Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
File:                     efb834f3-4901-351b-81eb-f56fe0d2d61a.roa (raw, json)
Hash identifier:          WQ76D87H4lE4wZU6yYLm+2p9e0FxQOfuIYS5a2fGWQQ=
Subject key identifier:   5C:FF:48:5A:69:A3:45:C1:74:C3:C9:43:E3:73:38:DB:B3:9C:6F:03
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584E1B798E78C186AA87BD4CF280
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     397041
IP address blocks:        23.160.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8e:78:c1:86:aa:87:bd:4c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=5bce14df-1f7c-476e-bc36-6376979f147a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:6e:93:05:53:fa:2d:79:6e:72:f7:21:b3:
                    fd:c0:81:7a:1d:96:53:fb:e6:2f:82:fd:b5:f9:e0:
                    d0:3b:73:9f:a6:cd:9c:86:78:3e:04:26:c2:e4:e4:
                    92:e0:61:5e:20:f3:a4:5d:cf:ab:79:59:e8:74:c8:
                    a7:7f:eb:45:d6:9f:20:f2:0d:4f:09:78:ae:e9:6c:
                    a5:df:86:15:12:5f:5a:58:22:0f:aa:ee:97:58:30:
                    e6:34:14:b1:45:a2:12:fb:50:3c:d8:ac:46:8d:59:
                    af:df:9a:bb:e1:e9:b1:17:05:8b:0d:9e:0b:10:81:
                    98:31:08:04:31:1c:95:06:d8:ce:2b:95:0c:62:14:
                    eb:7d:2f:6b:c5:cf:f3:40:d2:22:15:58:f1:fc:76:
                    d6:9d:d6:63:e9:92:a9:ba:53:52:92:eb:20:66:3a:
                    08:54:a4:42:05:b3:e6:f2:7f:a9:97:65:59:33:62:
                    69:dd:5d:6b:a6:7f:f4:e9:18:41:a2:20:29:a4:a4:
                    dc:2c:a4:1a:ba:e0:a8:a9:3c:24:a2:90:a1:ed:c5:
                    74:09:e5:1e:8d:9e:a1:86:7b:9f:7e:43:06:66:03:
                    e6:91:3e:40:94:5b:20:53:a4:8a:e0:95:ee:56:c6:
                    5f:f9:aa:ac:ee:3e:ed:20:19:63:d7:2c:32:c4:0f:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FF:48:5A:69:A3:45:C1:74:C3:C9:43:E3:73:38:DB:B3:9C:6F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/efb834f3-4901-351b-81eb-f56fe0d2d61a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:cc:5d:9b:cc:dc:2c:57:3f:91:cc:a5:9d:5e:b0:97:af:
         6a:42:5e:20:09:27:91:d3:ae:81:b8:e2:24:83:31:1b:a2:e6:
         69:56:71:ac:2c:b0:6a:85:30:e0:94:00:90:6c:95:6e:74:47:
         54:1f:cc:a6:cc:e9:63:cd:1d:ab:5a:18:07:25:d2:35:f0:43:
         02:6b:a8:18:02:51:e2:65:c3:73:66:40:5b:b7:09:53:54:1c:
         ba:cb:a7:e0:3e:51:c8:a6:9e:69:21:8c:15:f2:3f:f0:fa:22:
         8a:5c:c9:b6:d0:60:e4:54:81:f5:a2:31:f1:9c:37:1d:c4:d4:
         8d:e9:2c:17:c9:ec:ca:3b:cf:69:d2:3c:33:87:0f:bc:4f:e0:
         3d:8a:71:63:e9:70:88:ad:23:c2:4c:7a:5b:27:58:87:6c:4f:
         87:6a:77:bb:e4:34:14:6e:14:61:6a:95:5c:eb:70:3f:50:df:
         d7:13:2d:ff:db:1d:8f:b4:97:6e:85:d9:9f:43:6b:71:8f:e9:
         34:f1:28:19:a8:8a:c5:38:f8:e4:4f:b2:ec:49:7a:bf:1f:01:
         e7:08:ed:5d:84:cc:9e:3f:97:06:52:14:59:e1:72:b4:67:86:
         a2:68:a8:b0:9a:79:c7:02:13:a5:bb:2d:f6:f2:b6:e3:9d:a8:
         83:68:45:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beY54wYaqh71M8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm
M2JmMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NWJjZTE0ZGYtMWY3Yy00NzZlLWJjMzYtNjM3Njk3OWYxNDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2tukwVT+i15bnL3IbP9wIF6HZZT++Yvgv21
+eDQO3Ofps2chng+BCbC5OSS4GFeIPOkXc+reVnodMinf+tF1p8g8g1PCXiu6Wyl
34YVEl9aWCIPqu6XWDDmNBSxRaIS+1A82KxGjVmv35q74emxFwWLDZ4LEIGYMQgE
MRyVBtjOK5UMYhTrfS9rxc/zQNIiFVjx/HbWndZj6ZKpulNSkusgZjoIVKRCBbPm
8n+pl2VZM2Jp3V1rpn/06RhBoiAppKTcLKQauuCoqTwkopCh7cV0CeUejZ6hhnuf
fkMGZgPmkT5AlFsgU6SK4JXuVsZf+aqs7j7tIBlj1ywyxA8kSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFz/SFppo0XBdMPJQ+NzONuznG8DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3
OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvZWZiODM0ZjMtNDkwMS0z
NTFiLTgxZWItZjU2ZmUwZDJkNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj
OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj
ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl
NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6BhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr1zF2bzNwsVz+RzKWdXrCXr2pCXiAJJ5HTroG44iSDMRui5mlWcaws
sGqFMOCUAJBslW50R1QfzKbM6WPNHataGAcl0jXwQwJrqBgCUeJlw3NmQFu3CVNU
HLrLp+A+UcimnmkhjBXyP/D6IopcybbQYORUgfWiMfGcNx3E1I3pLBfJ7Mo7z2nS
PDOHD7xP4D2KcWPpcIitI8JMelsnWIdsT4dqd7vkNBRuFGFqlVzrcD9Q39cTLf/b
HY+0l26F2Z9Da3GP6TTxKBmoisU4+ORPsuxJer8fAecI7V2EzJ4/lwZSFFnhcrRn
hqJoqLCaeccCE6W7LfbytuOdqINoRQI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:48 2026 by rpki-client