Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/d6ed99d1-e7af-30ac-bfa2-f93d20a86e06.roa
File:                     d6ed99d1-e7af-30ac-bfa2-f93d20a86e06.roa (raw, json)
Hash identifier:          L5hPAdGru87nBT7KpDM9Ew+9mezoRsxGpsWoceIwLeE=
Subject key identifier:   35:F7:C8:D2:93:5D:9A:C3:23:0C:35:66:A7:6D:FF:74:05:FB:20:37
Certificate issuer:       /CN=f57c3c5c-9df4-42aa-92c7-c3f8e77313b4
Certificate serial:       010D0C9F4328584D67DFBCF6C65093F40456D4C0
Authority key identifier: 1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/d6ed99d1-e7af-30ac-bfa2-f93d20a86e06.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        23.92.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:bc:f6:c6:50:93:f4:04:56:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c3c5c-9df4-42aa-92c7-c3f8e77313b4
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=98a96e03-63b7-4709-9e6d-41391533f8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:9d:d5:49:16:ac:88:a4:cd:b0:da:40:32:
                    ff:c9:98:46:24:45:e8:f6:0d:a5:aa:91:75:80:1b:
                    01:97:e1:54:9d:e0:ac:ad:b6:e5:84:d7:de:b2:7a:
                    9c:32:a9:c1:bd:c7:14:05:a5:02:df:1f:57:76:41:
                    67:34:da:a1:6f:d0:55:14:98:18:92:4b:90:04:c5:
                    93:6c:cc:a3:27:e2:cd:a5:99:a6:7f:ab:65:74:60:
                    f9:dc:15:3e:94:4d:9c:9d:5e:48:64:6e:34:a0:51:
                    ab:45:1b:b9:b3:66:d4:d6:33:db:98:d0:30:4d:b2:
                    8f:02:37:0f:ce:59:67:6d:6f:05:f4:0c:f3:e8:69:
                    5e:3c:7f:63:e9:55:24:b0:71:f8:f6:6d:00:04:1b:
                    9c:d4:a5:b0:35:85:f1:55:b7:f0:a2:f5:6f:38:05:
                    00:ed:b0:4f:29:a9:f9:2c:ef:de:5c:77:75:4b:80:
                    77:c3:48:df:a4:e1:48:11:dc:f6:f9:c9:6a:15:31:
                    78:15:84:7b:5c:c4:8f:03:16:70:ed:76:d1:e2:95:
                    88:f7:4a:ec:f8:91:28:a5:23:04:ee:42:c5:c5:b6:
                    a1:a9:d5:b0:29:60:29:d2:e7:8a:df:85:86:c3:90:
                    61:25:83:a1:82:9c:13:bb:0f:b9:fc:1b:46:a4:36:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:C8:D2:93:5D:9A:C3:23:0C:35:66:A7:6D:FF:74:05:FB:20:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/d6ed99d1-e7af-30ac-bfa2-f93d20a86e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.crl

            X509v3 Authority Key Identifier:
                keyid:1D:13:81:95:E5:47:0B:3A:81:6A:16:CF:DB:29:D2:1D:E6:DA:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f57c3c5c-9df4-42aa-92c7-c3f8e77313b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:e7:cf:2a:4a:ee:5b:df:98:ec:2f:b5:9e:2a:9f:d8:03:
         94:48:a1:03:31:33:60:11:a0:1a:3e:fb:6f:01:a3:b4:f5:ca:
         ef:39:b8:78:a3:20:fa:ac:86:2e:c3:38:3e:53:1b:3e:4a:f6:
         fc:8d:05:df:1c:bd:25:a0:eb:c3:13:c3:d5:6d:fe:08:3c:17:
         34:17:47:45:ff:c9:64:1f:51:77:4e:7f:90:69:fa:17:a4:8c:
         74:12:c9:45:77:b0:d7:64:2b:8e:4c:c3:95:3a:90:bb:d4:90:
         3d:56:6e:50:75:3f:d8:90:72:20:c9:ac:77:a1:d6:d0:b8:59:
         66:52:39:51:b3:20:68:cd:3e:78:30:85:85:70:e2:33:6e:b2:
         f6:a5:a1:2b:fb:84:30:68:60:96:6f:dd:85:28:0c:d0:7f:75:
         d1:4a:7c:a5:de:46:ed:78:91:27:08:4b:00:aa:7a:6c:3c:9f:
         52:a1:ac:37:9d:8e:10:85:f1:27:f4:4d:d7:d8:44:1c:71:d1:
         b6:38:29:53:de:59:85:6b:6f:3b:a9:a8:a7:6c:9c:a6:18:6b:
         59:51:2c:a9:4d:81:f7:e4:85:ad:fa:ef:ad:59:cd:a2:ed:1a:
         08:b5:dc:3e:21:3e:25:88:82:ba:0f:a3:3c:e7:65:ce:75:ed:
         3a:18:c4:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37z2xlCT9ARW1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU3YzNjNWMtOWRmNC00MmFhLTkyYzctYzNmOGU3NzMx
M2I0MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
OThhOTZlMDMtNjNiNy00NzA5LTllNmQtNDEzOTE1MzNmOGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtded1UkWrIikzbDaQDL/yZhGJEXo9g2lqpF1
gBsBl+FUneCsrbblhNfesnqcMqnBvccUBaUC3x9XdkFnNNqhb9BVFJgYkkuQBMWT
bMyjJ+LNpZmmf6tldGD53BU+lE2cnV5IZG40oFGrRRu5s2bU1jPbmNAwTbKPAjcP
zllnbW8F9Azz6GlePH9j6VUksHH49m0ABBuc1KWwNYXxVbfwovVvOAUA7bBPKan5
LO/eXHd1S4B3w0jfpOFIEdz2+clqFTF4FYR7XMSPAxZw7XbR4pWI90rs+JEopSME
7kLFxbahqdWwKWAp0ueK34WGw5BhJYOhgpwTuw+5/BtGpDbZpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDX3yNKTXZrDIww1Zqdt/3QF+yA3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNTdj
M2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4ZTc3MzEzYjQvZDZlZDk5ZDEtZTdhZi0z
MGFjLWJmYTItZjkzZDIwYTg2ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjU3YzNjNWMtOWRmNC00MmFhLTky
YzctYzNmOGU3NzMxM2I0L2Y1N2MzYzVjLTlkZjQtNDJhYS05MmM3LWMzZjhlNzcz
MTNiNC5jcmwwHwYDVR0jBBgwFoAUHROBleVHCzqBahbP2ynSHebayMgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNTdjM2M1Yy05ZGY0LTQyYWEtOTJjNy1jM2Y4
ZTc3MzEzYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1yuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVt588qSu5b35jsL7WeKp/YA5RIoQMxM2ARoBo++28Bo7T1yu85uHij
IPqshi7DOD5TGz5K9vyNBd8cvSWg68MTw9Vt/gg8FzQXR0X/yWQfUXdOf5Bp+hek
jHQSyUV3sNdkK45Mw5U6kLvUkD1WblB1P9iQciDJrHeh1tC4WWZSOVGzIGjNPngw
hYVw4jNusvaloSv7hDBoYJZv3YUoDNB/ddFKfKXeRu14kScISwCqemw8n1KhrDed
jhCF8Sf0TdfYRBxx0bY4KVPeWYVrbzupqKdsnKYYa1lRLKlNgffkha36761ZzaLt
Ggi13D4hPiWIgroPozznZc517ToYxCU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:08 2026 by rpki-client