Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
File:                     51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json)
Hash identifier:          tkSPqu/QCce5CbxHUSwj+JC+pdk4xL9Uxw+yVTW91u0=
Subject key identifier:   94:3F:AB:02:30:DC:19:01:DC:9C:4A:2A:58:AF:22:F3:56:5C:CE:41
Certificate issuer:       /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial:       010D0C9F4328584E210EFAFB40D45B6F9501A176
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     398041
IP address blocks:        23.146.136.0/24 maxlen: 24
                          2607:20c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fa:fb:40:d4:5b:6f:95:01:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=031d6eac-402e-45a7-8fd9-6a8302796db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:72:ab:84:fc:42:76:50:b4:fc:49:29:6e:
                    3c:e0:a3:8f:aa:a4:a6:4b:24:cc:dc:0f:ee:ec:0e:
                    d4:8b:1f:84:83:8d:4f:4c:e2:db:2c:89:2b:93:51:
                    c6:6c:ea:d7:ca:d3:cc:ff:69:61:93:8f:ea:44:f5:
                    b1:42:c7:f0:a0:93:09:f4:3e:91:67:f8:43:8f:c8:
                    09:88:40:cb:8c:22:f2:82:f2:5b:67:0c:a8:19:a2:
                    15:84:b8:f3:60:7e:07:dc:5d:72:90:0f:6a:71:1e:
                    12:dd:5d:b5:61:13:f7:06:13:ce:7c:69:c1:e9:6f:
                    cb:57:b8:b2:b8:94:e7:eb:75:60:a7:87:c8:1f:52:
                    bc:8f:e3:77:b8:e3:38:64:d8:71:64:fb:d4:d1:4b:
                    83:fa:a3:1d:4c:a2:5e:3e:a2:46:67:d4:0f:98:2d:
                    7a:c9:17:7f:4f:7d:62:f2:71:0c:a9:ed:e0:a9:81:
                    20:8f:52:ae:97:fa:af:40:dc:e0:bb:b2:ab:08:1a:
                    84:b7:dc:e2:45:fa:f1:63:19:6b:57:fa:ee:27:9b:
                    33:4b:21:14:a5:fd:6d:ce:04:0e:f8:ec:53:2b:e1:
                    1b:b0:1b:28:5e:d7:8a:e7:67:cc:5f:0c:53:6e:ee:
                    8a:0d:1c:c6:39:1b:44:21:bf:74:1c:85:4e:89:29:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:AB:02:30:DC:19:01:DC:9C:4A:2A:58:AF:22:F3:56:5C:CE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl

            X509v3 Authority Key Identifier:
                keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.136.0/24
                IPv6:
                  2607:20c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:63:2b:bb:c0:c4:e7:45:a8:bb:e2:59:0d:6c:00:d4:df:67:
         5c:dd:f2:9d:42:f7:27:d3:60:e7:e1:db:47:20:63:7b:4f:49:
         86:b1:6b:80:81:6b:a5:04:c2:c0:91:e2:dd:67:33:8f:d1:63:
         b9:90:53:8c:f1:36:9b:60:d3:3b:f0:7e:f7:bb:ec:74:1b:ee:
         48:3c:b3:a9:93:6d:06:f3:45:67:c8:1f:67:cb:38:ea:f7:50:
         13:41:38:60:c4:88:d1:62:52:05:a4:35:66:60:89:8a:27:ec:
         98:38:ab:98:06:a9:4d:0e:24:db:0f:aa:a6:1b:86:ac:28:ce:
         d1:84:f5:6c:3c:0e:40:95:4c:a2:fa:90:a9:92:e3:98:87:ee:
         35:6e:5e:31:ff:59:77:09:6f:e6:8e:18:df:31:83:1a:4e:e7:
         ef:ef:83:54:23:53:20:7a:d5:01:e3:20:5d:8c:fa:26:6e:e1:
         26:d0:50:ae:70:4b:9b:bb:3f:0f:95:86:53:b9:d0:da:27:d8:
         e3:5d:37:69:71:25:f2:c0:d2:8a:c4:26:55:96:b6:8b:1e:b3:
         53:89:9f:1e:9d:8a:fe:4b:b4:0a:16:40:bb:83:17:68:1d:aa:
         9f:ab:7f:1b:f9:3b:66:52:01:41:c6:e5:40:01:18:d3:e3:f8:
         9d:dd:ad:36
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE4hDvr7QNRbb5UBoXYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdmMjA1ZmEtMzJkYi00NzZlLTk4MTUtZjQxOGE1ODQ3
OWMzMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
MDMxZDZlYWMtNDAyZS00NWE3LThmZDktNmE4MzAyNzk2ZGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KNyq4T8QnZQtPxJKW484KOPqqSmSyTM3A/u
7A7Uix+Eg41PTOLbLIkrk1HGbOrXytPM/2lhk4/qRPWxQsfwoJMJ9D6RZ/hDj8gJ
iEDLjCLygvJbZwyoGaIVhLjzYH4H3F1ykA9qcR4S3V21YRP3BhPOfGnB6W/LV7iy
uJTn63Vgp4fIH1K8j+N3uOM4ZNhxZPvU0UuD+qMdTKJePqJGZ9QPmC16yRd/T31i
8nEMqe3gqYEgj1Kul/qvQNzgu7KrCBqEt9ziRfrxYxlrV/ruJ5szSyEUpf1tzgQO
+OxTK+EbsBsoXteK52fMXwxTbu6KDRzGORtEIb90HIVOiSlCtwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFJQ/qwIw3BkB3JxKKlivIvNWXM5BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lN2Yy
MDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4YTU4NDc5YzMvNTFmMjM2OTAtMmM5ZS0z
NTcxLThjZmUtMGU4OWM2NTBjNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTdmMjA1ZmEtMzJkYi00NzZlLTk4
MTUtZjQxOGE1ODQ3OWMzL2U3ZjIwNWZhLTMyZGItNDc2ZS05ODE1LWY0MThhNTg0
NzljMy5jcmwwHwYDVR0jBBgwFoAUKk3SLv7NUyuTmDmyXraVXh0jwB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lN2YyMDVmYS0zMmRiLTQ3NmUtOTgxNS1mNDE4
YTU4NDc5YzMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5KIMA0E
AgACMAcDBQAmByDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAAljK7vAxOdFqLviWQ1sANTfZ1zd8p1C9yfT
YOfh20cgY3tPSYaxa4CBa6UEwsCR4t1nM4/RY7mQU4zxNptg0zvwfve77HQb7kg8
s6mTbQbzRWfIH2fLOOr3UBNBOGDEiNFiUgWkNWZgiYon7Jg4q5gGqU0OJNsPqqYb
hqwoztGE9Ww8DkCVTKL6kKmS45iH7jVuXjH/WXcJb+aOGN8xgxpO5+/vg1QjUyB6
1QHjIF2M+iZu4SbQUK5wS5u7Pw+VhlO50Non2ONdN2lxJfLA0orEJlWWtoses1OJ
nx6div5LtAoWQLuDF2gdqp+rfxv5O2ZSAUHG5UABGNPj+J3drTY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:34 2026 by rpki-client