifier:   31:FF:C3:23:E4:B9:87:77:A7:70:24:89:9F:D2:68:52:32:6D:C5:D2
Certificate issuer:       /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
Certificate serial:       010D0C9F4328584E253F00F8EF3C80142AC04B40
Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     397554
IP address blocks:        23.134.144.0/24 maxlen: 24
                          2605:40c0::/28 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:00:f8:ef:3c:80:14:2a:c0:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8d6ffe7e-9f24-4719-a453-bbc27bb0761b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:87:59:ff:da:8e:e5:ba:77:6a:0a:57:14:
                    bb:8d:9c:7a:2d:08:d0:fd:0a:60:5e:76:2b:90:81:
                    3a:1e:6b:04:f2:4b:bb:74:c6:ec:d4:de:c4:c4:46:
                    f3:a3:1d:3f:14:c0:20:3a:ac:12:71:d6:3e:fc:ac:
                    42:4a:97:d6:f3:c6:0d:de:8b:6d:fe:e6:1c:8e:49:
                    a2:e2:8f:4b:52:ea:b4:48:88:2e:c0:5d:d5:ca:bf:
                    b4:46:e9:a1:14:7b:dc:7c:14:51:d0:72:65:8d:17:
                    be:f6:59:5a:93:7e:1e:09:dd:b3:c9:b3:d7:19:27:
                    5e:3e:5d:7e:82:c0:08:62:db:12:a1:49:88:99:16:
                    19:b0:7d:d0:62:6c:f6:c0:4c:63:41:13:a2:25:56:
                    bc:5c:cf:51:b4:39:51:99:39:ef:d1:65:d3:9b:00:
                    2b:dc:d6:95:71:bb:80:f3:ec:7c:c2:6d:e7:12:cd:
                    d9:97:94:fb:05:74:f6:d2:e7:4a:7a:68:ba:76:58:
                    74:9f:70:39:9d:3c:b1:f4:33:49:97:61:31:66:74:
                    a4:32:f7:54:0a:f3:b3:a5:6f:49:de:79:ce:be:87:
                    6f:64:36:d6:4f:a5:77:29:cb:eb:de:c9:b2:27:1e:
                    4a:37:ec:4d:78:3f:67:fa:78:48:39:a3:47:85:52:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:C3:23:E4:B9:87:77:A7:70:24:89:9F:D2:68:52:32:6D:C5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.144.0/24
                IPv6:
                  2605:40c0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:05:83:c0:66:da:cb:df:f8:f7:c7:79:b4:6d:89:6f:f1:68:
         04:0c:9f:9d:84:df:96:e7:e5:a5:59:f8:80:4c:6a:13:73:86:
         7a:f5:60:3a:0e:9d:cf:52:c0:ec:50:19:f4:5b:c8:d2:94:63:
         f0:5f:3e:bd:8b:1b:1f:45:0b:c9:bd:f1:e6:59:9b:96:54:3c:
         e5:c6:1b:14:42:74:47:72:9f:74:7c:fd:1c:11:20:26:ab:8c:
         25:d7:fb:a1:84:b6:c2:14:99:96:e2:d1:f4:9f:0c:ba:95:3b:
         b2:7c:41:15:d9:c2:a2:b1:bb:29:44:7c:0a:a7:bf:25:6d:41:
         2e:ac:c7:64:4b:67:8c:78:eb:32:73:a3:7e:0b:e9:e9:58:78:
         cf:ab:1b:b8:4f:e6:6f:15:26:10:c7:33:66:23:40:3a:ac:80:
         63:40:c1:cb:97:d2:f9:6a:1c:fc:3a:23:a5:fa:3a:2b:dc:cd:
         aa:6e:64:31:ec:f9:4b:a6:a5:76:a7:dc:38:d7:a7:c7:3d:06:
         99:50:bf:b7:c6:56:e1:f9:fb:23:81:0d:8f:23:4d:0f:34:f7:
         88:b9:87:57:10:7c:85:98:33:4c:3c:27:65:c6:92:29:47:af:
         6d:17:7d:25:64:7f:5a:4f:70:ae:8c:52:99:d9:e1:17:92:56:
         e0:c0:88:f1
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE4lPwD47zyAFCrAS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU5MGE1MzYtYWRlMC00Y2UwLWFjOTktYTFjNzg0ZDE4
ODE2MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
OGQ2ZmZlN2UtOWYyNC00NzE5LWE0NTMtYmJjMjdiYjA3NjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/CHWf/ajuW6d2oKVxS7jZx6LQjQ/QpgXnYr
kIE6HmsE8ku7dMbs1N7ExEbzox0/FMAgOqwScdY+/KxCSpfW88YN3ott/uYcjkmi
4o9LUuq0SIguwF3Vyr+0RumhFHvcfBRR0HJljRe+9llak34eCd2zybPXGSdePl1+
gsAIYtsSoUmImRYZsH3QYmz2wExjQROiJVa8XM9RtDlRmTnv0WXTmwAr3NaVcbuA
8+x8wm3nEs3Zl5T7BXT20udKemi6dlh0n3A5nTyx9DNJl2ExZnSkMvdUCvOzpW9J
3nnOvodvZDbWT6V3Kcvr3smyJx5KN+xNeD9n+nhIOaNHhVKAAQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFDH/wyPkuYd3p3AkiZ/SaFIybcXSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkw
YTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3ODRkMTg4MTYvNDdkN2ZjZmQtOTVmZC0z
NTAzLWFkYjYtNjdlMzIzYTc4MzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmU5MGE1MzYtYWRlMC00Y2UwLWFj
OTktYTFjNzg0ZDE4ODE2L2ZlOTBhNTM2LWFkZTAtNGNlMC1hYzk5LWExYzc4NGQx
ODgxNi5jcmwwHwYDVR0jBBgwFoAUDKe+NW7cG8+Lckspa4vYlb0KBfMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkwYTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3
ODRkMTg4MTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4aQMA0E
AgACMAcDBQQmBUDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACYFg8Bm2svf+PfHebRtiW/xaAQMn52E35bn
5aVZ+IBMahNzhnr1YDoOnc9SwOxQGfRbyNKUY/BfPr2LGx9FC8m98eZZm5ZUPOXG
GxRCdEdyn3R8/RwRICarjCXX+6GEtsIUmZbi0fSfDLqVO7J8QRXZwqKxuylEfAqn
vyVtQS6sx2RLZ4x46zJzo34L6elYeM+rG7hP5m8VJhDHM2YjQDqsgGNAwcuX0vlq
HPw6I6X6OivczapuZDHs+UumpXan3DjXp8c9BplQv7fGVuH5+yOBDY8jTQ8094i5
h1cQfIWYM0w8J2XGkilHr20XfSVkf1pPcK6MUpnZ4ReSVuDAiPE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:41:53 2026 by rpki-client