Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa
File:                     e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json)
Hash identifier:          BN+nXbB5gFKkWGrljSbHh9GtycajD40kJ/s4dYQep+0=
Subject key identifier:   30:6B:B6:84:85:4B:68:53:CE:B1:4B:75:9A:74:D7:4B:4A:3B:34:D5
Certificate issuer:       /CN=897be676-f6c1-4efc-8bef-a425edb4f479
Certificate serial:       010D0C9F4328584E2274484D26BA0B73B9499800
Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     7018
IP address blocks:        23.129.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:48:4d:26:ba:0b:73:b9:49:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=b393eb8c-e51d-4322-9b5e-294da821252a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:c9:71:65:43:9e:57:79:a3:2a:10:8b:84:
                    8b:72:86:59:ce:cc:fe:9a:0e:1c:f8:e0:4c:95:c3:
                    30:33:31:15:6b:a8:e7:f7:67:a9:09:2b:9e:45:db:
                    39:8c:75:75:f5:eb:02:ce:bf:90:99:cc:6c:a3:42:
                    ba:9f:42:43:97:d1:fa:f3:be:1d:51:17:b8:3b:fb:
                    ea:b1:c9:3e:d8:00:9b:cf:12:07:2a:48:19:08:a4:
                    f7:ca:cb:8e:90:c2:c3:73:be:5f:bb:37:61:65:2f:
                    2d:36:36:fb:ea:b1:4f:39:6b:95:7e:44:b9:73:38:
                    a4:b7:33:68:b7:5e:1b:77:dc:fe:bc:2f:c1:99:70:
                    7d:3c:9e:61:8c:c1:ab:d2:22:c7:0f:a2:55:1d:a9:
                    e8:cb:eb:a1:d0:8d:4c:e9:8d:e7:06:b3:bc:92:f1:
                    93:e9:db:99:79:be:1e:03:b1:ee:91:e6:b4:16:15:
                    f1:e7:27:c6:8e:14:43:01:d7:6d:c5:ed:b0:bf:d6:
                    e0:86:a1:ee:f7:b3:d5:9a:5b:4a:50:01:f2:e3:eb:
                    d9:8e:95:56:d0:c3:58:e3:e7:90:03:63:51:e7:4e:
                    b9:5b:35:6e:f6:1e:0e:41:00:1f:e9:f3:81:73:c3:
                    3f:b0:46:94:71:65:ed:40:42:40:06:f6:f9:ab:a3:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:B6:84:85:4B:68:53:CE:B1:4B:75:9A:74:D7:4B:4A:3B:34:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:87:58:22:34:d2:93:00:c6:66:c0:0b:42:bd:96:08:32:1e:
         08:e6:6c:8d:6d:e6:b4:2c:42:19:40:b4:0a:bb:6b:00:25:b9:
         8b:df:d9:47:f0:ab:2f:dc:b2:7d:52:c3:78:51:c2:ed:96:61:
         e7:90:d4:2a:81:b6:2c:59:ec:56:f3:2d:e6:6c:5f:98:71:0b:
         5c:cd:fa:10:b4:c8:aa:6f:45:34:60:b9:c8:40:72:d3:71:a5:
         4f:63:0a:c0:94:9f:94:b7:96:28:68:73:3c:ec:e1:7d:39:51:
         04:44:b5:76:9a:47:45:80:19:70:f2:34:7d:ce:f4:49:b0:e1:
         e0:34:11:03:d7:e1:0d:18:8c:be:80:09:09:0c:2e:00:88:c9:
         ac:6a:12:0f:32:00:ab:72:a9:3c:d7:63:22:e4:ed:fd:e6:8d:
         d6:3a:4e:fa:82:6f:aa:e5:e0:ab:3b:60:00:7e:d9:95:86:d1:
         8d:5f:df:b3:e8:c6:31:86:50:4d:77:e3:38:8c:c1:ff:65:60:
         45:79:a5:6e:60:73:15:55:15:5a:cd:6d:07:97:73:74:00:06:
         84:6d:28:4d:53:79:cc:7d:a4:4e:36:e8:5c:2d:93:6e:d2:52:
         10:77:6a:41:73:76:9f:74:ae:fe:e4:1f:09:41:56:49:80:67:
         90:ed:24:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEhNJroLc7lJmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm
NDc5MB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YjM5M2ViOGMtZTUxZC00MzIyLTliNWUtMjk0ZGE4MjEyNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJjJcWVDnld5oyoQi4SLcoZZzsz+mg4c+OBM
lcMwMzEVa6jn92epCSueRds5jHV19esCzr+Qmcxso0K6n0JDl9H6874dURe4O/vq
sck+2ACbzxIHKkgZCKT3ysuOkMLDc75fuzdhZS8tNjb76rFPOWuVfkS5cziktzNo
t14bd9z+vC/BmXB9PJ5hjMGr0iLHD6JVHanoy+uh0I1M6Y3nBrO8kvGT6duZeb4e
A7Hukea0FhXx5yfGjhRDAddtxe2wv9bghqHu97PVmltKUAHy4+vZjpVW0MNY4+eQ
A2NR5065WzVu9h4OQQAf6fOBc8M/sEaUcWXtQEJABvb5q6MqvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBrtoSFS2hTzrFLdZp010tKOzTVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi
ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z
ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi
ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0
ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1
ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKHWCI00pMAxmbAC0K9lggyHgjmbI1t5rQsQhlAtAq7awAluYvf2Ufw
qy/csn1Sw3hRwu2WYeeQ1CqBtixZ7FbzLeZsX5hxC1zN+hC0yKpvRTRguchActNx
pU9jCsCUn5S3lihoczzs4X05UQREtXaaR0WAGXDyNH3O9Emw4eA0EQPX4Q0YjL6A
CQkMLgCIyaxqEg8yAKtyqTzXYyLk7f3mjdY6TvqCb6rl4Ks7YAB+2ZWG0Y1f37Po
xjGGUE134ziMwf9lYEV5pW5gcxVVFVrNbQeXc3QABoRtKE1Tecx9pE426Fwtk27S
UhB3akFzdp90rv7kHwlBVkmAZ5DtJO4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:28 2026 by rpki-client