Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa
File:                     30ed08df-3fd7-3dff-b258-72738a271efe.roa (raw, json)
Hash identifier:          MHR0hu94C5QwChbZ+lwhxeFgG1z8PYUKZdMZf+zRABw=
Subject key identifier:   EA:C0:FD:13:C2:40:F1:F5:98:D3:FF:4B:DF:9C:A5:B7:41:4A:5D:B5
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F4328584D59EAB212688AA20701671C80
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     35430
IP address blocks:        23.188.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b2:12:68:8a:a2:07:01:67:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=007870a2-3842-4cf6-ba41-5fd5580da8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:4d:9f:f6:0b:2d:a1:97:74:00:15:08:81:
                    4a:5d:d0:b2:62:6c:30:42:f9:47:18:c3:01:c3:4d:
                    33:e4:b4:f9:66:22:99:91:9a:cc:3e:56:ea:ad:35:
                    f8:6b:65:e9:d2:a9:63:b1:56:45:e3:39:a1:56:84:
                    ad:47:30:28:58:29:05:1e:ba:b2:cc:e4:50:a3:75:
                    59:57:ca:42:8d:25:b4:84:31:d8:2c:0b:d7:e5:75:
                    d7:70:08:31:7d:ef:ff:71:34:a2:cc:0f:09:58:99:
                    97:77:3e:f2:c1:ee:b9:8f:8f:7d:ab:e1:a3:1f:a3:
                    05:44:05:d9:5e:07:dc:97:06:0d:5a:5b:f8:17:41:
                    dc:89:c3:dc:90:71:fc:41:c0:e9:4d:ae:b5:d2:8c:
                    64:f7:72:69:80:bc:a8:9d:88:25:91:98:43:e0:bb:
                    b8:36:fa:4e:43:13:96:96:ed:97:37:f2:cd:77:41:
                    b2:d7:a5:ed:0b:7c:3f:df:fd:40:f4:3a:9d:27:b6:
                    b9:38:c2:d4:d0:71:26:21:5f:92:26:53:fa:18:a5:
                    21:b2:44:c1:ea:78:af:f9:d1:17:3f:60:78:3e:0c:
                    b2:cc:50:d9:7d:b6:8d:14:fa:ee:d8:38:77:fd:d1:
                    04:13:33:ad:dd:d6:7d:ab:e5:17:9a:6d:a1:5a:b2:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C0:FD:13:C2:40:F1:F5:98:D3:FF:4B:DF:9C:A5:B7:41:4A:5D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/30ed08df-3fd7-3dff-b258-72738a271efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:36:a8:a4:93:14:8d:09:ee:2c:e5:5c:14:b0:b2:a2:2d:
         28:e1:ab:1e:eb:5e:dd:85:21:ef:68:0b:2c:8d:f2:4c:91:1b:
         8f:58:d6:02:b6:c9:74:55:4f:4b:0a:55:dc:3c:8e:07:21:c7:
         84:0c:e4:03:17:91:4c:74:56:9d:16:e1:89:e4:8d:14:d9:33:
         c8:f0:15:af:85:41:ae:71:9c:1c:ee:93:17:c2:8d:82:cb:f0:
         1d:c4:35:c8:76:fa:78:77:72:e3:12:47:48:91:a4:a4:d3:dd:
         fa:e7:54:54:d4:ad:e1:9d:9a:00:35:8b:e3:8e:a0:27:91:22:
         0b:3a:f8:6e:5f:36:d7:de:06:5b:4d:2d:ae:f1:33:40:36:87:
         a7:25:81:2a:d8:b8:d2:79:c4:38:6d:c0:2d:95:d3:82:95:ad:
         53:21:da:bc:86:6f:77:fc:a2:e0:d9:ce:f4:46:9f:4f:05:ba:
         60:70:e7:29:f2:d6:92:a3:60:b4:0d:87:17:6b:de:cd:17:0a:
         ad:98:92:b8:7f:5d:67:b1:c5:75:74:92:b3:cd:da:b9:b6:f4:
         4e:22:a4:3f:7a:2a:16:48:b9:7a:aa:ae:5c:77:7f:9a:34:21:
         15:2a:b1:69:61:a1:98:ef:83:3a:03:a9:4f:57:e5:2a:ae:34:
         59:01:9f:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rISaIqiBwFnHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5
YjEyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MDA3ODcwYTItMzg0Mi00Y2Y2LWJhNDEtNWZkNTU4MGRhOGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i5Nn/YLLaGXdAAVCIFKXdCyYmwwQvlHGMMB
w00z5LT5ZiKZkZrMPlbqrTX4a2Xp0qljsVZF4zmhVoStRzAoWCkFHrqyzORQo3VZ
V8pCjSW0hDHYLAvX5XXXcAgxfe//cTSizA8JWJmXdz7ywe65j499q+GjH6MFRAXZ
XgfclwYNWlv4F0HcicPckHH8QcDpTa610oxk93JpgLyonYglkZhD4Lu4NvpOQxOW
lu2XN/LNd0Gy16XtC3w/3/1A9DqdJ7a5OMLU0HEmIV+SJlP6GKUhskTB6niv+dEX
P2B4PgyyzFDZfbaNFPru2Dh3/dEEEzOt3dZ9q+UXmm2hWrJi8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrA/RPCQPH1mNP/S9+cpbdBSl21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2
MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMzBlZDA4ZGYtM2ZkNy0z
ZGZmLWIyNTgtNzI3MzhhMjcxZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5
OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk
OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz
ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwLNqikkxSNCe4s5VwUsLKiLSjhqx7rXt2FIe9oCyyN8kyRG49Y1gK2
yXRVT0sKVdw8jgchx4QM5AMXkUx0Vp0W4YnkjRTZM8jwFa+FQa5xnBzukxfCjYLL
8B3ENch2+nh3cuMSR0iRpKTT3frnVFTUreGdmgA1i+OOoCeRIgs6+G5fNtfeBltN
La7xM0A2h6clgSrYuNJ5xDhtwC2V04KVrVMh2ryGb3f8ouDZzvRGn08FumBw5yny
1pKjYLQNhxdr3s0XCq2Ykrh/XWexxXV0krPN2rm29E4ipD96KhZIuXqqrlx3f5o0
IRUqsWlhoZjvgzoDqU9X5SquNFkBnxg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:48 2026 by rpki-client