Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa
File:                     a23beb21-fbbe-3393-8cd9-613538a93946.roa (raw, json)
Hash identifier:          D7vYfq92ZCvzih8j3vgUYdQaGhC14exg5lVTccNOTfo=
Subject key identifier:   8C:26:03:7C:C5:F5:FB:BD:0C:F7:BA:65:8A:18:44:60:BC:F7:E3:65
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584CCBA73FC15978FDD7D47BBF00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54994
IP address blocks:        153.43.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:3f:c1:59:78:fd:d7:d4:7b:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=6cb5a134-3018-4485-9c9c-ca2cc090c860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:68:d1:a3:1b:a5:8c:8a:da:27:1c:cb:35:
                    30:3f:30:6b:0c:a4:b6:95:f8:16:9f:93:ac:cc:1f:
                    9d:97:57:64:c8:c0:00:fb:c7:72:23:11:f9:ad:2b:
                    e8:82:37:25:19:9c:0a:a6:29:1b:4c:84:07:4d:46:
                    b1:ec:b1:6f:91:5f:23:e2:0c:a6:ba:11:cf:27:54:
                    7e:06:14:15:9e:da:49:59:bc:1d:6f:35:78:aa:3b:
                    99:05:02:5a:06:4c:bf:76:c2:f6:34:1e:67:b0:13:
                    15:bb:4e:8b:90:85:a1:1a:69:a9:f1:bf:ad:a1:e6:
                    b4:e2:30:c8:71:08:ab:78:cd:35:61:cb:36:4b:54:
                    2c:b1:a5:80:dc:b3:45:b0:af:2a:95:26:ae:ba:68:
                    25:6e:ec:88:47:28:d7:f1:6a:b2:68:0a:34:1e:4f:
                    52:c8:a6:9b:89:08:bb:37:8f:35:e0:19:b6:c0:10:
                    da:96:f7:40:4f:1a:9b:63:f1:3f:43:86:db:44:75:
                    22:fa:6a:c1:36:2e:5f:b3:84:0b:a2:20:88:ca:f1:
                    72:3e:97:90:21:bc:5f:1e:8c:e2:77:32:67:89:d9:
                    7a:67:6f:a3:0b:5e:2e:d1:ff:cf:04:6f:c9:99:3c:
                    d0:8e:ce:b4:f5:5f:c4:10:41:47:d0:c9:3b:96:78:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:26:03:7C:C5:F5:FB:BD:0C:F7:BA:65:8A:18:44:60:BC:F7:E3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:25:6f:b9:9d:68:38:26:11:ba:f2:2f:8f:9f:f3:46:af:cd:
         2d:80:3f:f3:97:e0:a1:1e:02:e3:26:5c:ca:70:6f:b1:9a:d8:
         15:8c:95:0d:a9:d5:30:28:4c:5e:09:89:14:20:30:b3:94:88:
         35:ad:19:3a:14:fb:97:7c:45:de:69:28:3a:b8:f8:bf:5d:7c:
         2e:58:0b:1f:5d:0b:12:6f:d0:16:3a:d8:0f:b6:28:4d:fe:aa:
         45:94:10:d7:5c:75:0a:f8:17:1c:63:73:3a:ec:b6:60:97:0f:
         f6:b3:8a:cf:6b:c2:d9:69:68:25:e5:d0:6d:9d:05:e7:8c:c2:
         a7:1c:a5:c5:29:0f:54:fe:61:23:fc:1f:12:af:0c:11:8e:2f:
         3a:42:63:2f:54:62:da:60:d2:5f:ed:76:f9:fd:db:59:92:62:
         54:34:bb:f7:71:a6:16:66:e7:ba:43:f7:9c:5e:17:2c:a0:80:
         ae:7b:6e:f8:12:5c:2f:80:df:0e:b4:73:4f:a8:b2:95:48:7d:
         e6:fa:a5:de:12:07:0f:4f:d0:88:c0:42:44:5f:65:71:f7:c7:
         f3:9d:56:f6:77:68:92:c3:24:af:60:cd:dd:d9:ae:9d:98:a1:
         fe:d4:1f:d5:f1:0f:25:a8:14:80:16:12:06:72:3e:f1:03:b7:
         56:a5:c2:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLpz/BWXj919R7vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
NmNiNWExMzQtMzAxOC00NDg1LTljOWMtY2EyY2MwOTBjODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Bo0aMbpYyK2iccyzUwPzBrDKS2lfgWn5Os
zB+dl1dkyMAA+8dyIxH5rSvogjclGZwKpikbTIQHTUax7LFvkV8j4gymuhHPJ1R+
BhQVntpJWbwdbzV4qjuZBQJaBky/dsL2NB5nsBMVu06LkIWhGmmp8b+toea04jDI
cQireM01Ycs2S1QssaWA3LNFsK8qlSauumglbuyIRyjX8WqyaAo0Hk9SyKabiQi7
N4814Bm2wBDalvdATxqbY/E/Q4bbRHUi+mrBNi5fs4QLoiCIyvFyPpeQIbxfHozi
dzJnidl6Z2+jC14u0f/PBG/JmTzQjs609V/EEEFH0Mk7lnhIAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwmA3zF9fu9DPe6ZYoYRGC89+NlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTIzYmViMjEtZmJiZS0z
MzkzLThjZDktNjEzNTM4YTkzOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMlb7mdaDgmEbryL4+f80avzS2AP/OX4KEeAuMmXMpwb7Ga2BWMlQ2p
1TAoTF4JiRQgMLOUiDWtGToU+5d8Rd5pKDq4+L9dfC5YCx9dCxJv0BY62A+2KE3+
qkWUENdcdQr4FxxjczrstmCXD/azis9rwtlpaCXl0G2dBeeMwqccpcUpD1T+YSP8
HxKvDBGOLzpCYy9UYtpg0l/tdvn921mSYlQ0u/dxphZm57pD95xeFyyggK57bvgS
XC+A3w60c0+ospVIfeb6pd4SBw9P0IjAQkRfZXH3x/OdVvZ3aJLDJK9gzd3Zrp2Y
of7UH9XxDyWoFIAWEgZyPvEDt1alwuY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:59 2026 by rpki-client