Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/d6eebaa4-b95f-39ff-9f35-77d8ad55f9b8.roa
File:                     d6eebaa4-b95f-39ff-9f35-77d8ad55f9b8.roa (raw, json)
Hash identifier:          47j0X9o/FXw/WdaGpnFD5nQA/teXLOftRvy4jQK7BNg=
Subject key identifier:   6B:00:AA:DB:3D:A0:03:09:A3:DC:69:71:85:7A:3B:E8:8C:09:ED:E2
Certificate issuer:       /CN=a22c039e-29ed-4402-96c9-253544f4f9e4
Certificate serial:       010D0C9F4328584EF5B2116E0887D43ED9417830
Authority key identifier: 21:91:A2:66:E7:74:61:2F:C7:C6:75:92:ED:F9:8B:2B:A0:74:FE:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/d6eebaa4-b95f-39ff-9f35-77d8ad55f9b8.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     214483
IP address blocks:        23.149.180.0/24 maxlen: 24
                          2602:f4c9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/a22c039e-29ed-4402-96c9-253544f4f9e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/a22c039e-29ed-4402-96c9-253544f4f9e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:11:6e:08:87:d4:3e:d9:41:78:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22c039e-29ed-4402-96c9-253544f4f9e4
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=4eaf6b12-f4b9-43f7-8952-2ad4775839e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:ce:8e:76:04:8a:86:9a:10:74:54:cf:b8:
                    8e:38:a6:0d:00:d5:78:ca:63:44:a6:b2:53:9f:fe:
                    95:e0:93:77:96:a6:33:0d:9a:9a:f0:50:ab:3b:25:
                    87:32:52:d1:c7:bb:e1:98:51:ba:64:d4:11:1a:41:
                    84:1a:ec:e4:66:74:f9:32:8b:ea:f2:73:53:ec:f2:
                    6b:12:0b:b9:89:a6:20:f2:28:a1:d9:32:f3:44:bb:
                    b6:6f:33:3d:46:da:df:f7:12:0b:9b:f3:8d:ae:0d:
                    75:0f:fa:21:76:07:2c:aa:6a:db:1e:95:85:4a:7f:
                    a2:1b:de:cd:92:36:a9:3c:3f:e5:7e:0b:c4:41:f4:
                    12:5e:f4:42:17:7d:43:ae:f9:af:d3:ea:3e:f0:f2:
                    77:1f:54:4e:65:89:5c:dd:67:c8:a3:b7:b5:dd:dd:
                    87:9a:9f:f0:b5:3e:d2:ea:f9:20:4f:17:29:20:c6:
                    35:11:7d:54:12:aa:25:0c:5b:0b:8a:a0:97:35:3a:
                    45:29:78:5f:14:d4:46:b3:e9:a5:b5:fa:e3:a1:34:
                    01:ee:d6:eb:f5:94:2b:19:64:98:69:c5:d0:69:72:
                    ae:3b:23:22:ab:15:29:5d:a1:7b:0b:5f:6c:30:f3:
                    67:bd:48:18:d7:03:f2:42:14:78:be:2f:b8:41:09:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:00:AA:DB:3D:A0:03:09:A3:DC:69:71:85:7A:3B:E8:8C:09:ED:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/d6eebaa4-b95f-39ff-9f35-77d8ad55f9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4/a22c039e-29ed-4402-96c9-253544f4f9e4.crl

            X509v3 Authority Key Identifier:
                keyid:21:91:A2:66:E7:74:61:2F:C7:C6:75:92:ED:F9:8B:2B:A0:74:FE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a22c039e-29ed-4402-96c9-253544f4f9e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.180.0/24
