Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b67a7488-3e71-385c-ab1c-82146face726.roa
File:                     b67a7488-3e71-385c-ab1c-82146face726.roa (raw, json)
Hash identifier:          XqQ5zFEGPVvIR9gVkltcgtfRLrHKP6YsnCBb+A1Nnx4=
Subject key identifier:   F1:AA:7F:DD:D4:F0:02:F4:22:6B:81:E9:8E:81:37:9B:FD:F0:31:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EB6E1AB44DFA825C507832950
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b67a7488-3e71-385c-ab1c-82146face726.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     21342
IP address blocks:        23.54.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:ab:44:df:a8:25:c5:07:83:29:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=5148783c-562a-4055-b7d9-09b7322cd53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:13:c8:96:0d:e3:b4:61:41:4e:1e:2c:74:
                    e6:f9:d1:f8:6c:70:39:03:2d:52:a6:ff:e4:00:28:
                    39:cd:a7:b4:eb:c9:50:d9:ba:f1:1b:ac:e0:1c:91:
                    e9:c2:9e:9d:12:9d:b1:e6:2f:f7:ac:9e:71:2b:e3:
                    e4:3f:ac:2a:be:ee:b9:0e:92:ba:84:10:f6:36:42:
                    6d:9b:ed:d1:41:58:aa:96:84:80:14:d8:f7:95:79:
                    91:a6:b6:ba:c3:68:b5:de:eb:61:02:2d:99:1c:4a:
                    ff:c8:ef:c7:53:65:ff:a5:d9:70:b7:5b:20:78:bc:
                    86:71:4a:82:1a:5e:9d:c6:13:63:f9:08:c5:fe:a0:
                    51:e8:27:eb:ec:d7:a6:50:ba:b8:33:c6:00:13:e8:
                    81:e6:51:82:78:6a:11:25:23:62:e3:b1:90:86:77:
                    45:3d:ab:9a:96:ea:c7:d9:bf:a4:bb:44:60:df:f7:
                    03:b2:f4:a5:e3:64:99:99:a4:67:d7:1b:5c:7e:ba:
                    cb:a9:d5:93:1b:1c:d7:cd:bf:4c:a7:8e:00:76:c9:
                    9f:6e:89:ee:76:41:12:75:0b:17:d4:04:c3:6f:b2:
                    cb:43:ad:b0:78:d9:ca:f8:5c:97:98:26:70:7e:b9:
                    b4:ae:f6:bb:e9:1e:7d:f0:d2:de:dd:30:8a:c1:c8:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AA:7F:DD:D4:F0:02:F4:22:6B:81:E9:8E:81:37:9B:FD:F0:31:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b67a7488-3e71-385c-ab1c-82146face726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:9f:d2:58:a0:6d:4d:c7:d0:cc:53:ee:6b:bf:0a:43:f6:
         86:fb:94:e2:f5:8d:af:8a:fa:02:18:f4:b9:b6:9c:ee:1c:a0:
         2f:4b:e6:f4:17:6b:7f:c3:1d:6a:91:29:33:2d:50:af:e7:2e:
         ad:0b:1c:41:57:e3:d8:32:98:a8:bf:6e:5f:c9:b6:cc:05:40:
         51:ba:6d:bd:ba:6b:6b:f6:f1:dc:65:ed:ec:98:01:ef:c3:70:
         d8:4a:0d:c7:b2:94:13:25:d2:8b:73:1f:72:c6:fa:71:b4:11:
         3c:03:63:47:f2:bb:79:c2:4a:45:c5:dc:33:8a:51:83:72:23:
         ca:ac:ee:03:e1:b5:64:de:a6:84:77:cd:f0:c9:b9:f2:31:b3:
         c5:d1:1c:9e:72:f5:78:e0:54:45:ca:3c:47:7c:ea:69:0a:cf:
         9d:fc:5d:e8:58:06:eb:5f:cf:4d:a2:55:71:e2:50:dc:93:7d:
         27:7a:65:14:5d:1f:e8:3a:c5:bc:9d:fa:be:f5:2d:89:66:71:
         41:f5:d6:c7:2c:42:a8:3b:6b:05:cb:29:d3:a5:cc:b3:e7:65:
         cb:90:48:fd:58:49:4d:91:3e:d6:af:a7:b2:3b:50:f8:5e:8e:
         a6:b8:e1:c5:1c:47:ea:cb:7a:85:b9:ff:4c:bb:e9:06:c8:64:
         e6:d4:dd:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624atE36glxQeDKVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
NTE0ODc4M2MtNTYyYS00MDU1LWI3ZDktMDliNzMyMmNkNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHETyJYN47RhQU4eLHTm+dH4bHA5Ay1Spv/k
ACg5zae068lQ2brxG6zgHJHpwp6dEp2x5i/3rJ5xK+PkP6wqvu65DpK6hBD2NkJt
m+3RQViqloSAFNj3lXmRpra6w2i13uthAi2ZHEr/yO/HU2X/pdlwt1sgeLyGcUqC
Gl6dxhNj+QjF/qBR6Cfr7NemULq4M8YAE+iB5lGCeGoRJSNi47GQhndFPaualurH
2b+ku0Rg3/cDsvSl42SZmaRn1xtcfrrLqdWTGxzXzb9Mp44AdsmfbonudkESdQsX
1ATDb7LLQ62weNnK+FyXmCZwfrm0rva76R598NLe3TCKwcihdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPGqf93U8AL0ImuB6Y6BN5v98DESMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjY3YTc0ODgtM2U3MS0z
ODVjLWFiMWMtODIxNDZmYWNlNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbtn9JYoG1Nx9DMU+5rvwpD9ob7lOL1ja+K+gIY9Lm2nO4coC9L5vQX
a3/DHWqRKTMtUK/nLq0LHEFX49gymKi/bl/JtswFQFG6bb26a2v28dxl7eyYAe/D
cNhKDceylBMl0otzH3LG+nG0ETwDY0fyu3nCSkXF3DOKUYNyI8qs7gPhtWTepoR3
zfDJufIxs8XRHJ5y9XjgVEXKPEd86mkKz538XehYButfz02iVXHiUNyTfSd6ZRRd
H+g6xbyd+r71LYlmcUH11scsQqg7awXLKdOlzLPnZcuQSP1YSU2RPtavp7I7UPhe
jqa44cUcR+rLeoW5/0y76QbIZObU3WM=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:11:28 2026 by rpki-client