Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/8de0da26-f39e-382f-9061-35974cd3d53e.roa
File:                     8de0da26-f39e-382f-9061-35974cd3d53e.roa (raw, json)
Hash identifier:          JyoevAVjgV/1pYsQTZTKy0Vaf1Nz+lZ/p6ji5vlT3hA=
Subject key identifier:   76:C8:F7:EF:77:EC:05:74:3D:E8:CA:A4:89:02:BB:68:E5:7A:81:C2
Certificate issuer:       /CN=45bf7524-9e46-415c-9162-0cf7edc56d32
Certificate serial:       010D0C9F4328584F749C52076C0DC9CF4A352640
Authority key identifier: 41:92:CE:32:18:E1:1B:6C:7E:B1:3D:D7:88:FE:EF:12:67:5F:AC:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/8de0da26-f39e-382f-9061-35974cd3d53e.roa
Signing time:             Sat 10 Oct 2026 12:04:11 +0000
ROA not before:           Sat 10 Oct 2026 12:04:11 +0000
ROA not after:            Fri 08 Jan 2027 13:04:11 +0000
asID:                     403027
IP address blocks:        23.165.124.0/24 maxlen: 24
                          2602:f2ca::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/45bf7524-9e46-415c-9162-0cf7edc56d32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/45bf7524-9e46-415c-9162-0cf7edc56d32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:9c:52:07:6c:0d:c9:cf:4a:35:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bf7524-9e46-415c-9162-0cf7edc56d32
        Validity
            Not Before: Oct 10 12:04:11 2026 GMT
            Not After : Jan  8 13:04:11 2027 GMT
        Subject: CN=6d053bf6-7497-446b-8f4d-27a19a6f851a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:fb:5d:3b:27:4f:78:0b:e5:00:3a:1e:a5:
                    82:02:83:fc:a4:e5:4e:19:8a:5e:a7:40:e1:95:84:
                    59:13:51:28:fe:71:92:88:10:b6:70:81:01:65:ef:
                    30:41:c0:21:c6:73:54:42:b9:73:ef:14:aa:be:e3:
                    68:1a:19:ab:f1:a4:aa:2a:2f:ea:e7:7d:86:4a:1d:
                    3f:aa:aa:9c:6e:a2:ec:a7:e9:f6:62:90:a6:5c:fc:
                    50:a7:7e:a0:8f:72:17:93:9b:9d:30:26:77:77:79:
                    ca:ea:58:5d:40:8f:06:49:be:17:3b:05:51:1c:a0:
                    75:61:c4:7c:35:2d:9f:79:9f:fb:6b:42:13:32:b0:
                    bf:dd:6d:d2:c0:a1:17:ac:a6:d8:63:89:03:38:61:
                    e9:a9:10:8a:db:65:e8:83:c0:9b:4d:8d:3a:29:e9:
                    48:a3:5b:54:1e:0c:8d:3b:7f:13:4c:0f:56:3c:10:
                    73:5f:8a:f8:79:5a:4f:95:6b:49:d5:97:b5:d7:39:
                    5c:3a:bc:ab:ee:50:94:a5:56:27:03:af:78:67:2b:
                    e5:f8:0e:a7:1a:ad:7d:94:c2:5f:77:b8:76:b4:84:
                    3e:c1:7b:3a:8b:a8:a3:c0:db:01:86:f7:bc:73:02:
                    14:e5:31:c5:72:5d:9b:7b:1e:04:94:ff:82:ec:3d:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:F7:EF:77:EC:05:74:3D:E8:CA:A4:89:02:BB:68:E5:7A:81:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/8de0da26-f39e-382f-9061-35974cd3d53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32/45bf7524-9e46-415c-9162-0cf7edc56d32.crl

            X509v3 Authority Key Identifier:
