Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa
File:                     29733abc-0bd0-361c-a8a5-18f43037e30b.roa (raw, json)
Hash identifier:          NkdTcdFoRh5rKyLtcc/dJlF5a+cusMNH3qsrTe7gfKw=
Subject key identifier:   C0:D3:A5:7E:CA:1D:12:09:F5:AF:53:56:98:56:43:F3:1E:97:65:CD
Certificate issuer:       /CN=d746a902-1ae2-430e-a925-eb91da1ee600
Certificate serial:       010D0C9F4328584E147EED1F0049ECB2BA98BD00
Authority key identifier: 3B:0A:9A:00:67:FC:F9:95:FE:DA:D3:B5:9D:0C:6E:8C:13:DE:2D:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     402259
IP address blocks:        23.154.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:ed:1f:00:49:ec:b2:ba:98:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d746a902-1ae2-430e-a925-eb91da1ee600
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=128c5a1c-bd01-4a7d-b364-3179ae23e92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:52:7b:d2:6c:d2:c4:93:9e:d5:5c:9b:d2:
                    9a:c1:ac:18:43:01:c0:0d:42:92:26:f4:5d:6e:c6:
                    42:a0:d0:60:b9:c9:17:5c:7b:84:b5:0b:2d:e7:10:
                    df:fe:8d:61:c0:34:8c:c4:7e:33:46:25:86:a5:94:
                    df:15:a8:77:53:d1:89:48:9c:33:5c:4b:f6:bb:86:
                    4e:f1:a0:41:39:34:77:4e:87:f7:4a:98:42:fd:67:
                    a6:c5:20:b8:e1:61:6b:3c:70:b6:0e:38:73:93:06:
                    84:f0:bd:60:fe:a4:f6:5d:3e:d9:fa:16:43:45:c6:
                    da:9e:70:29:84:9c:fe:25:6b:32:1e:f8:0b:3d:5d:
                    77:83:c9:df:3e:76:d2:bb:9c:67:82:fc:e7:36:9d:
                    9d:9d:cb:86:d2:bd:f0:12:43:da:62:01:1b:46:a0:
                    69:7f:e4:03:d2:ee:4a:47:58:cb:e3:99:f5:d4:78:
                    12:d4:73:d0:d6:2c:05:b3:c2:ef:ae:de:2a:72:d7:
                    e4:21:84:36:f3:35:2b:4f:22:f5:40:00:be:70:f4:
                    1e:69:66:ee:8b:20:cc:7a:b1:06:71:e5:7b:f4:f6:
                    49:0b:bc:41:a0:ba:83:68:0e:cb:6c:e7:81:67:52:
                    51:06:30:e6:ee:cd:91:e0:f4:85:7f:72:0d:05:aa:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D3:A5:7E:CA:1D:12:09:F5:AF:53:56:98:56:43:F3:1E:97:65:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/29733abc-0bd0-361c-a8a5-18f43037e30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600/d746a902-1ae2-430e-a925-eb91da1ee600.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:9A:00:67:FC:F9:95:FE:DA:D3:B5:9D:0C:6E:8C:13:DE:2D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d746a902-1ae2-430e-a925-eb91da1ee600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:6f:32:27:a0:99:cf:a1:e9:8e:ba:e6:76:15:35:f4:82:
         72:b9:fe:be:5c:59:b5:d6:79:11:d0:3b:8a:1d:d6:fc:3e:f9:
         b6:c1:a3:ab:6e:6e:f7:48:03:c4:e4:6d:61:75:ee:26:7b:38:
         a6:43:85:d1:dc:68:5a:6c:c6:2c:46:65:ea:7c:68:d7:b5:60:
         3a:17:a3:dd:69:22:a7:83:d8:ae:0b:dc:a7:47:37:e3:bd:60:
         a5:ad:3c:50:28:28:8f:87:f3:ea:5a:1d:53:f4:6b:e0:08:56:
         9c:ba:e2:d9:54:da:a5:16:be:23:ba:1b:cc:8b:8f:c8:a3:45:
         24:80:a7:74:09:dc:fe:4f:7f:81:b5:cd:c8:a1:20:40:f4:44:
         15:f8:c0:86:ed:13:8b:2f:a2:6d:18:90:7f:cb:9f:60:a4:ad:
         4b:18:92:85:0a:09:58:03:87:ea:e4:3d:51:c3:0c:15:c7:e6:
         e5:35:53:0e:10:a7:a4:e0:4d:d9:48:66:67:2e:86:2d:2d:dc:
         da:7b:7e:2e:a8:ea:bb:39:f1:ec:74:24:aa:54:4d:3c:19:b2:
         a2:5a:9a:36:de:f4:19:fa:51:7f:1a:14:64:3a:e2:20:40:3a:
         15:0b:9d:bd:a7:95:18:73:4e:c4:de:d4:9e:c2:bb:e7:28:67:
         b8:7c:5d:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ufu0fAEnssrqYvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDc0NmE5MDItMWFlMi00MzBlLWE5MjUtZWI5MWRhMWVl
NjAwMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
MTI4YzVhMWMtYmQwMS00YTdkLWIzNjQtMzE3OWFlMjNlOTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8pSe9Js0sSTntVcm9KawawYQwHADUKSJvRd
bsZCoNBguckXXHuEtQst5xDf/o1hwDSMxH4zRiWGpZTfFah3U9GJSJwzXEv2u4ZO
8aBBOTR3Tof3SphC/WemxSC44WFrPHC2DjhzkwaE8L1g/qT2XT7Z+hZDRcbannAp
hJz+JWsyHvgLPV13g8nfPnbSu5xngvznNp2dncuG0r3wEkPaYgEbRqBpf+QD0u5K
R1jL45n11HgS1HPQ1iwFs8Lvrt4qctfkIYQ28zUrTyL1QAC+cPQeaWbuiyDMerEG
ceV79PZJC7xBoLqDaA7LbOeBZ1JRBjDm7s2R4PSFf3INBaoGeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDTpX7KHRIJ9a9TVphWQ/Mel2XNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNzQ2
YTkwMi0xYWUyLTQzMGUtYTkyNS1lYjkxZGExZWU2MDAvMjk3MzNhYmMtMGJkMC0z
NjFjLWE4YTUtMThmNDMwMzdlMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDc0NmE5MDItMWFlMi00MzBlLWE5
MjUtZWI5MWRhMWVlNjAwL2Q3NDZhOTAyLTFhZTItNDMwZS1hOTI1LWViOTFkYTFl
ZTYwMC5jcmwwHwYDVR0jBBgwFoAUOwqaAGf8+ZX+2tO1nQxujBPeLdowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNzQ2YTkwMi0xYWUyLTQzMGUtYTkyNS1lYjkx
ZGExZWU2MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfPbzInoJnPoemOuuZ2FTX0gnK5/r5cWbXWeRHQO4od1vw++bbBo6tu
bvdIA8TkbWF17iZ7OKZDhdHcaFpsxixGZep8aNe1YDoXo91pIqeD2K4L3KdHN+O9
YKWtPFAoKI+H8+paHVP0a+AIVpy64tlU2qUWviO6G8yLj8ijRSSAp3QJ3P5Pf4G1
zcihIED0RBX4wIbtE4svom0YkH/Ln2CkrUsYkoUKCVgDh+rkPVHDDBXH5uU1Uw4Q
p6TgTdlIZmcuhi0t3Np7fi6o6rs58ex0JKpUTTwZsqJamjbe9Bn6UX8aFGQ64iBA
OhULnb2nlRhzTsTe1J7Cu+coZ7h8Xa4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:03 2026 by rpki-client