Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
File:                     16ea430d-5377-3810-a412-dca5c4682907.roa (raw, json)
Hash identifier:          NBmMf18guxTAlJVM2wOPq7axJ+hMyZjVJ8NGNX7oSDs=
Subject key identifier:   1D:27:E5:BE:3D:0B:25:D4:BF:64:B3:D7:83:95:B3:B4:14:07:15:10
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584F6F22E2379349B98811E77740
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     46539
IP address blocks:        23.159.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e2:37:93:49:b9:88:11:e7:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=3a492878-1b8d-451f-873b-e4fb414279db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:57:a7:89:e9:00:aa:b5:dd:63:6a:fc:a8:
                    02:e8:f7:3a:89:fb:bd:73:6a:e2:88:ba:ee:d4:05:
                    6c:aa:7e:3a:7d:cf:c9:af:d5:a0:30:0a:4c:4d:3c:
                    84:ef:e1:2f:87:dd:e3:ec:a2:32:1a:f0:63:2c:ea:
                    2d:d5:99:b7:b5:c0:c2:12:e1:20:e4:27:05:bd:22:
                    ff:81:dd:0e:ec:c9:69:af:11:0e:be:5f:a6:14:e3:
                    b6:0b:e2:a3:59:38:31:a7:1d:a4:2f:d6:f0:f2:93:
                    ef:bf:94:74:e5:f4:3f:0a:63:06:27:af:42:0d:d4:
                    a5:a8:27:ac:5f:8e:6c:b7:06:8d:0a:ee:ea:50:25:
                    b1:93:b9:ae:98:9f:9c:af:bc:72:d7:f8:f9:f0:79:
                    44:cb:ab:b4:03:cf:da:00:ac:5d:d2:39:b8:de:f3:
                    cd:ea:49:b1:15:9d:a0:cd:83:bb:c0:66:fa:98:aa:
                    a8:eb:eb:8c:7b:29:7a:35:7d:40:ee:a5:7b:bd:c0:
                    9c:1c:b4:51:dd:fb:5b:2c:21:ba:78:8e:da:f5:81:
                    2b:38:60:14:44:85:1a:2f:7f:d7:d8:20:e4:6c:bf:
                    17:c5:59:dd:a5:90:cc:d6:b4:d6:44:1b:f0:ce:c4:
                    67:c8:2f:cc:0a:0d:bc:c6:f2:cc:06:f0:5f:8b:3b:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:27:E5:BE:3D:0B:25:D4:BF:64:B3:D7:83:95:B3:B4:14:07:15:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/16ea430d-5377-3810-a412-dca5c4682907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:7c:bc:ae:c2:cb:6e:a2:90:b0:46:24:c0:4b:b8:4b:67:
         5d:ef:70:39:8f:da:bb:4c:01:f6:64:d9:09:3a:dd:fd:ca:79:
         c3:0c:20:b4:ff:fa:7f:48:97:5d:a8:9a:7f:8c:cf:26:70:7e:
         1e:dc:67:dd:c7:d5:77:86:7a:d2:f6:3c:eb:08:24:14:f8:f8:
         a5:94:29:9c:49:2a:3a:ed:a0:b1:7a:d7:9f:4f:ee:b2:f0:c7:
         e1:2c:03:4d:6d:17:b1:db:a8:fe:5e:cd:08:f4:3a:3f:65:ca:
         9e:0b:89:a6:ed:d0:70:3a:39:78:86:45:93:37:ef:63:bf:39:
         16:a2:49:2b:e1:c4:85:9b:d9:35:e0:7f:de:29:3c:5e:88:e9:
         63:78:01:5d:a8:83:88:87:6e:cc:78:cc:6f:96:c1:bc:e9:a6:
         6c:0f:e0:8c:e0:fd:5c:75:da:8a:9d:a3:fa:42:d3:35:15:cb:
         1c:84:b6:41:f1:9c:25:28:f7:5f:d8:17:ae:38:ec:5f:e8:88:
         5b:5d:20:39:bd:13:f0:ad:56:63:c6:64:68:db:82:84:ac:74:
         27:31:7e:97:40:04:61:1f:35:9a:95:cf:21:05:b3:f7:44:8a:
         45:2f:e9:78:53:35:9b:6f:e8:fa:aa:7f:4f:56:8b:36:b8:d6:
         49:0d:ec:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuI3k0m5iBHnd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3OWNlMjgtMjNjNy00NWUxLTliMGUtZDkwMzU4Yzk0
ZjU3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
M2E0OTI4NzgtMWI4ZC00NTFmLTg3M2ItZTRmYjQxNDI3OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkVXp4npAKq13WNq/KgC6Pc6ifu9c2riiLru
1AVsqn46fc/Jr9WgMApMTTyE7+Evh93j7KIyGvBjLOot1Zm3tcDCEuEg5CcFvSL/
gd0O7MlprxEOvl+mFOO2C+KjWTgxpx2kL9bw8pPvv5R05fQ/CmMGJ69CDdSlqCes
X45stwaNCu7qUCWxk7mumJ+cr7xy1/j58HlEy6u0A8/aAKxd0jm43vPN6kmxFZ2g
zYO7wGb6mKqo6+uMeyl6NX1A7qV7vcCcHLRR3ftbLCG6eI7a9YErOGAURIUaL3/X
2CDkbL8XxVndpZDM1rTWRBvwzsRnyC/MCg28xvLMBvBfizuT9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0n5b49CyXUv2Sz14OVs7QUBxUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5
Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAzNThjOTRmNTcvMTZlYTQzMGQtNTM3Ny0z
ODEwLWE0MTItZGNhNWM0NjgyOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE3OWNlMjgtMjNjNy00NWUxLTli
MGUtZDkwMzU4Yzk0ZjU3L2UxNzljZTI4LTIzYzctNDVlMS05YjBlLWQ5MDM1OGM5
NGY1Ny5jcmwwHwYDVR0jBBgwFoAU2AXHLiY/2rj1Q+/5UZWEQBye9GAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAz
NThjOTRmNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5+QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3QfLyuwstuopCwRiTAS7hLZ13vcDmP2rtMAfZk2Qk63f3KecMMILT/
+n9Il12omn+MzyZwfh7cZ93H1XeGetL2POsIJBT4+KWUKZxJKjrtoLF6159P7rLw
x+EsA01tF7HbqP5ezQj0Oj9lyp4Liabt0HA6OXiGRZM372O/ORaiSSvhxIWb2TXg
f94pPF6I6WN4AV2og4iHbsx4zG+WwbzppmwP4Izg/Vx12oqdo/pC0zUVyxyEtkHx
nCUo91/YF6447F/oiFtdIDm9E/CtVmPGZGjbgoSsdCcxfpdABGEfNZqVzyEFs/dE
ikUv6XhTNZtv6Pqqf09Wiza41kkN7MU=
-----END CERTIFICATE-----
Generated at Sat Oct 10 06:05:59 2026 by rpki-client