Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
File:                     856f6f8b-6115-3749-b368-928efb2b3cdb.roa (raw, json)
Hash identifier:          4oNrSAymY4ROYVQMSO6oYRU+X2upnEVwF5RVNrbbmm0=
Subject key identifier:   30:04:84:F1:07:87:96:19:15:A0:2F:9E:8F:5E:CF:FB:D1:97:E6:14
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584EEEB75C70E4AB4714A36CCB00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     21738
IP address blocks:        23.150.41.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5c:70:e4:ab:47:14:a3:6c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=8a2bd642-943b-4ea9-a5a2-4eca513ce15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:52:57:5c:33:f3:dc:9b:8e:76:3a:d2:12:
                    72:56:9a:d4:3f:c1:49:b3:19:08:22:77:ad:66:93:
                    ca:8a:c6:ef:6d:fe:d8:44:6f:8d:59:f6:65:0c:eb:
                    78:cd:99:35:1b:8c:cd:be:fc:44:97:a9:50:33:d9:
                    a2:02:a7:dd:25:c8:40:76:07:51:97:8d:15:a2:12:
                    b2:f2:33:c6:c9:6e:d2:3b:cb:dc:34:ea:2f:6e:c3:
                    08:a2:f1:07:26:1e:ac:7d:d1:99:56:69:ef:d6:ad:
                    3c:4e:9e:b6:af:09:cd:9c:3d:11:2c:36:04:3d:1a:
                    27:ef:f3:9d:e4:67:eb:31:5e:63:fd:9e:30:66:56:
                    ff:2d:a3:56:ad:59:44:b2:19:d2:d3:6f:e9:08:43:
                    58:4f:c6:82:f4:fe:ee:3c:66:3c:8a:b4:b5:6f:de:
                    e3:df:83:29:fa:6b:29:44:45:1f:6c:54:be:c3:f4:
                    9f:2d:8a:e8:fc:f7:ec:7e:89:23:c4:28:c7:7e:eb:
                    dc:4e:8a:81:e1:3d:33:98:4d:ce:1b:cd:a7:4c:a8:
                    20:a0:08:f3:ed:11:50:a2:34:6d:bd:c2:86:7c:44:
                    9b:76:93:a4:07:6c:85:68:d4:31:82:a7:68:e8:e6:
                    ed:2b:12:e4:cc:ee:bd:60:13:e5:c8:87:93:67:fc:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:04:84:F1:07:87:96:19:15:A0:2F:9E:8F:5E:CF:FB:D1:97:E6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7b:00:5e:ed:06:a1:4b:c8:79:55:6a:c6:1a:cc:94:54:d6:
         53:e8:6b:d1:86:5e:e8:2e:6e:af:98:1a:2c:70:9b:9f:5d:89:
         aa:7f:6d:07:2f:b9:d7:45:f8:53:ae:0c:99:0b:b0:a1:36:d7:
         d7:aa:df:ec:4a:c0:ab:6a:5f:99:29:18:06:73:87:3d:f5:cc:
         64:8f:56:74:6d:20:af:6e:a2:27:60:8b:e5:07:80:39:1d:a8:
         37:9b:d4:6f:1f:16:b2:55:71:07:db:84:71:86:b9:94:11:15:
         8c:60:1a:8b:2a:c9:81:fe:53:49:f9:8c:1f:79:f4:47:b6:ad:
         94:b2:8e:bd:f4:91:17:7b:c5:35:4f:0a:31:ae:b8:89:fb:39:
         60:8b:6e:2c:25:5f:c6:76:69:df:d3:97:d8:b2:54:19:65:52:
         15:49:45:0d:d2:32:ab:42:45:86:ed:86:6a:6a:0c:54:06:b1:
         41:6c:2a:f4:94:0b:b1:f3:5b:e1:d7:12:21:f1:14:98:67:ea:
         8d:50:d0:aa:f2:be:3b:3d:6b:59:16:70:92:35:97:e2:10:4b:
         52:55:b0:7a:77:21:89:d2:0d:ff:35:9b:7a:cc:70:cf:74:85:
         d2:37:b6:4a:cf:eb:93:d6:3b:c1:9a:93:e8:8f:ae:b4:b1:1e:
         10:e5:5f:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1xw5KtHFKNsywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl
ZDYzMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
OGEyYmQ2NDItOTQzYi00ZWE5LWE1YTItNGVjYTUxM2NlMTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0tSV1wz89ybjnY60hJyVprUP8FJsxkIInet
ZpPKisbvbf7YRG+NWfZlDOt4zZk1G4zNvvxEl6lQM9miAqfdJchAdgdRl40VohKy
8jPGyW7SO8vcNOovbsMIovEHJh6sfdGZVmnv1q08Tp62rwnNnD0RLDYEPRon7/Od
5GfrMV5j/Z4wZlb/LaNWrVlEshnS02/pCENYT8aC9P7uPGY8irS1b97j34Mp+msp
REUfbFS+w/SfLYro/PfsfokjxCjHfuvcToqB4T0zmE3OG82nTKggoAjz7RFQojRt
vcKGfESbdpOkB2yFaNQxgqdo6ObtKxLkzO69YBPlyIeTZ/xIzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAEhPEHh5YZFaAvno9ez/vRl+YUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2
MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvODU2ZjZmOGItNjExNS0z
NzQ5LWIzNjgtOTI4ZWZiMmIzY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh
NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz
ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5
ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEt7AF7tBqFLyHlVasYazJRU1lPoa9GGXugubq+YGixwm59diap/bQcv
uddF+FOuDJkLsKE219eq3+xKwKtqX5kpGAZzhz31zGSPVnRtIK9uoidgi+UHgDkd
qDeb1G8fFrJVcQfbhHGGuZQRFYxgGosqyYH+U0n5jB959Ee2rZSyjr30kRd7xTVP
CjGuuIn7OWCLbiwlX8Z2ad/Tl9iyVBllUhVJRQ3SMqtCRYbthmpqDFQGsUFsKvSU
C7HzW+HXEiHxFJhn6o1Q0Kryvjs9a1kWcJI1l+IQS1JVsHp3IYnSDf81m3rMcM90
hdI3tkrP65PWO8Gak+iPrrSxHhDlX7E=
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:14:05 2026 by rpki-client