Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa
File:                     2e09892f-2ac6-3953-a44d-f0dbf181b866.roa (raw, json)
Hash identifier:          f44lKlCz2e4KnsoTdZrKApHwL5zgLmgJYImTE49UPpI=
Subject key identifier:   DF:99:2A:03:FD:42:B3:A8:8A:99:B1:94:FB:B7:D8:78:1A:D7:8A:39
Certificate issuer:       /CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09
Certificate serial:       010D0C9F4328584D8EFBA883683D55B956029600
Authority key identifier: 4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa
Signing time:             Sun 19 Apr 2026 13:13:25 +0000
ROA not before:           Sun 19 Apr 2026 13:13:25 +0000
ROA not after:            Fri 17 Jul 2026 05:36:35 +0000
asID:                     60439
IP address blocks:        23.147.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:fb:a8:83:68:3d:55:b9:56:02:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09
        Validity
            Not Before: Apr 19 13:13:25 2026 GMT
            Not After : Jul 17 05:36:35 2026 GMT
        Subject: CN=fa034bec-70e3-4a10-be99-433865ea87ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bc:f4:29:03:2a:59:64:91:38:ca:0f:4a:19:
                    bc:09:f6:b5:be:65:f4:8c:c9:b2:fc:6f:e4:a7:6d:
                    da:58:23:a3:37:d5:37:f9:2e:9e:cd:ca:86:b3:d6:
                    02:64:31:2c:84:8e:aa:cc:a5:44:69:7e:74:76:05:
                    ad:4e:1a:b1:8c:e3:48:5d:85:65:83:bc:9c:22:a4:
                    dd:12:8a:b6:fe:d8:3c:42:40:f9:3d:3d:10:fe:75:
                    c1:87:11:7a:43:f9:b3:62:30:3e:e5:84:2c:f1:52:
                    c1:e4:48:28:78:5a:97:3b:bf:90:82:c3:14:d9:22:
                    65:d3:ff:73:a8:a5:1c:89:57:6c:6b:1a:11:ef:4d:
                    52:99:16:e5:db:a8:ab:3e:f2:67:d9:0e:b2:a2:f9:
                    e1:10:33:84:cf:bc:53:3f:3e:50:80:b5:86:d1:8e:
                    df:eb:74:fa:fc:c7:bc:5e:67:1e:6d:03:01:c4:4e:
                    67:09:97:13:f6:41:50:75:5b:cf:bc:2d:bf:fc:cc:
                    d3:59:c7:8f:05:64:f7:11:21:58:1e:f6:f7:c4:13:
                    ad:53:4e:d0:97:b5:81:69:df:8e:dd:20:f2:26:c3:
                    66:c5:94:ba:6a:4f:17:d6:0d:c6:7a:24:f3:33:9f:
                    69:02:45:a2:f7:83:60:37:17:30:8e:cd:f2:4f:ba:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:2A:03:FD:42:B3:A8:8A:99:B1:94:FB:B7:D8:78:1A:D7:8A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/2e09892f-2ac6-3953-a44d-f0dbf181b866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl

            X509v3 Authority Key Identifier:
                keyid:4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:38:f6:b5:92:5d:c6:a6:fe:1f:29:84:59:2d:23:a5:04:
