Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
File:                     4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa (raw, json)
Hash identifier:          bRTGoz8KaaXM6prWMieX5zjyTnwmcVKJx71tprAtYxE=
Subject key identifier:   2D:05:B9:DC:31:C1:5D:3E:07:FC:B3:4D:30:44:6A:47:42:13:AF:93
Certificate issuer:       /CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Certificate serial:       010D0C9F4328584EA78F695BAED8A7920C295AC0
Authority key identifier: B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399055
IP address blocks:        23.173.16.0/24 maxlen: 24
                          2606:22c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:69:5b:ae:d8:a7:92:0c:29:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5575f504-402d-49a3-ae0a-743ea69e331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:e1:d5:18:d5:6b:96:49:fd:56:80:05:f4:
                    3b:60:64:f6:4c:65:62:53:ca:4a:db:39:5a:26:28:
                    cd:fe:62:31:0b:b2:f0:33:81:3d:2a:4d:fa:13:9c:
                    a7:0a:9b:0d:3e:3f:72:91:fa:d5:53:3e:2b:69:a6:
                    c7:11:a4:b2:62:32:ec:0d:37:2b:f5:ba:f3:1c:76:
                    8f:08:29:1e:93:5e:13:4a:2f:97:e2:71:2e:d3:19:
                    53:54:70:91:ef:9e:eb:f2:df:9f:5c:bd:b8:bf:3f:
                    ac:41:fa:da:49:1b:b3:8e:37:cd:3e:87:2a:b6:99:
                    be:60:71:a9:0b:cb:15:86:4d:93:24:67:fe:9b:1e:
                    57:90:3d:d3:38:97:b9:8d:e4:6e:c7:8a:d9:43:c3:
                    ae:93:d8:28:44:aa:cc:1e:33:f6:fd:0a:a4:7e:f5:
                    40:ab:99:37:5e:1e:16:94:c1:94:5a:1a:57:a6:1a:
                    ba:ca:8e:5b:78:dd:72:de:ab:0d:18:cc:38:cb:6a:
                    69:89:2b:41:87:bc:2c:52:30:e5:3e:39:5c:1d:e0:
                    1c:73:5d:92:9e:b5:5d:ac:65:0d:f9:eb:e9:39:3b:
                    e8:c1:f5:63:34:80:5f:1e:d1:68:d4:05:4e:df:72:
                    47:63:06:ce:d7:f2:3c:3d:73:87:51:6b:50:5b:54:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:05:B9:DC:31:C1:5D:3E:07:FC:B3:4D:30:44:6A:47:42:13:AF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.16.0/24
                IPv6:
                  2606:22c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ce:4b:c1:ae:bd:5f:71:ef:e5:c0:69:5a:a7:60:6d:25:d5:
         0a:6d:68:31:09:43:e2:92:55:a4:bb:b2:6d:3d:3e:08:3b:e3:
         8b:c4:02:72:ef:5b:f0:2c:d1:11:0a:04:0c:af:69:59:8e:91:
         b8:c5:df:59:f2:24:cf:a8:67:e6:09:5e:3e:f3:30:b5:6b:e9:
         f1:8c:dc:46:fc:0d:4b:2e:3e:fc:26:18:57:2c:7c:52:5c:b3:
         e4:78:85:9a:8e:27:a8:ac:25:9c:0f:70:e9:0d:e7:1e:e0:59:
         9a:03:1a:1e:a3:35:bf:a8:04:dc:63:f7:f2:a8:54:47:f5:f8:
         6e:03:ea:8b:dd:f1:2d:9e:eb:df:8b:3d:9b:13:c5:1a:64:6f:
         13:57:78:12:06:68:8a:ab:59:b4:59:21:ce:9a:b1:e4:5e:e5:
         88:b6:d9:98:1b:e1:58:8b:30:9f:ef:5f:23:ea:6e:65:9a:a9:
         9b:09:ea:cb:1e:25:8f:3c:e9:6e:da:b6:f4:af:5e:66:1a:2b:
         3c:a4:01:59:6d:79:12:4c:01:e8:01:e1:0f:e6:ee:6b:e9:9b:
         28:6a:e1:28:4b:d4:e2:89:5e:27:4c:4b:98:b9:ec:a5:f4:02:
         f3:42:ae:09:34:98:af:07:0e:0c:b9:3f:be:bf:90:7a:fc:de:
         cd:fc:30:4d
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6nj2lbrtinkgwpWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ5NmUxZjAtNzZlYi00ZTk2LTlhNzQtMTIxYjllMmQz
YTFmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTU3NWY1MDQtNDAyZC00OWEzLWFlMGEtNzQzZWE2OWUzMzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60jh1RjVa5ZJ/VaABfQ7YGT2TGViU8pK2zla
JijN/mIxC7LwM4E9Kk36E5ynCpsNPj9ykfrVUz4raabHEaSyYjLsDTcr9brzHHaP
CCkek14TSi+X4nEu0xlTVHCR757r8t+fXL24vz+sQfraSRuzjjfNPocqtpm+YHGp
C8sVhk2TJGf+mx5XkD3TOJe5jeRux4rZQ8Ouk9goRKrMHjP2/QqkfvVAq5k3Xh4W
lMGUWhpXphq6yo5beN1y3qsNGMw4y2ppiStBh7wsUjDlPjlcHeAcc12SnrVdrGUN
+evpOTvowfVjNIBfHtFo1AVO33JHYwbO1/I8PXOHUWtQW1QgbQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFC0FudwxwV0+B/yzTTBEakdCE6+TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDk2
ZTFmMC03NmViLTRlOTYtOWE3NC0xMjFiOWUyZDNhMWYvNGEwN2ZlZDQtNWJjOC0z
YjkzLThmM2EtZjFiYjQ0NzIxMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ5NmUxZjAtNzZlYi00ZTk2LTlh
NzQtMTIxYjllMmQzYTFmLzE0OTZlMWYwLTc2ZWItNGU5Ni05YTc0LTEyMWI5ZTJk
M2ExZi5jcmwwHwYDVR0jBBgwFoAUts5jGtEcDcRI8QIuORvE1SvuyOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDk2ZTFmMC03NmViLTRlOTYtOWE3NC0xMjFi
OWUyZDNhMWYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF60QMA0E
AgACMAcDBQAmBiLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAGbOS8GuvV9x7+XAaVqnYG0l1QptaDEJQ+KS
VaS7sm09Pgg744vEAnLvW/As0REKBAyvaVmOkbjF31nyJM+oZ+YJXj7zMLVr6fGM
3Eb8DUsuPvwmGFcsfFJcs+R4hZqOJ6isJZwPcOkN5x7gWZoDGh6jNb+oBNxj9/Ko
VEf1+G4D6ovd8S2e69+LPZsTxRpkbxNXeBIGaIqrWbRZIc6aseRe5Yi22Zgb4ViL
MJ/vXyPqbmWaqZsJ6sseJY886W7atvSvXmYaKzykAVlteRJMAegB4Q/m7mvpmyhq
4ShL1OKJXidMS5i57KX0AvNCrgk0mK8HDgy5P76/kHr83s38ME0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:14 2026 by rpki-client