Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa
File:                     ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa (raw, json)
Hash identifier:          UUJemkUQLUJZdSB44q8QmnjWHyQpn1Yl4vfr5wI4Wng=
Subject key identifier:   64:7A:25:D8:75:E6:B5:E7:9A:BE:CD:FE:71:58:80:CA:DB:1E:B8:72
Certificate issuer:       /CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32
Certificate serial:       010D0C9F4328584EA7879A64F7E1EE08596EB300
Authority key identifier: ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8095
IP address blocks:        23.181.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9a:64:f7:e1:ee:08:59:6e:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4af9c6cb-8307-40ca-9481-3e0e8c06de32
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=81399acd-4629-4c5c-b2df-9ee8e9fa358b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:0c:12:e6:ad:f1:99:5f:3e:48:2f:08:1c:
                    22:6c:89:81:c9:71:dd:b1:61:b4:14:49:30:88:20:
                    96:61:42:48:12:0d:6f:d8:f1:68:7a:40:1e:1d:29:
                    1f:59:fc:54:75:94:47:1a:ad:d9:d4:c8:5a:6a:8c:
                    53:8e:5e:5b:c4:44:fe:80:f6:8e:1f:10:bf:84:e8:
                    e3:e5:49:40:b6:16:99:2e:c9:2e:d1:e1:5e:9f:6e:
                    6f:2a:ab:b3:77:e7:2f:2d:04:aa:d4:99:66:d9:ac:
                    8a:03:46:aa:40:72:71:4d:6e:9f:e2:a3:97:b6:af:
                    a1:1e:f3:8b:a6:03:87:0d:2d:8d:30:f7:6b:80:73:
                    dc:a4:ef:d8:f0:26:ec:44:02:69:35:1f:da:b3:ea:
                    54:9a:57:dd:1b:df:c9:f1:32:08:b5:16:ae:39:c8:
                    0d:76:ed:d0:e1:ab:de:98:05:98:66:ac:a2:10:6d:
                    c6:99:68:c7:ae:4e:1d:ec:df:e2:2c:d6:0a:ea:9f:
                    a9:0b:bc:26:df:36:c3:9e:fe:d3:50:52:90:c6:22:
                    3e:c0:06:77:d2:b0:e9:f4:2b:88:f7:78:b7:30:3c:
                    0d:5d:26:02:cb:59:b4:6f:d0:fc:64:b8:d7:47:43:
                    af:f0:62:fa:35:69:0b:81:1e:49:06:a5:bc:37:7a:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7A:25:D8:75:E6:B5:E7:9A:BE:CD:FE:71:58:80:CA:DB:1E:B8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/ed2a1a9a-b826-3dbe-abba-9d3151f6fb92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32/4af9c6cb-8307-40ca-9481-3e0e8c06de32.crl

            X509v3 Authority Key Identifier:
                keyid:ED:29:5A:6E:F1:FC:6B:00:64:48:D6:41:1E:AE:57:92:FE:F4:B8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af9c6cb-8307-40ca-9481-3e0e8c06de32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:08:56:ce:d3:6f:94:2b:73:20:da:60:69:61:95:35:3a:
         7f:36:ba:4b:aa:c1:f6:2c:ed:77:a0:bb:2f:29:8c:f5:c8:eb:
         68:93:f4:6f:4d:20:2f:7d:12:c3:f9:c1:55:c3:ed:38:a0:77:
         3d:c8:e0:21:d9:e7:58:a8:17:1f:1d:b2:cf:c7:7b:b9:fe:fa:
         69:59:60:b7:95:8d:71:77:bb:5f:00:63:70:4d:96:ce:b3:5f:
         03:65:53:24:d7:d2:f5:0a:2f:6e:f5:9a:90:8d:3b:f6:f0:a0:
         c5:36:c6:53:d9:b5:22:fa:ba:b9:6e:1c:56:3a:45:6d:b1:af:
         85:eb:f5:1e:ad:02:01:61:2b:0e:9b:6b:a4:91:8c:59:3f:0d:
         5a:f7:7f:f9:57:29:3a:6c:fa:ad:93:40:99:13:0c:f0:6d:81:
         57:b9:07:72:85:0e:41:ea:21:c0:67:d3:e7:83:f6:8f:22:bd:
         91:f9:3a:53:d6:9a:76:e8:27:5d:56:92:4d:f4:9d:34:f4:50:
         95:11:ea:aa:68:07:da:1f:01:45:db:76:33:b9:aa:97:55:fa:
         41:27:c1:74:24:99:33:7f:02:e7:5f:1d:8a:a3:21:6a:12:8f:
         33:03:a5:61:c5:44:0f:fd:7b:21:af:47:35:1d:06:9e:32:4b:
         0e:b8:fd:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5pk9+HuCFluswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFmOWM2Y2ItODMwNy00MGNhLTk0ODEtM2UwZThjMDZk
ZTMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODEzOTlhY2QtNDYyOS00YzVjLWIyZGYtOWVlOGU5ZmEzNThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgMEuat8ZlfPkgvCBwibImByXHdsWG0FEkw
iCCWYUJIEg1v2PFoekAeHSkfWfxUdZRHGq3Z1MhaaoxTjl5bxET+gPaOHxC/hOjj
5UlAthaZLsku0eFen25vKquzd+cvLQSq1Jlm2ayKA0aqQHJxTW6f4qOXtq+hHvOL
pgOHDS2NMPdrgHPcpO/Y8CbsRAJpNR/as+pUmlfdG9/J8TIItRauOcgNdu3Q4ave
mAWYZqyiEG3GmWjHrk4d7N/iLNYK6p+pC7wm3zbDnv7TUFKQxiI+wAZ30rDp9CuI
93i3MDwNXSYCy1m0b9D8ZLjXR0Ov8GL6NWkLgR5JBqW8N3rTSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGR6Jdh15rXnmr7N/nFYgMrbHrhyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5
YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBlOGMwNmRlMzIvZWQyYTFhOWEtYjgyNi0z
ZGJlLWFiYmEtOWQzMTUxZjZmYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFmOWM2Y2ItODMwNy00MGNhLTk0
ODEtM2UwZThjMDZkZTMyLzRhZjljNmNiLTgzMDctNDBjYS05NDgxLTNlMGU4YzA2
ZGUzMi5jcmwwHwYDVR0jBBgwFoAU7SlabvH8awBkSNZBHq5Xkv70uOIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWY5YzZjYi04MzA3LTQwY2EtOTQ4MS0zZTBl
OGMwNmRlMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7W4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARLCFbO02+UK3Mg2mBpYZU1On82ukuqwfYs7Xeguy8pjPXI62iT9G9N
IC99EsP5wVXD7Tigdz3I4CHZ51ioFx8dss/He7n++mlZYLeVjXF3u18AY3BNls6z
XwNlUyTX0vUKL271mpCNO/bwoMU2xlPZtSL6urluHFY6RW2xr4Xr9R6tAgFhKw6b
a6SRjFk/DVr3f/lXKTps+q2TQJkTDPBtgVe5B3KFDkHqIcBn0+eD9o8ivZH5OlPW
mnboJ11Wkk30nTT0UJUR6qpoB9ofAUXbdjO5qpdV+kEnwXQkmTN/AudfHYqjIWoS
jzMDpWHFRA/9eyGvRzUdBp4ySw64/bk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:35 2026 by rpki-client