Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/338205ed-7579-3732-a482-3ff43065dc18.roa
File:                     338205ed-7579-3732-a482-3ff43065dc18.roa (raw, json)
Hash identifier:          MtH/HhXg1oCBFq9h5p689FDaB9wipbE6hSCXqs2y7Lo=
Subject key identifier:   E5:2B:48:36:B3:05:D5:87:F5:04:22:C9:49:29:B4:96:E6:65:F1:F9
Certificate issuer:       /CN=378b7013-c3d2-4f2d-b8a8-0cd979b52868
Certificate serial:       010D0C9F4328584D7043063F945CA566DCC5A880
Authority key identifier: 0E:D9:9A:8C:9A:14:B0:5C:73:17:B9:C3:F2:72:70:E7:DC:FB:E7:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/338205ed-7579-3732-a482-3ff43065dc18.roa
Signing time:             Wed 08 Apr 2026 13:07:09 +0000
ROA not before:           Wed 08 Apr 2026 13:07:09 +0000
ROA not after:            Tue 07 Jul 2026 13:07:09 +0000
asID:                     15054
IP address blocks:        23.236.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/378b7013-c3d2-4f2d-b8a8-0cd979b52868.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/378b7013-c3d2-4f2d-b8a8-0cd979b52868.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:43:06:3f:94:5c:a5:66:dc:c5:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378b7013-c3d2-4f2d-b8a8-0cd979b52868
        Validity
            Not Before: Apr  8 13:07:09 2026 GMT
            Not After : Jul  7 13:07:09 2026 GMT
        Subject: CN=9df3c222-deea-4fba-8ceb-c0d09400d66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:31:05:ef:13:0b:22:39:9d:9f:5d:56:fb:
                    2e:f6:2d:45:af:78:9b:34:1d:22:15:45:e5:1e:da:
                    1a:0d:21:a8:c1:d6:b0:eb:21:b9:67:ea:4d:2a:1a:
                    12:f2:90:2d:0a:8e:3b:2a:e0:b1:38:f4:c5:dc:96:
                    8c:4b:55:57:a0:cf:0b:73:24:ef:9d:a7:36:ba:73:
                    a7:51:94:54:46:fc:7d:99:44:d6:4b:28:18:a5:41:
                    8e:2e:5a:d5:f7:86:70:0b:a6:fe:59:ed:2a:09:92:
                    13:7d:6e:09:6b:c7:07:29:3d:0a:0a:78:21:f7:c0:
                    a2:0c:c3:a3:2f:65:8f:b1:ec:8f:8f:98:5d:8a:87:
                    40:0a:f7:d5:23:b9:cf:e3:22:f4:bd:41:88:8b:70:
                    bf:15:04:59:ed:de:65:4a:14:12:b7:23:65:49:d8:
                    06:30:86:8e:9f:8e:ab:96:22:00:d4:29:f1:96:56:
                    df:b5:5c:08:b9:6f:96:f1:75:31:bb:8a:61:48:44:
                    20:99:ff:1f:f9:a7:c5:23:7c:7e:49:b7:53:21:62:
                    7e:71:e1:c7:8f:4e:a8:ad:77:89:ed:be:43:49:c1:
                    65:57:fa:2f:11:a1:2a:5e:ff:6f:49:34:53:f6:c0:
                    e1:e5:3d:f0:ce:7f:38:ed:81:4b:d0:c8:66:c0:d1:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:48:36:B3:05:D5:87:F5:04:22:C9:49:29:B4:96:E6:65:F1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/338205ed-7579-3732-a482-3ff43065dc18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868/378b7013-c3d2-4f2d-b8a8-0cd979b52868.crl

            X509v3 Authority Key Identifier:
