Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa
File:                     d007c34d-200e-36cf-82e4-f2b38f2075de.roa (raw, json)
Hash identifier:          mhHR6cFO1vBcVkY1SP1FUqyAvayvO+U0QFfp0yotAlo=
Subject key identifier:   49:58:9E:18:A0:7E:9B:ED:11:15:41:65:B1:0B:4C:B9:83:12:9B:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4F0825B4683E469269CB7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.219.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:25:b4:68:3e:46:92:69:cb:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=4acd4722-a1a1-4716-8218-ad4c53c63458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:d5:d3:90:06:e4:d3:3b:df:d8:90:ab:48:
                    30:dd:bb:6f:d4:d1:e1:8c:9b:13:57:d0:b1:15:6c:
                    45:3a:ba:b5:7e:73:a3:55:83:e9:ad:f1:ca:a3:4f:
                    d4:f7:e3:20:32:4d:97:75:f8:5c:a1:ab:0f:e6:c2:
                    bf:66:a9:b0:18:1a:75:44:9b:ff:0f:7e:ed:fd:6b:
                    47:64:42:b2:21:69:5e:2a:ef:6e:8e:18:ef:1e:a1:
                    e9:32:9b:e8:93:ea:78:45:5e:1b:77:83:4a:44:ff:
                    bb:9b:0f:9f:6c:d5:1c:0b:59:f0:51:40:c0:01:ee:
                    ce:37:c5:f7:5c:39:52:b5:f2:b3:b2:5f:c4:d9:de:
                    70:22:a1:e2:cc:b5:99:ab:b6:30:c8:10:66:5a:b3:
                    c0:43:ba:f8:fe:8b:83:c8:ad:a8:7c:2f:64:9a:18:
                    0b:3c:93:11:43:d0:88:de:90:a3:84:e8:ae:cf:85:
                    9b:54:6c:ff:1e:bf:49:a8:cd:21:db:98:97:ed:f4:
                    78:ee:0c:8b:bc:59:5b:5b:3f:8a:bb:f0:ca:be:d3:
                    1e:21:78:6f:db:a3:44:d2:8e:d3:e6:ff:a8:29:ad:
                    af:77:bd:9a:15:1e:e2:0b:6b:2b:c0:01:4f:74:91:
                    0c:11:a8:5e:28:44:32:8e:95:8a:33:50:6c:4f:17:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:9E:18:A0:7E:9B:ED:11:15:41:65:B1:0B:4C:B9:83:12:9B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d007c34d-200e-36cf-82e4-f2b38f2075de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:a0:d8:ae:a6:1c:a2:2a:9d:de:07:d6:42:ad:a7:73:c6:
         e9:85:67:43:6c:b8:7a:5f:9c:53:5d:8f:f6:5b:e0:b0:59:90:
         b4:e6:71:4d:59:e0:7b:ad:80:00:d6:37:cd:e1:62:65:97:2b:
         30:5a:98:1d:5d:51:d8:25:0e:ff:7c:54:9f:a2:57:84:3b:8d:
         06:53:b0:b6:2e:f6:3c:fe:41:68:eb:d8:38:79:f6:67:1d:86:
         b5:60:80:6b:71:b6:f6:36:fd:41:48:e2:17:c2:3d:db:67:ee:
         7e:6d:dc:f9:9b:a1:06:9d:8b:c3:46:c5:ce:f9:db:08:9e:ab:
         25:09:d5:f9:5d:2f:4f:e5:68:65:8d:1d:b2:0e:bc:8f:0c:db:
         c6:10:ec:7e:99:eb:9b:f4:7a:49:9e:3a:da:47:05:31:f1:3d:
         73:71:a3:11:58:e2:4d:d5:b3:ad:32:53:ec:e5:18:79:5f:4b:
         8d:ff:b0:a6:88:49:5a:3d:6b:5f:4c:e5:07:31:8c:a3:fe:98:
         6f:18:e6:b1:53:fc:37:19:45:99:2e:2a:8f:ea:0a:d2:c8:fe:
         0a:2f:80:e0:f8:8c:43:2e:81:7a:2a:bd:18:10:65:5f:78:e0:
         f6:33:a6:4e:bb:fe:9a:4a:36:fd:1f:96:22:e5:d7:7b:a6:e9:
         82:81:8a:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCW0aD5GkmnLfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NGFjZDQ3MjItYTFhMS00NzE2LTgyMTgtYWQ0YzUzYzYzNDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fPV05AG5NM739iQq0gw3btv1NHhjJsTV9Cx
FWxFOrq1fnOjVYPprfHKo0/U9+MgMk2XdfhcoasP5sK/ZqmwGBp1RJv/D37t/WtH
ZEKyIWleKu9ujhjvHqHpMpvok+p4RV4bd4NKRP+7mw+fbNUcC1nwUUDAAe7ON8X3
XDlStfKzsl/E2d5wIqHizLWZq7YwyBBmWrPAQ7r4/ouDyK2ofC9kmhgLPJMRQ9CI
3pCjhOiuz4WbVGz/Hr9JqM0h25iX7fR47gyLvFlbWz+Ku/DKvtMeIXhv26NE0o7T
5v+oKa2vd72aFR7iC2srwAFPdJEMEaheKEQyjpWKM1BsTxee3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFElYnhigfpvtERVBZbELTLmDEpsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDAwN2MzNGQtMjAwZS0z
NmNmLTgyZTQtZjJiMzhmMjA3NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9sBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7EoNiuphyiKp3eB9ZCradzxumFZ0NsuHpfnFNdj/Zb4LBZkLTmcU1Z
4HutgADWN83hYmWXKzBamB1dUdglDv98VJ+iV4Q7jQZTsLYu9jz+QWjr2Dh59mcd
hrVggGtxtvY2/UFI4hfCPdtn7n5t3PmboQadi8NGxc752wieqyUJ1fldL0/laGWN
HbIOvI8M28YQ7H6Z65v0ekmeOtpHBTHxPXNxoxFY4k3Vs60yU+zlGHlfS43/sKaI
SVo9a19M5QcxjKP+mG8Y5rFT/DcZRZkuKo/qCtLI/govgOD4jEMugXoqvRgQZV94
4PYzpk67/ppKNv0fliLl13um6YKBiuA=
-----END CERTIFICATE-----
Generated at Wed Oct 7 17:08:03 2026 by rpki-client