Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/8228edc5-c42b-3b72-8a5d-2395153fe877.roa
File:                     8228edc5-c42b-3b72-8a5d-2395153fe877.roa (raw, json)
Hash identifier:          itvi+On55dbiTxnjFW903dqeLCrAGLX554HmbqHSEzk=
Subject key identifier:   31:2F:FB:34:E5:78:ED:2C:59:EE:5F:BE:3A:72:D2:DA:EA:80:CC:A7
Certificate issuer:       /CN=6b11b311-890a-47ff-9347-68fc0fae7472
Certificate serial:       010D0C9F4328584E8C9E35FD491D0C5B238B4E40
Authority key identifier: EB:9C:9C:29:07:B6:73:9F:3C:E3:2C:96:A8:BA:18:A9:46:AB:9A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/8228edc5-c42b-3b72-8a5d-2395153fe877.roa
Signing time:             Sun 19 Jul 2026 09:40:27 +0000
ROA not before:           Sun 19 Jul 2026 09:40:27 +0000
ROA not after:            Sat 17 Oct 2026 09:40:27 +0000
asID:                     40065
IP address blocks:        23.151.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/6b11b311-890a-47ff-9347-68fc0fae7472.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/6b11b311-890a-47ff-9347-68fc0fae7472.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:9e:35:fd:49:1d:0c:5b:23:8b:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b11b311-890a-47ff-9347-68fc0fae7472
        Validity
            Not Before: Jul 19 09:40:27 2026 GMT
            Not After : Oct 17 09:40:27 2026 GMT
        Subject: CN=00c65468-f756-44fa-b92f-b2ea1c7bdd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:fc:1a:6d:40:19:86:2b:50:33:06:5d:63:
                    47:d5:fc:2b:f2:0d:31:5e:f1:cb:80:a1:e1:a1:76:
                    82:05:80:db:b9:d2:6d:8f:e3:f5:8a:35:7b:ff:4e:
                    53:49:7b:e5:f4:c7:b1:89:39:e5:17:3b:43:7e:49:
                    93:3d:ef:a6:5b:67:7e:d8:dd:32:4d:23:9f:26:56:
                    7a:e6:69:c7:41:f8:47:4e:b7:87:83:17:a2:67:21:
                    4c:1a:14:a7:5d:24:14:88:b4:5b:bc:db:c3:4e:1a:
                    b8:7a:b5:c4:37:1f:5a:2d:83:d6:12:d8:c1:d0:ac:
                    5c:86:b4:e5:7e:b4:1c:14:6f:1f:77:56:73:fe:07:
                    bb:c4:29:bf:e1:01:e3:fc:65:b0:5d:8a:ec:bc:d2:
                    f4:27:4f:a0:d5:1e:d8:b8:79:f4:8e:66:87:76:d9:
                    c4:cd:1c:35:6a:d4:36:96:82:d0:15:6a:39:bb:07:
                    ed:a1:bc:f4:71:cf:d8:51:22:43:74:5a:cc:92:41:
                    ff:f0:40:a1:33:15:15:c8:84:3a:34:e2:1f:60:95:
                    fc:e2:f5:b1:af:cb:cb:11:a3:fc:71:4b:55:a0:5f:
                    96:76:95:0a:13:1d:01:7d:84:28:ae:c8:06:0c:f0:
                    5e:6e:4a:a4:bf:41:a1:af:ab:b3:e9:2f:c9:88:90:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:FB:34:E5:78:ED:2C:59:EE:5F:BE:3A:72:D2:DA:EA:80:CC:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/8228edc5-c42b-3b72-8a5d-2395153fe877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472/6b11b311-890a-47ff-9347-68fc0fae7472.crl

