Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa
File:                     c1b8da79-4771-3823-9c64-f62c5fe535f8.roa (raw, json)
Hash identifier:          BXNj1qGE/Cwx4eZV8m8sMfejxViNVubqbGXyDOKBE3w=
Subject key identifier:   8D:56:23:2C:FF:FF:7D:17:B8:C8:E4:D0:B1:70:68:09:22:BA:9F:59
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584EB6E1B4D9E0D0B7CC6116519C
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     30456
IP address blocks:        23.156.128.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b4:d9:e0:d0:b7:cc:61:16:51:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=c8e5a7b2-115e-44a3-9995-c37ed5a11a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:69:e0:ca:4f:5c:cc:46:56:86:3b:48:ee:
                    fd:bd:db:d5:72:c6:24:88:64:02:ab:7f:ff:ba:29:
                    d5:c6:d4:5e:13:57:de:fb:23:88:00:8a:59:ef:b8:
                    fd:b7:b6:20:ca:a5:91:0f:26:3f:b5:6d:c2:92:52:
                    31:4e:8b:dd:a7:d1:97:92:2c:d0:54:02:5c:e8:c9:
                    1c:bd:3e:69:fe:e6:17:a9:3d:33:ad:ab:5b:ab:28:
                    28:e0:65:36:32:b2:79:59:78:a0:36:ce:a5:aa:9f:
                    da:e3:56:cf:e9:ae:e9:30:d1:95:50:2e:67:de:90:
                    2d:4f:5f:da:46:42:f1:81:83:ea:9d:13:8d:67:bb:
                    0d:92:4b:54:a8:b0:31:55:60:e0:e9:a7:1f:5f:ad:
                    75:8a:54:45:b2:53:0f:da:dc:dc:86:bb:46:15:fd:
                    fc:71:4b:2b:ba:09:10:48:48:7a:ad:7f:fb:3e:60:
                    1e:fd:8e:48:72:f8:e9:89:21:44:66:ae:d1:e0:fa:
                    cc:fd:c5:22:8e:9f:65:19:ac:23:55:7d:c7:09:c4:
                    30:c3:a3:62:8b:b3:e6:cf:23:16:93:93:bd:e5:66:
                    05:51:de:c2:2b:09:cb:1e:38:13:88:48:ae:ae:80:
                    3b:58:33:de:73:94:4c:ce:db:ee:23:f3:8e:a6:c8:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:23:2C:FF:FF:7D:17:B8:C8:E4:D0:B1:70:68:09:22:BA:9F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/c1b8da79-4771-3823-9c64-f62c5fe535f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:ca:75:2a:b1:ca:c4:93:cd:a7:88:61:80:28:c9:e7:d9:
         f2:27:c0:50:7a:33:63:51:e9:70:1a:e5:e1:9f:ae:a6:77:34:
         81:c6:8d:57:74:c3:f8:b6:b0:ee:f6:ad:df:44:44:77:55:f6:
         fd:ce:56:bb:cb:bd:e0:8a:08:96:76:bc:b2:b0:90:57:e2:a7:
         39:1a:7b:3a:34:51:8d:77:11:14:4d:ca:d4:b7:3b:3b:8e:b4:
         1e:53:97:27:00:5e:65:c3:b4:74:1c:93:66:2a:1e:ce:7d:03:
         0b:59:26:4a:a4:58:2c:f9:d5:17:90:ca:aa:d1:80:85:36:30:
         e8:3b:54:35:e4:45:34:9e:01:68:7d:57:54:28:ea:f3:84:59:
         62:a9:37:cc:7c:67:23:bd:af:a0:b2:f9:d0:49:1b:ef:91:bb:
         db:66:c1:a8:02:98:a4:1a:2a:21:ed:b2:b7:34:fd:65:a9:c9:
         85:cf:c4:13:7e:2c:26:9b:44:27:65:33:d7:90:81:5e:b0:2e:
         ca:b8:fd:c3:fa:7d:64:17:1a:67:b6:5e:7a:a4:1a:bb:86:58:
         56:11:79:43:92:63:c4:d5:e1:51:62:b1:22:c7:38:81:68:be:
         fb:2c:20:c2:89:76:5b:c9:99:2d:ce:26:c8:d6:23:eb:0b:39:
         df:2b:be:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624bTZ4NC3zGEWUZwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
YzhlNWE3YjItMTE1ZS00NGEzLTk5OTUtYzM3ZWQ1YTExYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG5p4MpPXMxGVoY7SO79vdvVcsYkiGQCq3//
uinVxtReE1fe+yOIAIpZ77j9t7YgyqWRDyY/tW3CklIxTovdp9GXkizQVAJc6Mkc
vT5p/uYXqT0zratbqygo4GU2MrJ5WXigNs6lqp/a41bP6a7pMNGVUC5n3pAtT1/a
RkLxgYPqnRONZ7sNkktUqLAxVWDg6acfX611ilRFslMP2tzchrtGFf38cUsrugkQ
SEh6rX/7PmAe/Y5IcvjpiSFEZq7R4PrM/cUijp9lGawjVX3HCcQww6Nii7PmzyMW
k5O95WYFUd7CKwnLHjgTiEiuroA7WDPec5RMztvuI/OOpsifAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1WIyz//30XuMjk0LFwaAkiup9ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvYzFiOGRhNzktNDc3MS0z
ODIzLTljNjQtZjYyYzVmZTUzNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBcynUqscrEk82niGGAKMnn2fInwFB6M2NR6XAa5eGfrqZ3NIHGjVd0
w/i2sO72rd9ERHdV9v3OVrvLveCKCJZ2vLKwkFfipzkaezo0UY13ERRNytS3OzuO
tB5TlycAXmXDtHQck2YqHs59AwtZJkqkWCz51ReQyqrRgIU2MOg7VDXkRTSeAWh9
V1Qo6vOEWWKpN8x8ZyO9r6Cy+dBJG++Ru9tmwagCmKQaKiHtsrc0/WWpyYXPxBN+
LCabRCdlM9eQgV6wLsq4/cP6fWQXGme2XnqkGruGWFYReUOSY8TV4VFisSLHOIFo
vvssIMKJdlvJmS3OJsjWI+sLOd8rvvU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 19:10:28 2026 by rpki-client