Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa
File:                     23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa (raw, json)
Hash identifier:          N2UISlkirApGljEIeNLX7rqVRFJUS50VkZ6R9+q3PKc=
Subject key identifier:   39:D4:59:A2:BC:D5:63:C8:82:1D:66:99:FA:DA:AC:2E:5B:05:EA:BE
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584D9A200B56D1CDA137B6DEA720
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     394161
IP address blocks:        199.120.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0b:56:d1:cd:a1:37:b6:de:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=6ebed6b3-07cd-4d2c-b310-401ce0e271ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:0b:b8:21:3e:19:57:55:d2:54:8c:9b:ee:
                    99:c7:f2:95:58:e9:29:b3:a5:a2:01:7d:e3:26:8e:
                    05:9a:2e:d4:c7:b2:3d:46:54:fb:08:eb:53:0a:a7:
                    28:7f:0a:e0:8b:ae:8b:25:c5:16:81:4f:3b:ab:c9:
                    44:88:be:3e:2d:3c:73:f8:ac:8d:75:0b:1e:0b:a9:
                    10:b6:30:46:22:a1:98:98:aa:c2:1c:5b:5a:87:81:
                    f1:4c:fb:08:a6:61:d3:20:ef:3b:f0:c8:42:85:f2:
                    b9:45:d8:78:75:9a:69:88:60:77:79:e9:f8:48:96:
                    0f:57:17:19:4b:7a:23:7f:8d:54:71:1e:8d:49:a2:
                    64:3e:73:3c:7f:1e:62:86:07:76:16:8e:80:34:4b:
                    90:56:ab:50:a4:71:42:41:f9:ec:de:2e:9d:f2:67:
                    06:10:64:62:00:6f:5b:8d:0b:14:68:9f:07:96:41:
                    d1:0d:0b:d6:79:24:a0:71:8c:e0:24:a9:74:0b:dc:
                    ea:00:c3:e3:b3:ed:02:98:b1:87:9a:52:d8:43:b7:
                    99:a8:6d:fd:3c:8f:54:de:67:1a:5c:43:34:88:2c:
                    36:7b:ac:54:9a:46:41:a7:e6:a8:2d:9b:3f:c5:ed:
                    e5:60:7c:be:18:9d:c5:58:b4:41:ba:f8:b7:19:1b:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:59:A2:BC:D5:63:C8:82:1D:66:99:FA:DA:AC:2E:5B:05:EA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/23cc9e70-eb4b-3da0-9d17-dd4be8ce421f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:f2:65:6a:8b:a8:c3:27:c1:af:41:7f:8e:f2:68:d7:f0:
         46:3a:53:5a:a2:d3:27:51:7d:1b:d1:48:38:a0:ea:e2:dc:59:
         99:1a:2b:11:04:ea:04:e4:03:a9:dd:21:a8:d8:cd:de:4f:a3:
         19:db:18:44:59:e7:fd:bc:47:b3:9e:89:37:4f:2b:cb:53:17:
         61:44:3c:2f:38:6f:ba:98:4e:8b:1e:1b:9a:9a:7b:a5:4f:65:
         7f:b0:27:6c:af:e8:f2:81:c7:10:f5:6b:1a:3c:c8:b7:31:ce:
         5d:33:f5:0a:be:8d:16:2f:8f:37:42:25:ce:ea:cb:fa:90:11:
         6a:94:9f:1b:dc:d3:a8:1b:8e:7b:62:64:9f:b4:53:74:7a:9e:
         d7:8f:67:df:4a:52:ea:de:ec:8c:3f:69:83:86:2b:4f:ea:3a:
         5b:e9:83:be:d5:2d:46:5f:28:08:54:5a:bc:67:39:a0:3b:85:
         0d:3d:a0:46:ba:ce:94:2f:b8:c9:e0:fc:12:24:47:f1:99:a4:
         e1:2d:59:24:5a:eb:d3:d3:50:34:4e:12:a6:c7:59:45:73:a8:
         a5:d3:b8:28:08:33:f3:1f:1b:93:db:ea:8d:33:80:1a:3f:dd:
         c8:a2:7e:7a:19:11:84:32:b4:1d:eb:98:e1:60:97:43:43:1c:
         c5:22:f7:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAtW0c2hN7bepyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm
MmY5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NmViZWQ2YjMtMDdjZC00ZDJjLWIzMTAtNDAxY2UwZTI3MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoILuCE+GVdV0lSMm+6Zx/KVWOkps6WiAX3j
Jo4Fmi7Ux7I9RlT7COtTCqcofwrgi66LJcUWgU87q8lEiL4+LTxz+KyNdQseC6kQ
tjBGIqGYmKrCHFtah4HxTPsIpmHTIO878MhChfK5Rdh4dZppiGB3een4SJYPVxcZ
S3ojf41UcR6NSaJkPnM8fx5ihgd2Fo6ANEuQVqtQpHFCQfns3i6d8mcGEGRiAG9b
jQsUaJ8HlkHRDQvWeSSgcYzgJKl0C9zqAMPjs+0CmLGHmlLYQ7eZqG39PI9U3mca
XEM0iCw2e6xUmkZBp+aoLZs/xe3lYHy+GJ3FWLRBuvi3GRtZhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnUWaK81WPIgh1mmfrarC5bBeq+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3
ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvMjNjYzllNzAtZWI0Yi0z
ZGEwLTlkMTctZGQ0YmU4Y2U0MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy
ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0
ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3
MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3g4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZL8mVqi6jDJ8GvQX+O8mjX8EY6U1qi0ydRfRvRSDig6uLcWZkaKxEE
6gTkA6ndIajYzd5PoxnbGERZ5/28R7OeiTdPK8tTF2FEPC84b7qYToseG5qae6VP
ZX+wJ2yv6PKBxxD1axo8yLcxzl0z9Qq+jRYvjzdCJc7qy/qQEWqUnxvc06gbjnti
ZJ+0U3R6ntePZ99KUure7Iw/aYOGK0/qOlvpg77VLUZfKAhUWrxnOaA7hQ09oEa6
zpQvuMng/BIkR/GZpOEtWSRa69PTUDROEqbHWUVzqKXTuCgIM/MfG5Pb6o0zgBo/
3ciifnoZEYQytB3rmOFgl0NDHMUi94k=
-----END CERTIFICATE-----
Generated at Thu May 7 17:44:11 2026 by rpki-client