            X509v3 Authority Key Identifier:
                keyid:EB:9C:9C:29:07:B6:73:9F:3C:E3:2C:96:A8:BA:18:A9:46:AB:9A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6b11b311-890a-47ff-9347-68fc0fae7472.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:5a:ac:87:d2:77:d8:0c:6d:ca:69:be:f4:a3:a4:87:d1:
         40:18:3f:27:14:bb:a3:cf:21:63:ec:c8:6a:cf:15:6c:23:ad:
         fc:a6:9c:53:04:5a:c3:77:b4:14:67:6a:c4:7e:c5:e1:85:09:
         24:a1:63:d2:54:31:18:21:0d:5e:c8:75:65:b2:a2:37:5b:2c:
         7f:95:96:8a:25:9d:66:05:b5:21:42:3e:c7:d4:c1:cc:dc:b4:
         b6:c8:c4:5a:57:68:b1:7c:3d:e6:96:20:6d:e1:01:5c:84:d2:
         12:4a:3f:2a:c6:63:27:43:ae:42:ce:34:9a:33:d9:8d:a6:05:
         08:a2:12:d9:bb:b0:e1:88:d4:bf:5a:68:8b:19:a1:65:cb:19:
         c1:9a:87:1b:d5:e0:b3:bc:1e:00:67:7b:01:42:7f:0a:2a:02:
         98:ab:15:80:29:ec:8a:63:2e:94:00:45:6d:0a:11:c6:87:b8:
         da:2a:53:9a:ce:24:d5:85:2c:c8:9a:80:0c:20:1a:ad:b0:a1:
         e6:86:78:bb:bf:26:01:1a:6d:3b:68:99:02:25:38:c3:72:99:
         c6:9c:dc:97:db:db:d6:c1:7f:bf:95:8b:61:60:5c:a2:5f:aa:
         ce:d9:19:3a:da:d4:ed:a6:fb:c8:7d:77:34:a8:13:cf:17:58:
         af:d2:37:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MnjX9SR0MWyOLTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxMWIzMTEtODkwYS00N2ZmLTkzNDctNjhmYzBmYWU3
NDcyMB4XDTI2MDcxOTA5NDAyN1oXDTI2MTAxNzA5NDAyN1owLzEtMCsGA1UEAxMk
MDBjNjU0NjgtZjc1Ni00NGZhLWI5MmYtYjJlYTFjN2JkZDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGD8Gm1AGYYrUDMGXWNH1fwr8g0xXvHLgKHh
oXaCBYDbudJtj+P1ijV7/05TSXvl9MexiTnlFztDfkmTPe+mW2d+2N0yTSOfJlZ6
5mnHQfhHTreHgxeiZyFMGhSnXSQUiLRbvNvDThq4erXENx9aLYPWEtjB0KxchrTl
frQcFG8fd1Zz/ge7xCm/4QHj/GWwXYrsvNL0J0+g1R7YuHn0jmaHdtnEzRw1atQ2
loLQFWo5uwftobz0cc/YUSJDdFrMkkH/8EChMxUVyIQ6NOIfYJX84vWxr8vLEaP8
cUtVoF+WdpUKEx0BfYQorsgGDPBebkqkv0Ghr6uz6S/JiJBBfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEv+zTleO0sWe5fvjpy0trqgMynMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjEx
YjMxMS04OTBhLTQ3ZmYtOTM0Ny02OGZjMGZhZTc0NzIvODIyOGVkYzUtYzQyYi0z
YjcyLThhNWQtMjM5NTE1M2ZlODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmIxMWIzMTEtODkwYS00N2ZmLTkz
NDctNjhmYzBmYWU3NDcyLzZiMTFiMzExLTg5MGEtNDdmZi05MzQ3LTY4ZmMwZmFl
NzQ3Mi5jcmwwHwYDVR0jBBgwFoAU65ycKQe2c5884yyWqLoYqUarmpgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82YjExYjMxMS04OTBhLTQ3ZmYtOTM0Ny02OGZj
MGZhZTc0NzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5dkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf5WqyH0nfYDG3Kab70o6SH0UAYPycUu6PPIWPsyGrPFWwjrfymnFME
WsN3tBRnasR+xeGFCSShY9JUMRghDV7IdWWyojdbLH+VloolnWYFtSFCPsfUwczc
tLbIxFpXaLF8PeaWIG3hAVyE0hJKPyrGYydDrkLONJoz2Y2mBQiiEtm7sOGI1L9a
aIsZoWXLGcGahxvV4LO8HgBnewFCfwoqApirFYAp7IpjLpQARW0KEcaHuNoqU5rO
JNWFLMiagAwgGq2woeaGeLu/JgEabTtomQIlOMNymcac3Jfb29bBf7+Vi2FgXKJf
qs7ZGTra1O2m+8h9dzSoE88XWK/SNwQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client