Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/b627cf1d-224b-302d-91c8-736b0fc41cc0.roa
File:                     b627cf1d-224b-302d-91c8-736b0fc41cc0.roa (raw, json)
Hash identifier:          i2f6sFTcl9DHljSes0XpyVmHMrxA532SEVKfhY2DRyI=
Subject key identifier:   D8:6F:9A:EC:ED:9D:CD:BC:88:78:52:0B:97:56:79:7C:CD:38:0D:DF
Certificate issuer:       /CN=35016321-5ca5-47b2-bd83-648dc5873afa
Certificate serial:       010D0C9F4328584D4BF4EE2A1FC7837C67A9B500
Authority key identifier: C1:92:FF:65:9C:1D:32:54:2B:71:54:D5:B0:6C:CC:C3:C6:EB:C8:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/b627cf1d-224b-302d-91c8-736b0fc41cc0.roa
Signing time:             Thu 26 Mar 2026 13:00:41 +0000
ROA not before:           Thu 26 Mar 2026 13:00:41 +0000
ROA not after:            Wed 24 Jun 2026 13:00:41 +0000
asID:                     214483
IP address blocks:        23.150.236.0/24 maxlen: 24
                          2602:f4a4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/35016321-5ca5-47b2-bd83-648dc5873afa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/35016321-5ca5-47b2-bd83-648dc5873afa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4b:f4:ee:2a:1f:c7:83:7c:67:a9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35016321-5ca5-47b2-bd83-648dc5873afa
        Validity
            Not Before: Mar 26 13:00:41 2026 GMT
            Not After : Jun 24 13:00:41 2026 GMT
        Subject: CN=bc5da66f-2752-4aa0-946d-198f00879dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:8e:a4:1d:2a:57:3d:c5:e1:27:e8:e9:48:
                    00:ec:d8:bf:bd:43:93:8a:9a:a8:f7:04:a2:f8:cf:
                    8d:8a:83:dc:cf:bb:c7:7c:14:79:32:45:ac:3d:bb:
                    cd:2a:ed:ec:c3:b2:8d:31:9b:04:fb:a8:2f:c6:31:
                    98:9a:8d:e6:20:9d:3c:d6:af:57:48:26:f6:cd:dc:
                    c1:f6:64:42:80:35:62:a1:96:8c:d1:70:7f:e8:60:
                    61:ec:fb:41:69:1a:3c:41:91:27:ef:81:9e:f1:90:
                    e5:93:6e:30:1f:f6:23:52:7b:54:0c:1a:33:eb:59:
                    50:6f:c8:72:91:a6:0c:f6:30:19:fa:52:c1:6b:84:
                    03:11:a5:aa:80:6e:d5:4e:02:29:cd:ca:a3:0b:f5:
                    85:61:c4:25:d7:2d:13:2b:3b:39:c2:d1:3d:21:a8:
                    e9:ce:ea:b8:45:7b:2f:ff:78:b1:4e:af:2a:18:76:
                    f1:74:0d:e5:35:04:1d:64:de:dc:3b:66:02:24:4d:
                    7c:cf:d5:45:72:a3:5e:c4:32:d9:da:24:76:f5:df:
                    ee:bd:d7:a6:75:bb:5c:5e:ff:ce:59:30:c6:0d:92:
                    81:e1:f3:a0:ec:5c:ae:0f:5f:af:87:e2:d7:99:c4:
                    48:38:7a:9d:1f:59:4e:97:43:de:10:68:8d:d4:ca:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6F:9A:EC:ED:9D:CD:BC:88:78:52:0B:97:56:79:7C:CD:38:0D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/b627cf1d-224b-302d-91c8-736b0fc41cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa/35016321-5ca5-47b2-bd83-648dc5873afa.crl

            X509v3 Authority Key Identifier:
