Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b26ef-0a22-3cf9-ad44-048c6168fc69.roa
File:                     bf0b26ef-0a22-3cf9-ad44-048c6168fc69.roa (raw, json)
Hash identifier:          tM9r0on+FWyKDJePNwTkfQfwbncAfOpb06M86rIwtN0=
Subject key identifier:   4D:89:C0:72:A3:8A:93:CC:C9:6A:BB:A8:F4:B3:D9:C5:5B:DC:10:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D67DFF73BCCA7415AE512B280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b26ef-0a22-3cf9-ad44-048c6168fc69.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     20940
IP address blocks:        23.36.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f7:3b:cc:a7:41:5a:e5:12:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=6f97996e-7406-44f3-97d8-4ada23a376cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:5c:bc:f5:ad:38:f1:ef:32:43:84:00:8d:
                    40:95:16:df:07:b6:cf:d1:e3:88:7f:9e:56:7b:ca:
                    c3:41:88:ab:bd:92:7b:21:43:84:c9:4f:cf:4e:d6:
                    39:18:49:8e:01:d6:02:05:a2:a8:63:1d:65:2f:e6:
                    af:a5:87:4d:f9:c4:02:cf:eb:c6:b2:1d:e3:4c:74:
                    e1:69:ad:d4:36:e4:6b:b6:89:b2:ff:4e:9c:23:1c:
                    51:39:55:cf:df:e3:a1:68:8c:d9:d8:ae:78:a9:45:
                    20:6e:1c:9e:ca:bf:10:2a:83:94:10:89:75:d4:21:
                    d9:b8:d6:6f:c3:e4:9c:c7:4f:d7:8c:f0:12:19:44:
                    a6:6a:4b:5c:71:9f:d8:f1:ea:1d:3e:27:be:ef:53:
                    e8:20:54:16:75:f5:11:70:6d:d7:91:17:0e:0d:63:
                    47:06:0e:fe:f2:13:f0:50:8e:25:2a:2d:11:eb:c9:
                    b4:82:5f:c7:96:fc:52:aa:f8:1c:86:d3:ea:51:28:
                    22:8e:1a:ab:52:3a:33:90:54:56:df:2d:69:ad:6d:
                    d4:b7:17:0f:6a:9f:ff:fa:3b:5c:2e:99:bc:27:86:
                    75:c9:42:54:14:18:53:b6:bd:57:45:22:53:56:fe:
                    08:77:f6:bf:ec:df:be:dc:99:7d:9d:27:ae:0a:67:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:C0:72:A3:8A:93:CC:C9:6A:BB:A8:F4:B3:D9:C5:5B:DC:10:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b26ef-0a22-3cf9-ad44-048c6168fc69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:3e:c7:df:37:23:53:64:60:93:28:a5:9a:c4:d6:46:d7:
         f6:0a:bb:58:7c:f1:28:ce:b2:3f:3b:57:0b:85:75:a2:66:5d:
         9a:84:7e:0d:99:c1:a3:f6:7e:b8:48:73:6e:81:24:20:75:a7:
         3b:0b:5a:ee:b4:4c:d1:33:3c:09:dd:3e:ca:72:b7:5b:d4:9e:
         47:33:8f:76:ce:b4:61:bf:9b:70:68:3a:ef:53:70:28:0a:d8:
         f2:6e:43:9a:dc:08:f7:bb:85:ad:36:83:d0:9a:5e:d4:5c:9a:
         6f:f2:c2:8f:c8:39:1e:ce:0a:e0:d5:3f:b6:54:d4:12:09:56:
         1b:f0:61:b0:b7:25:d2:92:73:23:b2:dc:15:ce:c7:13:b3:fc:
         92:80:69:5e:09:62:d1:03:0e:38:75:ad:e5:ce:52:12:7a:34:
         3e:c7:0a:a1:73:10:c7:1c:b8:20:d7:1a:33:1d:b6:be:8b:f4:
         0c:46:cc:eb:27:81:0a:c4:17:cc:29:b6:30:8e:fd:89:6f:b7:
         98:75:a9:d4:94:f0:d4:18:af:eb:00:b5:c5:ea:c5:23:88:ab:
         ff:82:e1:ab:25:64:0e:ca:1d:07:04:41:84:25:6a:b5:39:cc:
         02:ca:b3:cc:6e:2f:fb:b2:2a:fe:28:76:22:dd:12:22:07:af:
         88:7e:16:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/c7zKdBWuUSsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NmY5Nzk5NmUtNzQwNi00NGYzLTk3ZDgtNGFkYTIzYTM3NmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKpcvPWtOPHvMkOEAI1AlRbfB7bP0eOIf55W
e8rDQYirvZJ7IUOEyU/PTtY5GEmOAdYCBaKoYx1lL+avpYdN+cQCz+vGsh3jTHTh
aa3UNuRrtomy/06cIxxROVXP3+OhaIzZ2K54qUUgbhyeyr8QKoOUEIl11CHZuNZv
w+Scx0/XjPASGUSmaktccZ/Y8eodPie+71PoIFQWdfURcG3XkRcODWNHBg7+8hPw
UI4lKi0R68m0gl/HlvxSqvgchtPqUSgijhqrUjozkFRW3y1prW3UtxcPap//+jtc
Lpm8J4Z1yUJUFBhTtr1XRSJTVv4Id/a/7N++3Jl9nSeuCmexCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2JwHKjipPMyWq7qPSz2cVb3BDSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYwYjI2ZWYtMGEyMi0z
Y2Y5LWFkNDQtMDQ4YzYxNjhmYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyS2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvuPsffNyNTZGCTKKWaxNZG1/YKu1h88SjOsj87VwuFdaJmXZqEfg2Z
waP2frhIc26BJCB1pzsLWu60TNEzPAndPspyt1vUnkczj3bOtGG/m3BoOu9TcCgK
2PJuQ5rcCPe7ha02g9CaXtRcmm/ywo/IOR7OCuDVP7ZU1BIJVhvwYbC3JdKScyOy
3BXOxxOz/JKAaV4JYtEDDjh1reXOUhJ6ND7HCqFzEMccuCDXGjMdtr6L9AxGzOsn
gQrEF8wptjCO/Ylvt5h1qdSU8NQYr+sAtcXqxSOIq/+C4aslZA7KHQcEQYQlarU5
zALKs8xuL/uyKv4odiLdEiIHr4h+Fm0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:04:06 2026 by rpki-client