Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa
File:                     65c07aa6-3363-3bfe-90ce-1f77843ec006.roa (raw, json)
Hash identifier:          QNUI9GSpLR7o+l4PjLrjVX/VNaoJ/yMZyY25El9l694=
Subject key identifier:   B6:31:B9:4A:02:B2:BB:47:68:4B:A5:2A:0B:D8:04:A4:66:9B:2E:F7
Certificate issuer:       /CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35
Certificate serial:       010D0C9F4328584D67DFF997AE4DD0DBED275E40
Authority key identifier: 81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     152179
IP address blocks:        23.141.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f9:97:ae:4d:d0:db:ed:27:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bdbf25-1c3a-4530-9364-5fdbf2a6aa35
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=4d1a9fb9-13b0-4c71-84d0-40a9e7ade602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:2f:1f:f5:09:bf:1e:2f:d6:fe:63:dc:ed:
                    c9:7b:f2:bb:fc:b7:e9:17:9e:e2:08:fe:2a:cd:4e:
                    76:e2:30:3f:ff:e0:ea:66:f2:c5:db:19:a8:5a:83:
                    e3:02:b5:05:2a:d0:fb:98:b7:ae:0b:44:52:4c:cc:
                    d1:f6:c3:a6:6a:ad:f1:2d:f8:2d:e6:75:7d:c1:bf:
                    60:5a:14:7b:89:5b:4c:fd:6f:2b:0f:ba:27:14:09:
                    65:86:b0:13:53:8b:a3:fd:e5:79:48:0b:6f:cf:2f:
                    ce:f1:c7:67:c1:cc:f6:ba:f6:c1:74:c5:74:a0:60:
                    58:6e:56:90:2d:ef:ab:16:93:fd:5f:47:e4:38:8f:
                    9a:97:cb:1f:f1:b2:84:c7:57:42:cb:58:8b:4d:18:
                    45:f7:9a:43:8e:6c:f8:f2:d0:07:30:53:ef:75:85:
                    1b:b2:4a:5a:5c:bf:62:ac:dd:e2:77:e4:96:49:a3:
                    1d:d3:75:fa:22:96:35:ed:d1:ac:42:53:a9:5b:86:
                    51:28:64:4c:19:f3:94:ae:0b:71:64:68:e8:fe:c8:
                    2d:9e:0c:21:a7:76:ad:cd:60:72:d4:c4:ec:e7:8f:
                    55:bb:15:16:b0:be:ef:50:ee:55:55:8b:7d:7b:93:
                    51:25:59:44:42:73:f4:9c:8c:84:21:4b:f9:94:fa:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:B9:4A:02:B2:BB:47:68:4B:A5:2A:0B:D8:04:A4:66:9B:2E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/65c07aa6-3363-3bfe-90ce-1f77843ec006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.crl

            X509v3 Authority Key Identifier:
                keyid:81:8B:22:BE:42:72:90:B5:8D:97:76:ED:2F:D2:B5:82:1B:A0:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04bdbf25-1c3a-4530-9364-5fdbf2a6aa35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:6f:ba:ea:19:4e:91:28:71:dd:18:af:cb:46:60:75:9c:
         e9:4e:75:23:80:cd:6c:ed:e6:33:3f:65:56:7f:c6:5d:7c:99:
         a9:c8:34:ab:27:fb:05:db:e8:7f:f4:9e:fb:a4:fd:15:c7:8e:
         a5:53:5f:2c:59:65:a2:cf:04:ea:be:c6:70:67:16:03:b4:47:
         c7:bf:59:d8:bc:48:e0:a2:c6:39:bb:1a:bf:91:85:18:98:a0:
         77:b9:38:12:99:ea:76:ae:cc:a0:79:a2:a8:a1:b3:05:93:8c:
         33:b2:11:a4:4f:61:c8:fc:8c:4c:81:a1:1c:54:7b:b2:fd:10:
         e8:b9:bb:64:54:bd:02:27:3f:f9:38:71:4e:e3:55:37:2d:00:
         80:5c:ed:24:da:cd:10:0a:16:90:b9:36:f4:2c:1c:44:45:3d:
         fb:c2:6a:06:c8:4b:6a:aa:b4:9c:9c:34:8a:7c:e6:e6:08:a7:
         f2:b2:3a:0d:d5:e4:c1:a6:a5:2c:e8:90:8a:9b:c4:27:7f:46:
         ca:77:a6:ee:40:5e:2e:8e:9c:70:dc:6b:4a:85:1d:bb:4a:82:
         7d:68:57:65:d7:f7:7b:1d:cf:b7:95:72:fb:0b:39:d6:ff:c4:
         75:45:72:70:ca:50:d5:2d:90:59:ea:ee:5b:b7:f4:dc:46:5e:
         64:4f:cf:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/mXrk3Q2+0nXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRiZGJmMjUtMWMzYS00NTMwLTkzNjQtNWZkYmYyYTZh
YTM1MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk
NGQxYTlmYjktMTNiMC00YzcxLTg0ZDAtNDBhOWU3YWRlNjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CMvH/UJvx4v1v5j3O3Je/K7/LfpF57iCP4q
zU524jA//+DqZvLF2xmoWoPjArUFKtD7mLeuC0RSTMzR9sOmaq3xLfgt5nV9wb9g
WhR7iVtM/W8rD7onFAllhrATU4uj/eV5SAtvzy/O8cdnwcz2uvbBdMV0oGBYblaQ
Le+rFpP9X0fkOI+al8sf8bKEx1dCy1iLTRhF95pDjmz48tAHMFPvdYUbskpaXL9i
rN3id+SWSaMd03X6IpY17dGsQlOpW4ZRKGRMGfOUrgtxZGjo/sgtngwhp3atzWBy
1MTs549VuxUWsL7vUO5VVYt9e5NRJVlEQnP0nIyEIUv5lPo41QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYxuUoCsrtHaEulKgvYBKRmmy73MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJk
YmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRiZjJhNmFhMzUvNjVjMDdhYTYtMzM2My0z
YmZlLTkwY2UtMWY3Nzg0M2VjMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDRiZGJmMjUtMWMzYS00NTMwLTkz
NjQtNWZkYmYyYTZhYTM1LzA0YmRiZjI1LTFjM2EtNDUzMC05MzY0LTVmZGJmMmE2
YWEzNS5jcmwwHwYDVR0jBBgwFoAUgYsivkJykLWNl3btL9K1ghugsZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNGJkYmYyNS0xYzNhLTQ1MzAtOTM2NC01ZmRi
ZjJhNmFhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8fb7rqGU6RKHHdGK/LRmB1nOlOdSOAzWzt5jM/ZVZ/xl18manINKsn
+wXb6H/0nvuk/RXHjqVTXyxZZaLPBOq+xnBnFgO0R8e/Wdi8SOCixjm7Gr+RhRiY
oHe5OBKZ6nauzKB5oqihswWTjDOyEaRPYcj8jEyBoRxUe7L9EOi5u2RUvQInP/k4
cU7jVTctAIBc7STazRAKFpC5NvQsHERFPfvCagbIS2qqtJycNIp85uYIp/KyOg3V
5MGmpSzokIqbxCd/Rsp3pu5AXi6OnHDca0qFHbtKgn1oV2XX93sdz7eVcvsLOdb/
xHVFcnDKUNUtkFnq7lu39NxGXmRPz1s=
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:03:03 2026 by rpki-client