Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
File:                     3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa (raw, json)
Hash identifier:          LQb16ZJMuIDYe//SekS+7oSfD4Kuh9KKIKAmyi+LKcU=
Subject key identifier:   64:34:DF:B7:FD:55:0C:F5:37:EC:B4:3B:5E:8D:83:A7:49:04:C6:F0
Certificate issuer:       /CN=00742cea-2e97-42c0-9c46-fc566e540c74
Certificate serial:       010D0C9F4328584E0A6FEB6E24EF60DAC9DE24B0
Authority key identifier: D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     979
IP address blocks:        23.178.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:eb:6e:24:ef:60:da:c9:de:24:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00742cea-2e97-42c0-9c46-fc566e540c74
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=a06891d1-7b1e-448e-b759-e2f500141d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:52:fd:31:b3:0b:a7:d3:e6:83:e6:9b:c9:
                    6e:cc:a8:cb:28:34:63:a0:31:d9:62:67:89:5e:12:
                    e8:9f:a2:d8:91:83:78:83:1e:5e:47:fb:c6:c3:86:
                    e6:20:1f:e5:cc:c2:36:9e:93:d7:d2:b4:ed:32:0d:
                    7a:23:bf:67:40:56:b2:ea:fd:55:35:81:b4:c1:be:
                    c4:91:d0:5d:b8:ff:d6:31:26:76:e7:29:65:1d:2a:
                    6b:4f:df:20:20:c8:8e:29:a2:16:f7:70:74:e1:39:
                    d2:87:d2:c8:f9:9b:b1:ad:e4:44:df:15:ef:f6:cc:
                    a3:61:1e:99:e8:e4:60:58:ec:c5:ad:29:1b:08:32:
                    27:37:9b:63:be:d8:65:15:ef:25:61:f6:35:3b:7c:
                    2d:19:c0:a2:fc:48:75:6a:22:fb:b0:3b:6c:4d:f0:
                    b1:6b:e9:02:56:0c:90:2f:dd:6e:0e:bf:08:ab:18:
                    3e:52:7d:63:13:46:f0:25:e9:53:0a:52:16:30:c5:
                    85:03:ec:1a:c1:b5:14:49:ae:ae:88:1b:47:21:35:
                    5c:5d:08:b4:fc:f8:23:fe:7d:30:3c:65:b6:99:c4:
                    8b:45:f7:9f:53:49:3b:a2:c9:e0:65:d9:95:54:25:
                    b6:79:a2:b9:5b:66:58:30:9a:5a:12:7f:d8:0d:fb:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:34:DF:B7:FD:55:0C:F5:37:EC:B4:3B:5E:8D:83:A7:49:04:C6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/3a89a40b-b238-336c-a61e-2ecc5e830d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74/00742cea-2e97-42c0-9c46-fc566e540c74.crl

            X509v3 Authority Key Identifier:
                keyid:D8:AD:EB:65:7A:D1:A0:E6:9A:BF:DF:F9:31:FC:27:A8:32:1C:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/00742cea-2e97-42c0-9c46-fc566e540c74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:26:92:b8:7a:e2:e6:7c:3f:ad:3d:94:b7:39:80:37:73:4f:
         be:c2:76:ff:0b:42:0a:89:33:01:5a:fc:96:40:af:1d:67:ec:
         91:8f:a8:9f:aa:bb:3a:c9:eb:a3:bc:11:58:82:b7:4d:cd:65:
         48:81:32:20:df:88:ee:33:19:1e:cf:53:56:75:31:7c:a9:16:
         7f:54:c6:05:27:c0:3a:28:d8:55:27:66:0b:1c:a3:fd:92:7a:
         e6:54:9f:6d:90:62:af:eb:8e:38:af:be:7e:4c:b8:53:cb:1d:
         96:3b:c4:2a:c0:67:3a:fe:0b:13:81:92:64:f3:5f:93:bd:88:
         a4:5c:b9:a6:86:17:6d:50:66:ab:76:a5:ad:f8:0d:70:7f:27:
         17:11:0e:ce:db:86:a3:af:ea:f9:a4:0e:f4:0d:4b:dd:c9:0e:
         f6:ef:ce:37:09:ce:ed:74:53:c5:6f:55:19:e0:6b:08:7a:cb:
         fe:af:bf:8e:13:77:5f:5d:d4:a7:95:c9:bf:e4:7a:fd:1c:94:
         9c:37:af:06:a7:bb:87:4b:8c:46:37:74:4c:23:fd:31:bf:dd:
         42:68:b3:b3:d6:68:73:bf:66:84:0a:bf:e5:01:0d:56:97:f6:
         d3:9f:9b:aa:b3:ed:f7:65:01:15:32:9c:2e:9e:82:f5:1d:ae:
         67:82:75:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb+tuJO9g2sneJLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA3NDJjZWEtMmU5Ny00MmMwLTljNDYtZmM1NjZlNTQw
Yzc0MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
YTA2ODkxZDEtN2IxZS00NDhlLWI3NTktZTJmNTAwMTQxZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaFS/TGzC6fT5oPmm8luzKjLKDRjoDHZYmeJ
XhLon6LYkYN4gx5eR/vGw4bmIB/lzMI2npPX0rTtMg16I79nQFay6v1VNYG0wb7E
kdBduP/WMSZ25yllHSprT98gIMiOKaIW93B04TnSh9LI+ZuxreRE3xXv9syjYR6Z
6ORgWOzFrSkbCDInN5tjvthlFe8lYfY1O3wtGcCi/Eh1aiL7sDtsTfCxa+kCVgyQ
L91uDr8Iqxg+Un1jE0bwJelTClIWMMWFA+wawbUUSa6uiBtHITVcXQi0/Pgj/n0w
PGW2mcSLRfefU0k7osngZdmVVCW2eaK5W2ZYMJpaEn/YDftGfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ037f9VQz1N+y0O16Ng6dJBMbwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wMDc0
MmNlYS0yZTk3LTQyYzAtOWM0Ni1mYzU2NmU1NDBjNzQvM2E4OWE0MGItYjIzOC0z
MzZjLWE2MWUtMmVjYzVlODMwZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDA3NDJjZWEtMmU5Ny00MmMwLTlj
NDYtZmM1NjZlNTQwYzc0LzAwNzQyY2VhLTJlOTctNDJjMC05YzQ2LWZjNTY2ZTU0
MGM3NC5jcmwwHwYDVR0jBBgwFoAU2K3rZXrRoOaav9/5MfwnqDIcmY0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wMDc0MmNlYS0yZTk3LTQyYzAtOWM0Ni1mYzU2
NmU1NDBjNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7J4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMmkrh64uZ8P609lLc5gDdzT77Cdv8LQgqJMwFa/JZArx1n7JGPqJ+q
uzrJ66O8EViCt03NZUiBMiDfiO4zGR7PU1Z1MXypFn9UxgUnwDoo2FUnZgsco/2S
euZUn22QYq/rjjivvn5MuFPLHZY7xCrAZzr+CxOBkmTzX5O9iKRcuaaGF21QZqt2
pa34DXB/JxcRDs7bhqOv6vmkDvQNS93JDvbvzjcJzu10U8VvVRngawh6y/6vv44T
d19d1KeVyb/kev0clJw3rwanu4dLjEY3dEwj/TG/3UJos7PWaHO/ZoQKv+UBDVaX
9tOfm6qz7fdlARUynC6egvUdrmeCdag=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:58 2026 by rpki-client