Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa
File:                     5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa (raw, json)
Hash identifier:          ULr++8wKtx5bRHOSuevtd9oYbR7AGEWLn891P4osN9E=
Subject key identifier:   59:84:A7:8D:82:8C:B3:52:F5:BE:F1:89:11:06:E5:F9:3B:F0:1C:4E
Certificate issuer:       /CN=3d248cf6-52d0-4253-94f4-31abcc5d194b
Certificate serial:       010D0C9F4328584E18AEDA7248E5C980DE42D5C0
Authority key identifier: 60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     40268
IP address blocks:        23.171.232.0/24 maxlen: 24
                          2602:f97d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:da:72:48:e5:c9:80:de:42:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d248cf6-52d0-4253-94f4-31abcc5d194b
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=acd759ec-2914-4140-a9d6-04bf010f63f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:96:0e:35:c8:31:1a:12:0b:da:1e:ef:0b:
                    58:29:da:06:08:3a:a6:c8:97:74:b0:64:46:46:ea:
                    91:f7:84:56:f8:42:51:a1:a9:80:9d:e2:6c:d7:73:
                    80:2a:42:f0:5a:36:97:0c:d5:e1:fe:d9:61:6d:ec:
                    6b:dc:34:09:81:14:2b:37:66:fd:14:c3:59:cd:50:
                    47:8e:89:6f:16:12:f5:8e:35:f4:02:5f:fb:b9:93:
                    88:48:27:73:c8:e0:53:a7:f1:fd:20:3a:13:46:c3:
                    62:9c:67:0c:53:ee:d0:19:c4:8c:1c:fc:05:fa:a5:
                    45:86:ab:5e:6b:67:57:43:91:a3:54:d9:24:d9:3e:
                    2e:8a:25:42:b9:77:cd:1b:5c:51:3f:ad:cf:3f:11:
                    a1:27:8a:a7:01:0b:6f:30:5d:eb:2b:a7:c0:ea:a9:
                    cf:0b:4a:85:34:0e:df:13:3b:d3:ec:f5:88:b1:8c:
                    51:6f:a8:01:d9:3b:a8:e6:54:9f:f0:41:ab:75:09:
                    05:99:99:da:02:fc:5c:f2:f0:45:18:a9:84:66:a4:
                    8c:ea:e6:77:f3:81:44:a8:a0:17:bc:97:c7:f4:5a:
                    60:7b:91:1b:85:4e:a6:fd:d5:14:ba:17:51:d3:ef:
                    53:33:7c:0d:bb:b1:ea:1e:55:0d:b7:2a:0a:df:26:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:A7:8D:82:8C:B3:52:F5:BE:F1:89:11:06:E5:F9:3B:F0:1C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/5fc6c77e-6a93-38fa-ac44-8aa6bda20c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.crl

            X509v3 Authority Key Identifier:
                keyid:60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.232.0/24
                IPv6:
                  2602:f97d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:a6:51:92:07:7e:a9:7a:4f:b0:31:4c:ab:5f:6d:6c:2d:
         e9:8f:a0:56:07:e2:31:90:3c:fe:33:c2:14:a0:8f:c2:da:24:
         ed:13:2d:10:e0:b8:b4:f9:08:4b:2c:ce:f0:2b:01:a0:e2:08:
         03:ee:8f:64:d8:e2:2a:2d:fb:ce:fe:35:f2:eb:58:bc:42:1e:
         88:f6:a9:13:0b:f6:17:79:78:15:23:50:d4:54:3a:c7:2b:d2:
         e3:75:a6:83:d4:e4:ff:5a:b8:85:42:00:8d:20:bb:46:4b:c6:
         9f:32:39:67:37:50:b9:c4:1f:cf:cc:57:d7:9e:34:4f:2d:c5:
         bb:99:00:fb:54:37:32:12:db:e1:8f:f7:69:01:02:90:fb:6c:
         e1:39:d8:58:1b:45:5f:28:28:6b:5e:3b:b5:00:1f:84:20:37:
         3e:8c:49:6e:01:fc:df:61:d0:25:7e:0d:5a:2a:18:9f:d6:58:
         b3:cd:a4:b8:45:dc:2e:c4:71:5a:f0:ae:0e:27:6a:8b:15:a7:
         d6:0c:bf:36:b9:4d:db:b6:55:5d:58:66:11:ae:05:4d:c8:c1:
         ce:ef:1d:cb:f2:40:9b:db:d3:79:6b:3a:c2:ae:d8:29:0f:b2:
         02:5b:1b:75:58:a6:20:4e:a6:15:90:9d:6d:9d:48:e5:27:4d:
         2f:d9:5b:f3
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4YrtpySOXJgN5C1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyNDhjZjYtNTJkMC00MjUzLTk0ZjQtMzFhYmNjNWQx
OTRiMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWNkNzU5ZWMtMjkxNC00MTQwLWE5ZDYtMDRiZjAxMGY2M2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2WDjXIMRoSC9oe7wtYKdoGCDqmyJd0sGRG
RuqR94RW+EJRoamAneJs13OAKkLwWjaXDNXh/tlhbexr3DQJgRQrN2b9FMNZzVBH
jolvFhL1jjX0Al/7uZOISCdzyOBTp/H9IDoTRsNinGcMU+7QGcSMHPwF+qVFhqte
a2dXQ5GjVNkk2T4uiiVCuXfNG1xRP63PPxGhJ4qnAQtvMF3rK6fA6qnPC0qFNA7f
EzvT7PWIsYxRb6gB2Tuo5lSf8EGrdQkFmZnaAvxc8vBFGKmEZqSM6uZ384FEqKAX
vJfH9Fpge5EbhU6m/dUUuhdR0+9TM3wNu7HqHlUNtyoK3ybx5QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFmEp42CjLNS9b7xiREG5fk78BxOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZDI0
OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFiY2M1ZDE5NGIvNWZjNmM3N2UtNmE5My0z
OGZhLWFjNDQtOGFhNmJkYTIwYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2QyNDhjZjYtNTJkMC00MjUzLTk0
ZjQtMzFhYmNjNWQxOTRiLzNkMjQ4Y2Y2LTUyZDAtNDI1My05NGY0LTMxYWJjYzVk
MTk0Yi5jcmwwHwYDVR0jBBgwFoAUYOtbFStiuhi8FsOBlHGSjF9Zd9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZDI0OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFi
Y2M1ZDE5NGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6voMA4E
AgACMAgDBgQmAvl9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABuqZRkgd+qXpPsDFMq19tbC3pj6BWB+Ix
kDz+M8IUoI/C2iTtEy0Q4Li0+QhLLM7wKwGg4ggD7o9k2OIqLfvO/jXy61i8Qh6I
9qkTC/YXeXgVI1DUVDrHK9LjdaaD1OT/WriFQgCNILtGS8afMjlnN1C5xB/PzFfX
njRPLcW7mQD7VDcyEtvhj/dpAQKQ+2zhOdhYG0VfKChrXju1AB+EIDc+jEluAfzf
YdAlfg1aKhif1lizzaS4RdwuxHFa8K4OJ2qLFafWDL82uU3btlVdWGYRrgVNyMHO
7x3L8kCb29N5azrCrtgpD7ICWxt1WKYgTqYVkJ1tnUjlJ00v2Vvz
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:58 2026 by rpki-client