                keyid:41:92:CE:32:18:E1:1B:6C:7E:B1:3D:D7:88:FE:EF:12:67:5F:AC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/45bf7524-9e46-415c-9162-0cf7edc56d32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.124.0/24
                IPv6:
                  2602:f2ca::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:e2:90:17:7b:0a:a2:93:65:fe:06:8d:42:c9:bf:45:fd:
         12:89:6e:23:fe:7d:38:80:0e:06:64:1f:43:6a:7f:56:f1:bf:
         a7:84:68:f8:ad:c4:5c:50:a1:d7:93:ff:e9:5d:f7:bd:ac:50:
         bf:22:6d:cb:5f:74:9e:ba:ca:8c:50:3f:38:2e:ca:6e:d6:d2:
         39:88:7d:07:3f:e4:53:6b:fd:53:18:f9:1a:d2:ec:70:f2:da:
         5a:ea:e0:6a:9f:9b:5a:e1:d4:60:47:e3:8c:e8:b8:78:74:7e:
         bb:4c:f3:ef:5b:91:c9:92:e3:8c:c5:73:dc:5f:a8:d2:8d:55:
         d4:1d:97:cf:93:ea:f8:21:fd:50:9e:92:bd:18:c3:a6:b6:a3:
         7d:db:22:57:ab:42:07:cb:2c:94:05:d5:e1:89:83:9f:bb:61:
         d3:de:be:3d:58:ed:21:76:b5:b6:89:a3:de:56:c4:fb:97:f6:
         d3:02:c2:ce:6f:0d:9c:7f:5c:f1:22:9e:35:fa:57:d9:a3:ba:
         0a:d0:69:4e:90:30:cb:b3:d6:d9:85:bb:e3:3d:4a:a0:ae:db:
         1f:f9:7c:97:67:ed:8e:87:28:e1:42:b6:63:d7:9c:df:53:77:
         7e:ba:c7:15:fb:06:ac:86:3d:90:e3:78:45:9e:e6:4d:90:e7:
         8b:00:fb:4e
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE90nFIHbA3Jz0o1JkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDViZjc1MjQtOWU0Ni00MTVjLTkxNjItMGNmN2VkYzU2
ZDMyMB4XDTI2MTAxMDEyMDQxMVoXDTI3MDEwODEzMDQxMVowLzEtMCsGA1UEAxMk
NmQwNTNiZjYtNzQ5Ny00NDZiLThmNGQtMjdhMTlhNmY4NTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0j7XTsnT3gL5QA6HqWCAoP8pOVOGYpep0Dh
lYRZE1Eo/nGSiBC2cIEBZe8wQcAhxnNUQrlz7xSqvuNoGhmr8aSqKi/q532GSh0/
qqqcbqLsp+n2YpCmXPxQp36gj3IXk5udMCZ3d3nK6lhdQI8GSb4XOwVRHKB1YcR8
NS2feZ/7a0ITMrC/3W3SwKEXrKbYY4kDOGHpqRCK22Xog8CbTY06KelIo1tUHgyN
O38TTA9WPBBzX4r4eVpPlWtJ1Ze11zlcOryr7lCUpVYnA694Zyvl+A6nGq19lMJf
d7h2tIQ+wXs6i6ijwNsBhve8cwIU5THFcl2bex4ElP+C7D1H6QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFHbI9+937AV0PejKpIkCu2jleoHCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80NWJm
NzUyNC05ZTQ2LTQxNWMtOTE2Mi0wY2Y3ZWRjNTZkMzIvOGRlMGRhMjYtZjM5ZS0z
ODJmLTkwNjEtMzU5NzRjZDNkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDViZjc1MjQtOWU0Ni00MTVjLTkx
NjItMGNmN2VkYzU2ZDMyLzQ1YmY3NTI0LTllNDYtNDE1Yy05MTYyLTBjZjdlZGM1
NmQzMi5jcmwwHwYDVR0jBBgwFoAUQZLOMhjhG2x+sT3XiP7vEmdfrGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS80NWJmNzUyNC05ZTQ2LTQxNWMtOTE2Mi0wY2Y3
ZWRjNTZkMzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V8MA4E
AgACMAgDBgAmAvLKADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA58OKQF3sKopNl/gaNQsm/Rf0SiW4j/n04
gA4GZB9Dan9W8b+nhGj4rcRcUKHXk//pXfe9rFC/Im3LX3SeusqMUD84Lspu1tI5
iH0HP+RTa/1TGPka0uxw8tpa6uBqn5ta4dRgR+OM6Lh4dH67TPPvW5HJkuOMxXPc
X6jSjVXUHZfPk+r4If1QnpK9GMOmtqN92yJXq0IHyyyUBdXhiYOfu2HT3r49WO0h
drW2iaPeVsT7l/bTAsLObw2cf1zxIp41+lfZo7oK0GlOkDDLs9bZhbvjPUqgrtsf
+XyXZ+2OhyjhQrZj15zfU3d+uscV+washj2Q43hFnuZNkOeLAPtO
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:33:34 2026 by rpki-client