Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7ae9c2eb-502f-3bee-9723-9e019effc558.roa
File:                     7ae9c2eb-502f-3bee-9723-9e019effc558.roa (raw, json)
Hash identifier:          1RdP8b6ymIwUvljF4HiRxIkxeEvZCPaHjnKz3sNzPM4=
Subject key identifier:   6B:20:B0:E1:A0:F1:F8:7D:C3:09:A4:F2:0E:87:82:C4:96:A6:F0:AA
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584E9BE50A0C223A913786B72140
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7ae9c2eb-502f-3bee-9723-9e019effc558.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     23167
IP address blocks:        149.234.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:0a:0c:22:3a:91:37:86:b7:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=9eca73c9-f1bc-4f6b-9192-189516a5599c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:bd:a4:9d:a9:2c:c5:02:d9:04:53:c1:85:
                    fb:39:d1:dc:f0:a3:35:0f:70:a9:cd:e9:2b:d8:62:
                    f7:c0:44:a9:09:f8:1a:a0:75:f1:f6:fd:e5:58:3c:
                    33:4d:42:52:c1:fa:23:57:1f:95:34:c7:b4:4f:4e:
                    c8:cc:1f:f8:d7:95:f2:8c:ec:08:df:cc:56:c3:b1:
                    34:69:61:86:37:60:ba:ae:b9:1b:87:75:6d:7f:68:
                    45:d9:70:df:3b:28:9f:09:ba:9d:67:96:29:db:3c:
                    4a:47:f1:23:55:d9:91:8e:91:57:bd:8e:c9:ee:49:
                    2d:c4:1b:a5:87:99:63:ec:b6:94:49:82:83:df:15:
                    dd:88:7c:95:42:48:8b:3a:50:53:dc:46:38:9c:90:
                    b2:6e:5e:dd:e3:6b:d3:cb:cf:08:6e:f2:96:61:76:
                    66:f0:1e:56:09:ac:55:86:c9:41:22:ff:83:c9:ec:
                    3d:30:2e:9d:19:6e:37:e1:18:4b:6b:10:96:37:19:
                    b7:c1:0b:95:be:8c:04:db:68:16:96:a1:47:0c:a0:
                    e6:4b:b3:82:d9:eb:83:67:b9:94:d5:a8:d8:52:d1:
                    f7:e7:9a:3c:48:21:04:52:33:5f:bf:3c:5d:ae:44:
                    5b:56:33:e8:ca:17:41:fe:75:65:7c:c9:6a:14:ae:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:B0:E1:A0:F1:F8:7D:C3:09:A4:F2:0E:87:82:C4:96:A6:F0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7ae9c2eb-502f-3bee-9723-9e019effc558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:6d:f0:0f:5d:8e:18:e6:69:d7:eb:ad:59:4e:5b:02:0c:af:
         71:3c:57:e9:79:d4:f9:c8:3c:61:ac:bd:21:53:bd:11:3a:2a:
         d0:46:67:18:54:94:a6:86:1b:63:6c:4b:3b:f3:58:b3:23:fe:
         2b:f8:61:41:60:3b:08:93:58:a9:66:ce:91:18:2e:0a:75:db:
         23:a7:11:07:ad:c7:2f:b2:17:72:6c:92:81:73:aa:e0:e0:06:
         3e:f4:50:cd:5d:99:0c:56:cf:c5:cc:b1:20:e5:78:81:e2:d6:
         04:de:75:5c:16:2f:87:16:14:a8:b7:b0:51:2a:99:01:fc:ff:
         5d:03:de:ea:3f:a4:78:e4:0b:ec:34:1e:8f:35:7b:04:c4:e6:
         ea:24:46:72:62:75:e5:1f:13:77:2f:5f:ba:ef:10:b1:d2:ba:
         3b:72:4c:0c:fd:10:a8:de:9d:98:74:5b:ab:01:1e:0a:cd:cd:
         ff:e1:32:45:f4:a2:27:13:9f:a9:76:34:37:3c:31:ba:46:66:
         3a:39:69:bb:41:bd:0a:09:74:2f:84:82:bd:71:e8:8e:c9:5d:
         27:b7:43:c8:53:c8:d8:d9:fc:d5:a4:65:7a:d1:56:1d:d1:9c:
         b0:c7:f2:f8:11:0b:18:ce:fd:fd:c4:1d:3a:d4:ab:59:20:0c:
         e1:69:2b:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5QoMIjqRN4a3IUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3
NzA4MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
OWVjYTczYzktZjFiYy00ZjZiLTkxOTItMTg5NTE2YTU1OTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDO9pJ2pLMUC2QRTwYX7OdHc8KM1D3Cpzekr
2GL3wESpCfgaoHXx9v3lWDwzTUJSwfojVx+VNMe0T07IzB/415XyjOwI38xWw7E0
aWGGN2C6rrkbh3Vtf2hF2XDfOyifCbqdZ5Yp2zxKR/EjVdmRjpFXvY7J7kktxBul
h5lj7LaUSYKD3xXdiHyVQkiLOlBT3EY4nJCybl7d42vTy88IbvKWYXZm8B5WCaxV
hslBIv+Dyew9MC6dGW434RhLaxCWNxm3wQuVvowE22gWlqFHDKDmS7OC2euDZ7mU
1ajYUtH355o8SCEEUjNfvzxdrkRbVjPoyhdB/nVlfMlqFK6IlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsgsOGg8fh9wwmk8g6HgsSWpvCqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvN2FlOWMyZWItNTAyZi0z
YmVlLTk3MjMtOWUwMTllZmZjNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx
N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi
NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl
YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlerAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItt8A9djhjmadfrrVlOWwIMr3E8V+l51PnIPGGsvSFTvRE6KtBGZxhU
lKaGG2NsSzvzWLMj/iv4YUFgOwiTWKlmzpEYLgp12yOnEQetxy+yF3JskoFzquDg
Bj70UM1dmQxWz8XMsSDleIHi1gTedVwWL4cWFKi3sFEqmQH8/10D3uo/pHjkC+w0
Ho81ewTE5uokRnJideUfE3cvX7rvELHSujtyTAz9EKjenZh0W6sBHgrNzf/hMkX0
oicTn6l2NDc8MbpGZjo5abtBvQoJdC+Egr1x6I7JXSe3Q8hTyNjZ/NWkZXrRVh3R
nLDH8vgRCxjO/f3EHTrUq1kgDOFpKxk=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:45:22 2026 by rpki-client