         e2:c9:ec:95:ce:ad:f3:19:23:03:3c:35:7a:09:9b:67:53:af:
         7d:56:93:3d:52:dc:05:f4:18:56:b7:f8:9f:b7:2b:e9:da:ee:
         56:6b:76:45:e5:c3:dc:c8:3d:55:2c:ba:e8:4b:e7:13:4a:b0:
         eb:67:a7:be:c6:4a:f2:6f:1f:17:ef:13:97:8f:01:a9:04:6f:
         e0:6f:e1:41:68:33:77:75:18:36:ba:dc:99:ff:89:28:fd:30:
         3d:90:d2:9c:71:75:15:a6:8f:a6:e5:3a:07:a9:32:40:dc:4d:
         e1:b9:57:3a:ce:70:09:dd:1c:c2:90:35:06:61:5d:98:1c:ba:
         86:ec:9b:1e:e9:49:af:13:7d:15:b7:09:56:a4:45:8c:c1:39:
         8a:e3:e1:6b:28:3e:84:9c:c5:a1:76:5c:92:f5:b6:89:68:c4:
         d5:cc:11:0e:47:96:9f:5d:02:1a:6d:ec:91:11:ea:b9:96:59:
         cb:8b:f2:a7:ae:43:ea:5f:44:dd:da:c7:bb:3a:68:c4:5d:e9:
         81:78:73:04:7a:c3:eb:cf:7f:a9:a7:c0:d6:eb:a1:87:17:f1:
         2a:f9:a4:4e:23:23:7e:3d:13:f1:e9:cc:0c:8e:f6:d9:9b:56:
         e1:5a:f8:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+6iDaD1VuVYClgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJiNTM1YjctZmJlZC00YzE0LThhYzAtN2M1ZjMyMDIw
YzA5MB4XDTI2MDQxOTEzMTMyNVoXDTI2MDcxNzA1MzYzNVowLzEtMCsGA1UEAxMk
ZmEwMzRiZWMtNzBlMy00YTEwLWJlOTktNDMzODY1ZWE4N2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67z0KQMqWWSROMoPShm8Cfa1vmX0jMmy/G/k
p23aWCOjN9U3+S6ezcqGs9YCZDEshI6qzKVEaX50dgWtThqxjONIXYVlg7ycIqTd
Eoq2/tg8QkD5PT0Q/nXBhxF6Q/mzYjA+5YQs8VLB5EgoeFqXO7+QgsMU2SJl0/9z
qKUciVdsaxoR701SmRbl26irPvJn2Q6yovnhEDOEz7xTPz5QgLWG0Y7f63T6/Me8
XmcebQMBxE5nCZcT9kFQdVvPvC2//MzTWcePBWT3ESFYHvb3xBOtU07Ql7WBad+O
3SDyJsNmxZS6ak8X1g3GeiTzM59pAkWi94NgNxcwjs3yT7ocQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+ZKgP9QrOoipmxlPu32Hga14o5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1
MzViNy1mYmVkLTRjMTQtOGFjMC03YzVmMzIwMjBjMDkvMmUwOTg5MmYtMmFjNi0z
OTUzLWE0NGQtZjBkYmYxODFiODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTJiNTM1YjctZmJlZC00YzE0LThh
YzAtN2M1ZjMyMDIwYzA5L2EyYjUzNWI3LWZiZWQtNGMxNC04YWMwLTdjNWYzMjAy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUTJo8N1o8N2xWZ88GZpMAWdDe9wYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1MzViNy1mYmVkLTRjMTQtOGFjMC03YzVm
MzIwMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuhOPa1kl3Gpv4fKYRZLSOlBOLJ7JXOrfMZIwM8NXoJm2dTr31Wkz1S
3AX0GFa3+J+3K+na7lZrdkXlw9zIPVUsuuhL5xNKsOtnp77GSvJvHxfvE5ePAakE
b+Bv4UFoM3d1GDa63Jn/iSj9MD2Q0pxxdRWmj6blOgepMkDcTeG5VzrOcAndHMKQ
NQZhXZgcuobsmx7pSa8TfRW3CVakRYzBOYrj4WsoPoScxaF2XJL1toloxNXMEQ5H
lp9dAhpt7JER6rmWWcuL8qeuQ+pfRN3ax7s6aMRd6YF4cwR6w+vPf6mnwNbroYcX
8Sr5pE4jI349E/HpzAyO9tmbVuFa+LU=
-----END CERTIFICATE-----
Generated at Mon Apr 20 01:49:37 2026 by rpki-client