Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d407fdb-500e-3248-be33-7107d3a33d94.roa
File:                     4d407fdb-500e-3248-be33-7107d3a33d94.roa (raw, json)
Hash identifier:          IJAoI4pH9oY5YpuMluT5lkD/1F4BlsGntR4rwZpBfQQ=
Subject key identifier:   97:60:52:60:24:AA:02:BA:4D:95:43:28:A4:9F:DF:5D:29:B2:67:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA798270EEDD4219AC6DF9C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d407fdb-500e-3248-be33-7107d3a33d94.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.205.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:27:0e:ed:d4:21:9a:c6:df:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8438537c-1c83-40d3-bbdd-d7ebb2eafb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:72:de:c2:de:fb:01:5b:77:98:c8:4a:e8:
                    ab:66:bc:48:17:17:5b:78:c4:be:17:d4:96:b9:67:
                    2b:52:df:3c:b4:4b:f6:19:f2:27:12:c5:74:85:dd:
                    b1:ed:c6:95:8f:13:06:d5:2f:b1:d7:a0:6d:46:f0:
                    59:75:ad:01:f8:bc:4c:54:37:4d:45:ac:6d:21:9b:
                    79:f8:7c:90:37:e5:c0:28:b1:2e:30:93:c4:e1:50:
                    ff:b8:b5:27:24:82:87:d6:c4:08:14:21:7c:94:55:
                    92:31:cf:9a:dd:62:67:30:f3:06:2e:09:aa:81:b8:
                    6b:f2:27:12:52:f1:c6:3b:9c:8d:60:17:1d:0e:9f:
                    1b:0f:56:93:e0:10:41:ef:f7:55:5f:70:10:89:8f:
                    62:fc:31:c9:ab:eb:e3:92:e8:19:07:2e:57:38:db:
                    7d:25:73:59:eb:b1:72:7c:9d:af:30:cb:d8:44:9c:
                    a3:00:ad:0c:8a:c9:7d:49:4b:bb:e3:60:fb:b6:46:
                    a3:87:2f:7e:cf:f0:30:e0:e0:67:54:01:87:4d:b3:
                    10:d9:d6:02:fc:19:9f:b3:86:85:ad:ba:77:25:5d:
                    1c:85:a0:0d:14:5e:e5:ad:c2:e8:01:6a:10:3f:8e:
                    a0:04:5e:82:2c:88:bc:a2:2a:3f:f0:cb:11:29:28:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:52:60:24:AA:02:BA:4D:95:43:28:A4:9F:DF:5D:29:B2:67:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d407fdb-500e-3248-be33-7107d3a33d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:80:b0:3d:f7:de:7c:a2:98:92:53:aa:c3:32:d7:1a:11:63:
         8a:a5:61:6f:ef:61:5d:3f:4a:f9:c9:e5:47:d1:c6:b9:9b:bf:
         09:a3:fd:5c:ea:9f:5f:1c:17:2f:ec:2c:65:08:9e:51:bc:53:
         91:70:f4:8e:8c:34:72:1c:54:20:bf:57:12:b3:40:95:ef:86:
         72:7e:75:ac:ac:81:5a:d9:8c:0e:7f:25:99:84:0c:be:c1:a6:
         e0:45:8f:d9:d0:b0:94:06:c3:81:5a:b7:47:ea:91:54:90:1d:
         a3:0e:46:63:42:57:d7:ac:00:1e:2e:47:5e:7e:36:46:9a:bb:
         c0:43:fe:f0:5a:2f:e7:a0:05:b2:4d:ab:9f:53:ab:e5:ec:77:
         20:e9:1b:de:ee:3e:d2:2d:a0:3b:de:3e:be:3e:03:17:a3:23:
         07:6a:f1:f6:9c:98:af:13:43:7e:c7:99:ca:6f:cf:d6:0f:1c:
         0c:87:9c:08:f7:6d:5c:54:2f:ad:04:bd:51:3b:ec:8a:27:a2:
         50:63:a4:f7:55:ea:d8:21:de:ad:6d:77:74:72:2a:c9:2d:7f:
         0f:b6:39:06:42:55:a2:99:b0:bc:2d:ae:c4:8f:96:bf:51:1c:
         4c:b2:8f:c9:46:d0:76:bc:3a:c3:47:ab:bd:f9:60:de:6a:2b:
         aa:7d:75:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmCcO7dQhmsbfnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODQzODUzN2MtMWM4My00MGQzLWJiZGQtZDdlYmIyZWFmYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt21y3sLe+wFbd5jISuirZrxIFxdbeMS+F9SW
uWcrUt88tEv2GfInEsV0hd2x7caVjxMG1S+x16BtRvBZda0B+LxMVDdNRaxtIZt5
+HyQN+XAKLEuMJPE4VD/uLUnJIKH1sQIFCF8lFWSMc+a3WJnMPMGLgmqgbhr8icS
UvHGO5yNYBcdDp8bD1aT4BBB7/dVX3AQiY9i/DHJq+vjkugZBy5XONt9JXNZ67Fy
fJ2vMMvYRJyjAK0Misl9SUu742D7tkajhy9+z/Aw4OBnVAGHTbMQ2dYC/Bmfs4aF
rbp3JV0chaANFF7lrcLoAWoQP46gBF6CLIi8oio/8MsRKSh7kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdgUmAkqgK6TZVDKKSf310psmdeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGQ0MDdmZGItNTAwZS0z
MjQ4LWJlMzMtNzEwN2QzYTMzZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuAsD333nyimJJTqsMy1xoRY4qlYW/vYV0/SvnJ5UfRxrmbvwmj/Vzq
n18cFy/sLGUInlG8U5Fw9I6MNHIcVCC/VxKzQJXvhnJ+daysgVrZjA5/JZmEDL7B
puBFj9nQsJQGw4Fat0fqkVSQHaMORmNCV9esAB4uR15+Nkaau8BD/vBaL+egBbJN
q59Tq+XsdyDpG97uPtItoDvePr4+AxejIwdq8facmK8TQ37Hmcpvz9YPHAyHnAj3
bVxUL60EvVE77IonolBjpPdV6tgh3q1td3RyKsktfw+2OQZCVaKZsLwtrsSPlr9R
HEyyj8lG0Ha8OsNHq735YN5qK6p9dUI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:55:07 2026 by rpki-client