Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa
File:                     8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa (raw, json)
Hash identifier:          XNzESfU8wzsLi1rNBCyt7o6Nhxi/H0DKxwYofxqxE+Q=
Subject key identifier:   81:EC:BF:3E:E2:3E:48:C4:D2:F3:9F:D7:34:50:87:29:6C:E0:5D:A9
Certificate issuer:       /CN=affa716b-9631-4506-aee5-dc69f79f9fca
Certificate serial:       010D0C9F4328584E104ED3BB2081C16D72FD04C0
Authority key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        23.141.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d3:bb:20:81:c1:6d:72:fd:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affa716b-9631-4506-aee5-dc69f79f9fca
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=54f5a572-6033-44a8-9560-f025353c6ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:94:3f:7a:c7:6e:39:e0:83:97:45:21:85:
                    a8:e3:41:67:57:ac:45:86:5f:62:45:83:33:d7:b1:
                    95:a9:42:66:51:dc:16:de:78:86:69:57:c5:0b:6c:
                    e4:9b:37:8b:9a:76:0b:15:f3:34:33:17:51:1c:b1:
                    d8:bf:4c:22:37:2d:b3:1e:bb:05:c6:ea:64:84:bb:
                    4c:a0:6e:94:ad:95:a9:c8:14:b9:06:a3:89:9e:89:
                    1f:02:c3:07:4e:95:66:6e:b7:d6:f8:97:af:6e:08:
                    df:24:bd:69:3b:20:fd:d0:ed:92:01:fa:69:31:08:
                    98:40:04:b2:20:1c:35:00:94:f0:4e:f9:92:10:62:
                    0e:ed:2e:5a:62:36:2f:0d:c1:82:15:91:5c:e9:bb:
                    39:b4:16:f1:12:e1:b8:d9:b3:04:87:d9:bc:78:a7:
                    02:4c:4e:62:b4:44:65:ef:81:d6:5f:4b:fe:21:5b:
                    b0:39:da:1e:26:8c:56:2e:0d:23:ad:83:77:2c:e9:
                    ec:9c:4b:5c:b5:61:82:d2:4a:2d:fa:a7:f5:f5:ef:
                    07:2b:43:9e:4b:6d:ca:15:73:6f:1b:a2:d7:c7:b7:
                    68:fa:cf:4f:6b:1e:bf:b4:1e:91:37:e7:08:b7:a7:
                    7b:eb:1f:b5:46:fa:c9:2e:51:92:75:93:a7:c2:13:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:BF:3E:E2:3E:48:C4:D2:F3:9F:D7:34:50:87:29:6C:E0:5D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl

            X509v3 Authority Key Identifier:
                keyid:29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:62:f8:c9:d3:81:6f:57:6c:6f:12:62:96:b3:bd:10:10:
         bf:10:eb:4f:7f:29:47:1b:c8:8f:5d:2e:b3:e7:cb:8e:74:e7:
         43:f3:68:9d:fc:9e:37:36:0a:28:d3:8c:3e:20:8f:06:3e:18:
         77:fa:5a:6f:43:86:e5:86:bd:c3:54:dd:a5:5e:7d:04:c2:6d:
         8b:8f:33:7c:8d:6b:9b:53:27:b8:ec:d1:e0:d4:e7:86:01:f2:
         2c:62:95:6e:de:92:50:76:7e:26:f9:ee:f7:03:fc:5a:ca:d2:
         5a:c0:d9:50:3f:9d:a7:37:05:8e:9e:01:bc:5f:ab:b9:9a:b5:
         30:1f:6e:20:6e:12:ac:62:61:8e:8e:7b:51:29:ca:e7:42:95:
         be:f4:ef:06:8f:30:c8:6b:36:b5:67:57:39:55:e7:6d:78:be:
         ce:d7:f8:59:3b:af:07:7c:91:2b:32:bf:4d:b8:5e:c9:2f:80:
         31:e9:8b:f3:80:c5:79:f1:23:7e:01:67:55:07:f3:59:d8:75:
         36:3f:ef:0f:f4:8c:6b:40:73:87:1f:09:aa:f4:a9:01:16:23:
         ef:a6:4e:ee:1d:42:3b:a4:1e:15:22:50:a3:8c:65:ab:b5:71:
         78:99:bb:f1:45:4e:ba:7e:71:bf:12:2f:2a:8a:00:f3:63:12:
         a0:11:45:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTtO7IIHBbXL9BMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5
ZmNhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NTRmNWE1NzItNjAzMy00NGE4LTk1NjAtZjAyNTM1M2M2YWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTOUP3rHbjngg5dFIYWo40FnV6xFhl9iRYMz
17GVqUJmUdwW3niGaVfFC2zkmzeLmnYLFfM0MxdRHLHYv0wiNy2zHrsFxupkhLtM
oG6UrZWpyBS5BqOJnokfAsMHTpVmbrfW+JevbgjfJL1pOyD90O2SAfppMQiYQASy
IBw1AJTwTvmSEGIO7S5aYjYvDcGCFZFc6bs5tBbxEuG42bMEh9m8eKcCTE5itERl
74HWX0v+IVuwOdoeJoxWLg0jrYN3LOnsnEtctWGC0kot+qf19e8HK0OeS23KFXNv
G6LXx7do+s9Pax6/tB6RN+cIt6d76x+1RvrJLlGSdZOnwhNzBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHsvz7iPkjE0vOf1zRQhyls4F2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZh
NzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvOGQzMTNiNDktOTkyYi0z
MGJiLTk0ZjctYTZkOGQ2MzVmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWZmYTcxNmItOTYzMS00NTA2LWFl
ZTUtZGM2OWY3OWY5ZmNhL2FmZmE3MTZiLTk2MzEtNDUwNi1hZWU1LWRjNjlmNzlm
OWZjYS5jcmwwHwYDVR0jBBgwFoAUKRmCCLh2XVuuuS4Q2ozL8pN/oskwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5
Zjc5ZjlmY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcKYvjJ04FvV2xvEmKWs70QEL8Q609/KUcbyI9dLrPny45050PzaJ38
njc2CijTjD4gjwY+GHf6Wm9DhuWGvcNU3aVefQTCbYuPM3yNa5tTJ7js0eDU54YB
8ixilW7eklB2fib57vcD/FrK0lrA2VA/nac3BY6eAbxfq7matTAfbiBuEqxiYY6O
e1EpyudClb707waPMMhrNrVnVzlV5214vs7X+Fk7rwd8kSsyv024XskvgDHpi/OA
xXnxI34BZ1UH81nYdTY/7w/0jGtAc4cfCar0qQEWI++mTu4dQjukHhUiUKOMZau1
cXiZu/FFTrp+cb8SLyqKAPNjEqARRbQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:42 2026 by rpki-client