Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa
File:                     d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (raw, json)
Hash identifier:          cL0EDH57NX7ymvaXIMC7Y79/YvuydpOGF77bR41ug8A=
Subject key identifier:   42:EE:A3:59:DD:3B:45:2E:59:BB:4A:DB:FC:1E:6B:30:DB:54:94:8A
Certificate issuer:       /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
Certificate serial:       010D0C9F4328584CB3EC6582B216167861483500
Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa
Signing time:             Sat 31 Jan 2026 02:00:32 +0000
ROA not before:           Sat 31 Jan 2026 02:00:32 +0000
ROA not after:            Fri 01 May 2026 01:00:32 +0000
asID:                     401454
IP address blocks:        23.147.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:ec:65:82:b2:16:16:78:61:48:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
        Validity
            Not Before: Jan 31 02:00:32 2026 GMT
            Not After : May  1 01:00:32 2026 GMT
        Subject: CN=079efb91-3ce4-4639-95f0-ddbddcf52f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:b0:2c:ba:b9:ae:06:aa:17:0d:e8:30:c6:
                    07:93:be:3a:a8:fe:fd:1d:75:25:c2:b3:97:c4:17:
                    de:c1:90:b8:2b:43:59:48:15:f2:b7:6b:b8:55:e8:
                    f0:3e:0f:6a:cf:e4:79:13:d1:60:64:68:dc:3a:9c:
                    69:e2:2d:0f:90:ec:a7:d1:9d:71:11:a0:f9:46:78:
                    8d:a8:f9:03:8c:aa:38:57:a9:88:cd:a3:a8:3f:79:
                    c2:11:12:0b:1c:53:f4:c5:fb:a7:c8:cb:92:1b:55:
                    81:91:32:5a:f3:cd:4d:1a:0b:81:d6:f7:cc:f3:2d:
                    b8:0f:c5:b5:67:d1:b6:ca:f5:86:f3:7d:1c:28:95:
                    84:c2:16:4e:5b:b6:fb:27:9e:9f:d9:e5:c2:ca:8e:
                    8e:90:2d:e0:7d:7e:50:d1:29:32:86:9b:06:4a:84:
                    09:30:83:5d:b2:5a:47:ea:52:62:7e:25:bc:c0:a5:
                    73:cd:39:ff:3f:5b:36:1a:3e:65:fd:99:bd:38:b5:
                    a6:d6:3e:da:5a:95:f5:11:93:b5:2c:40:a7:31:f8:
                    5e:56:99:1c:b2:04:06:68:7d:4a:ef:64:5b:36:c9:
                    f2:c7:f0:09:30:5c:ba:43:af:52:bf:e8:58:7f:30:
                    9d:b5:58:13:be:f6:31:c5:56:ed:7d:b7:a7:23:02:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EE:A3:59:DD:3B:45:2E:59:BB:4A:DB:FC:1E:6B:30:DB:54:94:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl

            X509v3 Authority Key Identifier:
                keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:91:53:51:93:1f:85:5a:17:6f:53:63:74:c6:3e:24:cd:
         1e:81:ac:2c:93:cb:a2:62:f6:e9:d9:d4:7d:21:9f:df:76:17:
         91:e7:5e:34:13:50:a4:1c:2b:95:bd:ed:a4:1f:1c:1e:a4:40:
         34:ed:36:32:ac:c0:e2:f2:dc:ba:72:52:5e:8a:70:98:f8:25:
         85:26:8c:de:35:53:d4:70:66:c9:2b:ea:05:bd:6f:0d:40:60:
         7a:c0:b3:aa:99:89:b5:d6:71:ad:ab:fa:a5:48:ac:76:f1:b7:
         11:ae:cf:fc:c2:ab:c4:f1:1a:6d:b2:f6:f2:e3:18:f3:40:a3:
         1c:f8:49:cb:09:83:89:c8:fd:0f:7d:69:a9:8c:d6:58:63:27:
         b5:44:1b:26:2a:2a:5d:e1:73:77:aa:5e:6f:79:4c:53:18:09:
         32:df:aa:4d:1f:61:12:de:e5:bf:72:6e:95:d8:9e:d3:a9:4d:
         6a:53:14:09:ca:44:fd:d9:ae:f7:bd:12:21:a7:29:bb:1c:3d:
         06:09:de:a1:a1:d3:5b:78:5e:2c:32:88:7e:1c:80:de:1e:94:
         b2:f4:63:45:50:7d:0d:7b:6f:0a:f7:95:9d:67:7b:c3:89:12:
         78:82:6d:b1:5e:32:d8:b4:ad:52:92:f6:c3:67:83:85:ef:ab:
         f8:d4:d3:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GWCshYWeGFINQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx
N2M2MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MDc5ZWZiOTEtM2NlNC00NjM5LTk1ZjAtZGRiZGRjZjUyZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYywLLq5rgaqFw3oMMYHk746qP79HXUlwrOX
xBfewZC4K0NZSBXyt2u4VejwPg9qz+R5E9FgZGjcOpxp4i0PkOyn0Z1xEaD5RniN
qPkDjKo4V6mIzaOoP3nCERILHFP0xfunyMuSG1WBkTJa881NGguB1vfM8y24D8W1
Z9G2yvWG830cKJWEwhZOW7b7J56f2eXCyo6OkC3gfX5Q0SkyhpsGSoQJMINdslpH
6lJifiW8wKVzzTn/P1s2Gj5l/Zm9OLWm1j7aWpX1EZO1LECnMfheVpkcsgQGaH1K
72RbNsnyx/AJMFy6Q69Sv+hYfzCdtVgTvvYxxVbtfbenIwL4tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELuo1ndO0UuWbtK2/weazDbVJSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh
NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvZDc4ZTc4NGItOGMwZC0z
NTY5LTk1YzQtOTRkZDgwYmEwYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1
ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz
MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0
ZDkwMzE3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuVkVNRkx+FWhdvU2N0xj4kzR6BrCyTy6Ji9unZ1H0hn992F5HnXjQT
UKQcK5W97aQfHB6kQDTtNjKswOLy3LpyUl6KcJj4JYUmjN41U9RwZskr6gW9bw1A
YHrAs6qZibXWca2r+qVIrHbxtxGuz/zCq8TxGm2y9vLjGPNAoxz4ScsJg4nI/Q99
aamM1lhjJ7VEGyYqKl3hc3eqXm95TFMYCTLfqk0fYRLe5b9ybpXYntOpTWpTFAnK
RP3Zrve9EiGnKbscPQYJ3qGh01t4XiwyiH4cgN4elLL0Y0VQfQ17bwr3lZ1ne8OJ
EniCbbFeMti0rVKS9sNng4Xvq/jU07w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:38 2026 by rpki-client