                keyid:C1:92:FF:65:9C:1D:32:54:2B:71:54:D5:B0:6C:CC:C3:C6:EB:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/35016321-5ca5-47b2-bd83-648dc5873afa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.236.0/24
                IPv6:
                  2602:f4a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:88:76:4d:0d:aa:88:ca:c9:49:7a:a6:89:c0:26:19:a1:
         81:9b:33:2c:f7:85:8b:0c:4a:6d:ec:ec:77:77:aa:cc:67:88:
         16:e2:db:b6:3f:21:4b:ee:1a:d3:72:a8:9c:96:dd:a3:f6:fd:
         5e:6a:a5:18:a6:f7:94:43:07:f8:5e:64:5a:3d:b7:4c:a2:d0:
         c9:79:bb:7a:20:92:fa:7c:c1:02:5d:aa:d6:c3:fb:d7:da:76:
         14:f1:2f:8c:3e:2d:b3:53:72:2f:a7:d0:5a:a3:dc:3c:7f:e5:
         d1:05:f6:f3:8b:76:0f:22:c5:b2:4d:b0:c2:be:78:ca:9b:03:
         9d:3c:dc:8a:b9:5c:77:f9:07:d9:52:fd:c2:a3:a3:89:83:a5:
         fe:c4:38:6c:60:c1:46:68:b9:0c:71:74:73:20:85:13:95:5e:
         80:d5:24:17:94:8a:ac:8a:0c:c2:bc:00:92:80:4d:27:01:36:
         fd:4a:60:1b:4f:68:76:3c:37:ca:2c:9f:d3:b4:e9:5e:e2:ce:
         2e:ee:74:c9:67:19:eb:52:93:f4:46:07:12:ca:81:8c:83:d1:
         9d:a9:9c:9e:41:b2:b9:ed:80:41:10:cb:15:bd:f1:01:79:b0:
         21:8d:26:6b:0d:9b:ac:91:e3:70:84:5b:55:92:cb:c5:b9:f8:
         67:7b:f8:dd
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1L9O4qH8eDfGeptQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzUwMTYzMjEtNWNhNS00N2IyLWJkODMtNjQ4ZGM1ODcz
YWZhMB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk
YmM1ZGE2NmYtMjc1Mi00YWEwLTk0NmQtMTk4ZjAwODc5ZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X+OpB0qVz3F4Sfo6UgA7Ni/vUOTipqo9wSi
+M+NioPcz7vHfBR5MkWsPbvNKu3sw7KNMZsE+6gvxjGYmo3mIJ081q9XSCb2zdzB
9mRCgDVioZaM0XB/6GBh7PtBaRo8QZEn74Ge8ZDlk24wH/YjUntUDBoz61lQb8hy
kaYM9jAZ+lLBa4QDEaWqgG7VTgIpzcqjC/WFYcQl1y0TKzs5wtE9Iajpzuq4RXsv
/3ixTq8qGHbxdA3lNQQdZN7cO2YCJE18z9VFcqNexDLZ2iR29d/uvdemdbtcXv/O
WTDGDZKB4fOg7FyuD1+vh+LXmcRIOHqdH1lOl0PeEGiN1MrgOwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFNhvmuztnc28iHhSC5dWeXzNOA3fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTAx
NjMyMS01Y2E1LTQ3YjItYmQ4My02NDhkYzU4NzNhZmEvYjYyN2NmMWQtMjI0Yi0z
MDJkLTkxYzgtNzM2YjBmYzQxY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzUwMTYzMjEtNWNhNS00N2IyLWJk
ODMtNjQ4ZGM1ODczYWZhLzM1MDE2MzIxLTVjYTUtNDdiMi1iZDgzLTY0OGRjNTg3
M2FmYS5jcmwwHwYDVR0jBBgwFoAUwZL/ZZwdMlQrcVTVsGzMw8bryBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNTAxNjMyMS01Y2E1LTQ3YjItYmQ4My02NDhk
YzU4NzNhZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5bsMA4E
AgACMAgDBgAmAvSkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3XYh2TQ2qiMrJSXqmicAmGaGBmzMs94WL
DEpt7Ox3d6rMZ4gW4tu2PyFL7hrTcqiclt2j9v1eaqUYpveUQwf4XmRaPbdMotDJ
ebt6IJL6fMECXarWw/vX2nYU8S+MPi2zU3Ivp9Bao9w8f+XRBfbzi3YPIsWyTbDC
vnjKmwOdPNyKuVx3+QfZUv3Co6OJg6X+xDhsYMFGaLkMcXRzIIUTlV6A1SQXlIqs
igzCvACSgE0nATb9SmAbT2h2PDfKLJ/TtOle4s4u7nTJZxnrUpP0RgcSyoGMg9Gd
qZyeQbK57YBBEMsVvfEBebAhjSZrDZuskeNwhFtVksvFufhne/jd
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:07:59 2026 by rpki-client