                IPv6:
                  2602:f4c9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:0d:b0:50:ee:36:3d:1e:fe:a2:9d:bf:91:fe:c7:a8:c4:
         87:74:ce:61:c3:5c:ae:49:4d:9a:8c:e0:8f:07:1c:e7:ab:fe:
         82:f9:ce:60:21:ae:a1:48:6f:3d:f4:46:c5:ea:2c:31:31:61:
         68:03:10:d7:04:b3:1b:94:b7:37:ab:59:fa:cc:1e:c7:95:6c:
         69:eb:56:4e:1d:0f:52:f6:ab:39:a9:40:8b:7a:2f:73:92:5f:
         7c:1c:9c:95:92:47:59:26:9e:e2:de:a0:c9:1e:42:ca:58:c4:
         13:fd:39:73:02:76:d0:50:8a:19:20:d2:1f:b6:68:c5:46:b8:
         0e:b1:b9:a1:41:88:c2:72:fa:b6:64:19:03:39:a3:52:55:c0:
         d0:a6:da:be:2f:ba:99:39:98:2e:0a:20:4f:81:fd:d5:cb:21:
         cd:9a:f0:e3:71:14:8b:79:20:25:89:3e:49:1a:fe:4f:d2:1f:
         b1:97:ed:05:c4:ef:ee:df:f3:71:cc:eb:c5:8f:d7:99:b1:27:
         aa:73:19:49:b4:5c:8c:30:75:49:50:6b:25:0d:5a:e1:9b:84:
         3b:d9:30:f5:9e:6a:03:73:2b:c4:67:7b:1f:08:ab:d0:06:01:
         67:3e:36:e9:dc:b0:8e:69:a0:a7:cb:5f:1b:0f:df:74:9e:63:
         6d:36:e0:39
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE71shFuCIfUPtlBeDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyYzAzOWUtMjllZC00NDAyLTk2YzktMjUzNTQ0ZjRm
OWU0MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGVhZjZiMTItZjRiOS00M2Y3LTg5NTItMmFkNDc3NTgzOWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPnOjnYEioaaEHRUz7iOOKYNANV4ymNEprJT
n/6V4JN3lqYzDZqa8FCrOyWHMlLRx7vhmFG6ZNQRGkGEGuzkZnT5Movq8nNT7PJr
Egu5iaYg8iih2TLzRLu2bzM9Rtrf9xILm/ONrg11D/ohdgcsqmrbHpWFSn+iG97N
kjapPD/lfgvEQfQSXvRCF31Drvmv0+o+8PJ3H1ROZYlc3WfIo7e13d2Hmp/wtT7S
6vkgTxcpIMY1EX1UEqolDFsLiqCXNTpFKXhfFNRGs+mltfrjoTQB7tbr9ZQrGWSY
acXQaXKuOyMiqxUpXaF7C19sMPNnvUgY1wPyQhR4vi+4QQlyVQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGsAqts9oAMJo9xpcYV6O+iMCe3iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMjJj
MDM5ZS0yOWVkLTQ0MDItOTZjOS0yNTM1NDRmNGY5ZTQvZDZlZWJhYTQtYjk1Zi0z
OWZmLTlmMzUtNzdkOGFkNTVmOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTIyYzAzOWUtMjllZC00NDAyLTk2
YzktMjUzNTQ0ZjRmOWU0L2EyMmMwMzllLTI5ZWQtNDQwMi05NmM5LTI1MzU0NGY0
ZjllNC5jcmwwHwYDVR0jBBgwFoAUIZGiZud0YS/HxnWS7fmLK6B0/m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMjJjMDM5ZS0yOWVkLTQ0MDItOTZjOS0yNTM1
NDRmNGY5ZTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5W0MA4E
AgACMAgDBgAmAvTJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxWw2wUO42PR7+op2/kf7HqMSHdM5hw1yu
SU2ajOCPBxznq/6C+c5gIa6hSG899EbF6iwxMWFoAxDXBLMblLc3q1n6zB7HlWxp
61ZOHQ9S9qs5qUCLei9zkl98HJyVkkdZJp7i3qDJHkLKWMQT/TlzAnbQUIoZINIf
tmjFRrgOsbmhQYjCcvq2ZBkDOaNSVcDQptq+L7qZOZguCiBPgf3VyyHNmvDjcRSL
eSAliT5JGv5P0h+xl+0FxO/u3/NxzOvFj9eZsSeqcxlJtFyMMHVJUGslDVrhm4Q7
2TD1nmoDcyvEZ3sfCKvQBgFnPjbp3LCOaaCny18bD990nmNtNuA5
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:00 2026 by rpki-client