                keyid:0E:D9:9A:8C:9A:14:B0:5C:73:17:B9:C3:F2:72:70:E7:DC:FB:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/378b7013-c3d2-4f2d-b8a8-0cd979b52868.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:92:9e:7b:6e:07:fb:eb:67:94:df:4c:90:1d:0d:35:d0:
         8c:97:11:36:fb:a2:2b:75:7b:78:ff:9f:ca:74:29:1a:00:bb:
         3a:88:da:1f:d0:8e:d2:d5:d3:b7:eb:b3:d8:03:51:b8:fb:0f:
         dd:de:a3:61:1f:84:27:01:90:eb:c8:dd:cf:57:71:67:b4:54:
         03:db:57:13:d0:b9:a6:5a:87:db:d7:cf:b4:90:56:50:8d:30:
         a6:88:ec:82:a6:37:52:b8:8e:27:57:32:ae:1a:99:a1:0a:0b:
         d9:8d:2a:eb:2b:14:2f:cb:fa:de:4a:10:74:e2:53:f0:4f:fc:
         34:e5:54:2f:9b:9f:a9:6e:96:e2:e7:e0:9f:12:a9:04:89:6e:
         22:a0:f0:76:0c:fb:18:b3:a4:8d:76:57:64:2a:38:10:17:93:
         b3:cd:3b:98:8c:57:6f:71:4d:a6:f8:a5:5d:3b:3e:1a:8a:9d:
         c1:0d:7c:46:08:f3:be:62:05:e9:65:ce:5d:fe:54:b3:fe:d7:
         74:6f:8b:9b:9c:85:97:09:e5:62:87:e9:38:c9:99:e3:c3:f0:
         ee:a5:c0:91:05:2c:66:8b:97:87:57:c2:9c:2e:48:63:e9:0d:
         93:26:5a:b5:f0:d3:7e:2b:2d:3d:c1:fe:f6:16:ea:b7:32:ef:
         1f:18:25:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wQwY/lFylZtzFqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc4YjcwMTMtYzNkMi00ZjJkLWI4YTgtMGNkOTc5YjUy
ODY4MB4XDTI2MDQwODEzMDcwOVoXDTI2MDcwNzEzMDcwOVowLzEtMCsGA1UEAxMk
OWRmM2MyMjItZGVlYS00ZmJhLThjZWItYzBkMDk0MDBkNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNIxBe8TCyI5nZ9dVvsu9i1Fr3ibNB0iFUXl
HtoaDSGowdaw6yG5Z+pNKhoS8pAtCo47KuCxOPTF3JaMS1VXoM8LcyTvnac2unOn
UZRURvx9mUTWSygYpUGOLlrV94ZwC6b+We0qCZITfW4Ja8cHKT0KCngh98CiDMOj
L2WPseyPj5hdiodACvfVI7nP4yL0vUGIi3C/FQRZ7d5lShQStyNlSdgGMIaOn46r
liIA1CnxllbftVwIuW+W8XUxu4phSEQgmf8f+afFI3x+SbdTIWJ+ceHHj06orXeJ
7b5DScFlV/ovEaEqXv9vSTRT9sDh5T3wzn847YFL0MhmwNHGEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUrSDazBdWH9QQiyUkptJbmZfH5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzhi
NzAxMy1jM2QyLTRmMmQtYjhhOC0wY2Q5NzliNTI4NjgvMzM4MjA1ZWQtNzU3OS0z
NzMyLWE0ODItM2ZmNDMwNjVkYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzc4YjcwMTMtYzNkMi00ZjJkLWI4
YTgtMGNkOTc5YjUyODY4LzM3OGI3MDEzLWMzZDItNGYyZC1iOGE4LTBjZDk3OWI1
Mjg2OC5jcmwwHwYDVR0jBBgwFoAUDtmajJoUsFxzF7nD8nJw59z7540wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzhiNzAxMy1jM2QyLTRmMmQtYjhhOC0wY2Q5
NzliNTI4NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+xQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7Ikp57bgf762eU30yQHQ010IyXETb7oit1e3j/n8p0KRoAuzqI2h/Q
jtLV07frs9gDUbj7D93eo2EfhCcBkOvI3c9XcWe0VAPbVxPQuaZah9vXz7SQVlCN
MKaI7IKmN1K4jidXMq4amaEKC9mNKusrFC/L+t5KEHTiU/BP/DTlVC+bn6luluLn
4J8SqQSJbiKg8HYM+xizpI12V2QqOBAXk7PNO5iMV29xTab4pV07PhqKncENfEYI
875iBellzl3+VLP+13Rvi5uchZcJ5WKH6TjJmePD8O6lwJEFLGaLl4dXwpwuSGPp
DZMmWrXw034rLT3B/vYW6rcy7x8YJSY=
-----END CERTIFICATE-----
Generated at Thu Apr 9 01:19:09 2026 by rpki-client