Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/10cbec10-39de-32f5-8b69-323200cd1013.roa
File:                     10cbec10-39de-32f5-8b69-323200cd1013.roa (raw, json)
Hash identifier:          FgCNjfang9R12n9am04Za37PjLNJpk/AzP0mkaRQqUA=
Subject key identifier:   61:50:DD:EC:94:F4:0A:1E:94:24:EF:34:58:CC:E4:87:72:16:32:C3
Certificate issuer:       /CN=cfe3cd25-c02b-4085-9a8d-865e898e59bc
Certificate serial:       010D0C9F4328584ECCE886ED8805CF6498028900
Authority key identifier: EA:CC:BD:A8:0D:10:87:56:F5:5E:BB:F1:B3:06:CD:3C:11:02:F0:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/10cbec10-39de-32f5-8b69-323200cd1013.roa
Signing time:             Tue 11 Aug 2026 10:21:56 +0000
ROA not before:           Tue 11 Aug 2026 10:21:56 +0000
ROA not after:            Mon 09 Nov 2026 11:21:56 +0000
asID:                     402798
IP address blocks:        23.162.60.0/24 maxlen: 24
                          2620:c8:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/cfe3cd25-c02b-4085-9a8d-865e898e59bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/cfe3cd25-c02b-4085-9a8d-865e898e59bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cc:e8:86:ed:88:05:cf:64:98:02:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe3cd25-c02b-4085-9a8d-865e898e59bc
        Validity
            Not Before: Aug 11 10:21:56 2026 GMT
            Not After : Nov  9 11:21:56 2026 GMT
        Subject: CN=123b2974-1ec4-46b7-8441-12845aba9f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:ef:f0:7e:5d:5b:fd:84:5a:c0:d6:b0:a5:
                    43:f4:d2:f0:b4:9f:65:97:87:d1:5a:c4:78:dc:19:
                    1d:b9:ed:60:2f:37:62:fe:03:5a:6d:15:82:c9:64:
                    ab:b6:c8:6b:f4:06:2d:ca:57:e7:7e:49:58:fb:9f:
                    d0:2d:0e:28:1d:d0:b8:e7:88:81:89:d9:21:7f:50:
                    86:32:22:dd:53:2c:5f:1c:03:e7:cc:5f:5c:d8:29:
                    fb:8a:d1:13:69:a8:63:e2:ca:92:e4:3e:10:e1:43:
                    e6:60:fd:37:aa:6c:69:d1:be:67:84:27:19:86:d3:
                    e3:4f:e0:54:48:80:d4:cd:fd:01:10:3d:24:3a:49:
                    03:46:86:27:b1:56:1c:cd:12:46:2e:f9:80:c4:21:
                    6f:8d:f4:27:28:9a:51:b4:c0:14:69:80:88:e8:ae:
                    09:e9:80:e1:c2:33:5a:24:de:b9:2d:2a:d2:a3:fc:
                    4c:e5:82:a8:1a:8e:17:11:8a:e2:a0:86:b8:a8:2c:
                    bf:84:c2:bb:df:8d:05:12:31:52:71:6d:3f:4d:0c:
                    0c:71:20:59:41:7d:66:ed:d7:dc:5a:f4:7a:fa:29:
                    c9:60:ce:6b:cc:9f:a0:65:ff:7d:90:7c:9b:20:96:
                    85:0c:ec:9e:e3:3c:20:5d:26:3c:e3:d2:12:f5:99:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:50:DD:EC:94:F4:0A:1E:94:24:EF:34:58:CC:E4:87:72:16:32:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/10cbec10-39de-32f5-8b69-323200cd1013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc/cfe3cd25-c02b-4085-9a8d-865e898e59bc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:CC:BD:A8:0D:10:87:56:F5:5E:BB:F1:B3:06:CD:3C:11:02:F0:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cfe3cd25-c02b-4085-9a8d-865e898e59bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.60.0/24
                IPv6:
                  2620:c8:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:50:4f:6d:b3:02:42:89:b7:b4:73:60:58:88:81:92:f2:41:
         7a:96:8e:d5:42:9f:36:55:82:65:9e:cf:db:48:d4:44:f5:e3:
         f4:22:93:4e:ed:81:bb:a0:6a:c5:08:18:ef:66:c2:c4:0c:7a:
         a0:fc:02:55:7f:6d:ed:02:74:95:9e:fb:2b:ae:6a:a3:82:16:
         7e:c6:13:2e:fd:9e:4d:31:73:30:a4:fb:33:84:35:75:d5:7f:
         7f:ac:6b:f7:58:76:bf:27:bd:3f:fe:5a:97:55:ad:95:f5:35:
         0d:3c:7a:54:b0:84:4c:d2:cb:38:68:7a:ae:6c:ed:9a:39:ce:
         ab:d7:a8:56:f6:01:0c:30:dd:5d:c3:29:07:fc:90:33:e8:0f:
         32:82:d8:67:b6:d9:f0:6e:8f:b4:be:c1:3e:cc:f4:70:74:94:
         a3:b5:f3:d7:cd:63:30:25:ec:82:e5:29:05:21:49:83:cc:32:
         d4:aa:0d:48:4e:4a:2b:6f:ad:5d:14:02:f4:69:a0:18:d0:0a:
         bd:06:59:6b:2e:85:d4:92:3b:56:40:72:1a:c6:0d:34:ab:e0:
         fd:22:68:54:8d:b9:94:3e:36:bf:1a:b3:f3:14:9d:b1:2e:1c:
         e3:31:f1:56:f4:ad:63:33:c7:f8:75:16:1d:18:50:86:6d:12:
         d0:ca:be:a8
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7M6IbtiAXPZJgCiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZlM2NkMjUtYzAyYi00MDg1LTlhOGQtODY1ZTg5OGU1
OWJjMB4XDTI2MDgxMTEwMjE1NloXDTI2MTEwOTExMjE1NlowLzEtMCsGA1UEAxMk
MTIzYjI5NzQtMWVjNC00NmI3LTg0NDEtMTI4NDVhYmE5ZjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02rv8H5dW/2EWsDWsKVD9NLwtJ9ll4fRWsR4
3Bkdue1gLzdi/gNabRWCyWSrtshr9AYtylfnfklY+5/QLQ4oHdC454iBidkhf1CG
MiLdUyxfHAPnzF9c2Cn7itETaahj4sqS5D4Q4UPmYP03qmxp0b5nhCcZhtPjT+BU
SIDUzf0BED0kOkkDRoYnsVYczRJGLvmAxCFvjfQnKJpRtMAUaYCI6K4J6YDhwjNa
JN65LSrSo/xM5YKoGo4XEYrioIa4qCy/hMK7340FEjFScW0/TQwMcSBZQX1m7dfc
WvR6+inJYM5rzJ+gZf99kHybIJaFDOye4zwgXSY849IS9ZkskQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFGFQ3eyU9AoelCTvNFjM5IdyFjLDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZmUz
Y2QyNS1jMDJiLTQwODUtOWE4ZC04NjVlODk4ZTU5YmMvMTBjYmVjMTAtMzlkZS0z
MmY1LThiNjktMzIzMjAwY2QxMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2ZlM2NkMjUtYzAyYi00MDg1LTlh
OGQtODY1ZTg5OGU1OWJjL2NmZTNjZDI1LWMwMmItNDA4NS05YThkLTg2NWU4OThl
NTliYy5jcmwwHwYDVR0jBBgwFoAU6sy9qA0Qh1b1XrvxswbNPBEC8McwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZmUzY2QyNS1jMDJiLTQwODUtOWE4ZC04NjVl
ODk4ZTU5YmMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6I8MA8E
AgACMAkDBwAmIADIoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgVBPbbMCQom3tHNgWIiBkvJBepaO1UKf
NlWCZZ7P20jURPXj9CKTTu2Bu6BqxQgY72bCxAx6oPwCVX9t7QJ0lZ77K65qo4IW
fsYTLv2eTTFzMKT7M4Q1ddV/f6xr91h2vye9P/5al1WtlfU1DTx6VLCETNLLOGh6
rmztmjnOq9eoVvYBDDDdXcMpB/yQM+gPMoLYZ7bZ8G6PtL7BPsz0cHSUo7Xz181j
MCXsguUpBSFJg8wy1KoNSE5KK2+tXRQC9GmgGNAKvQZZay6F1JI7VkByGsYNNKvg
/SJoVI25lD42vxqz8xSdsS4c4zHxVvStYzPH+HUWHRhQhm0S0Mq+qA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:44 2026 by rpki-client