Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa
File:                     57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa (raw, json)
Hash identifier:          Z8hXbD6SHc2c42mfAnfpyRAWY2juqJYKMffw7OrzRX0=
Subject key identifier:   50:19:10:AA:97:34:40:D0:78:44:6B:FE:B2:15:C9:A2:13:35:2F:55
Certificate issuer:       /CN=dd639a75-4ad6-4357-bfb1-0a1cbd65f344
Certificate serial:       010D0C9F4328584E6B0A1793624CD16A9604B2E0
Authority key identifier: 3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     402153
IP address blocks:        23.148.184.0/24 maxlen: 24
                          2602:ff29::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:17:93:62:4c:d1:6a:96:04:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd639a75-4ad6-4357-bfb1-0a1cbd65f344
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=1c82d6e9-bd87-4b3e-a5a9-82c0e453231c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:53:cb:88:c0:a5:1d:7b:46:db:37:2f:0b:
                    7a:aa:93:8b:6d:ea:51:0b:1f:b5:2d:78:6b:e3:39:
                    40:7c:d4:e2:cd:a0:c3:f6:36:f2:59:a1:e6:b7:49:
                    d4:ef:a5:1a:97:1a:aa:23:f6:99:0c:8a:ab:b9:2f:
                    9d:7c:01:2b:d0:6b:e3:5e:bb:74:da:cf:9b:8a:7a:
                    89:dc:9d:38:cb:fd:eb:54:a5:7c:b6:fa:2b:6f:97:
                    99:c0:60:d6:da:ff:2d:d4:af:80:a9:65:45:50:70:
                    bc:b2:1d:bd:d2:c1:eb:f3:09:ab:4f:d8:ea:70:67:
                    0b:c8:4e:98:68:d4:c7:2f:08:6b:79:4a:2c:50:83:
                    c9:fb:6c:51:ed:b0:a9:23:d0:2b:d4:cd:8a:38:d9:
                    b6:75:cf:de:2f:19:f7:b4:9f:d3:88:af:13:24:99:
                    da:15:2b:10:93:09:54:0d:6b:1b:c8:e0:6a:ea:7f:
                    58:18:64:aa:26:8e:76:94:72:62:5f:1d:5e:33:e2:
                    8c:7d:63:86:84:f4:c7:6e:0b:ce:18:18:29:c2:97:
                    69:a2:40:ea:dc:b6:43:a1:ec:4e:32:77:d7:d0:62:
                    d2:0f:f3:2a:89:9f:b1:24:32:b1:73:55:a5:2b:70:
                    47:09:ec:a4:27:1a:24:8a:8f:aa:08:10:dd:43:f1:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:19:10:AA:97:34:40:D0:78:44:6B:FE:B2:15:C9:A2:13:35:2F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/57f583dc-beb8-35dd-9ada-8d7d83b09b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.crl

            X509v3 Authority Key Identifier:
                keyid:3F:06:CC:18:87:D3:9D:DE:A6:CD:D3:7C:8C:F7:21:5D:C3:21:A5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd639a75-4ad6-4357-bfb1-0a1cbd65f344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.184.0/24
                IPv6:
                  2602:ff29::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:3c:ad:a7:1e:61:a2:9c:c2:82:7f:f3:2c:f0:1e:e9:f6:
         d0:e5:a9:ec:50:17:2e:61:eb:76:1c:74:10:db:27:03:38:67:
         64:94:43:d5:74:a5:d9:70:42:be:7a:73:7d:aa:63:30:2b:26:
         88:4e:6b:f9:75:bb:9b:a7:91:e8:45:95:29:3a:93:72:ea:08:
         63:8d:e9:f9:80:0c:1e:54:7e:ba:fd:f8:99:1b:82:63:f3:06:
         99:13:b8:1d:2d:fa:1d:13:f3:79:5d:8b:01:ef:0e:c0:e9:e3:
         0d:5b:a8:34:7d:86:f5:e5:4f:19:99:ec:82:a4:e8:40:87:41:
         2e:6b:73:0f:ff:9f:35:ed:76:51:eb:e5:d3:b9:2a:92:c8:5e:
         13:29:93:40:61:44:fb:73:c3:a9:48:0c:d5:fa:4d:fe:ea:5f:
         2b:38:1b:b4:73:bb:9f:bd:1d:6d:5c:7d:f1:b0:e3:ee:31:ae:
         31:53:16:36:66:46:89:f0:14:f1:6d:07:0b:4c:c6:0a:2e:51:
         f4:35:81:59:ca:46:13:e7:4d:dc:46:6b:82:9f:84:83:af:44:
         e6:02:7b:4f:8a:d2:2e:43:a5:ea:4e:18:90:41:71:2f:78:94:
         a4:79:06:d6:a2:fa:1d:ab:b6:80:68:38:54:fe:d0:2b:92:c3:
         3f:4c:25:14
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE5rCheTYkzRapYEsuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MzlhNzUtNGFkNi00MzU3LWJmYjEtMGExY2JkNjVm
MzQ0MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
MWM4MmQ2ZTktYmQ4Ny00YjNlLWE1YTktODJjMGU0NTMyMzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyBTy4jApR17Rts3Lwt6qpOLbepRCx+1LXhr
4zlAfNTizaDD9jbyWaHmt0nU76UalxqqI/aZDIqruS+dfAEr0GvjXrt02s+binqJ
3J04y/3rVKV8tvorb5eZwGDW2v8t1K+AqWVFUHC8sh290sHr8wmrT9jqcGcLyE6Y
aNTHLwhreUosUIPJ+2xR7bCpI9Ar1M2KONm2dc/eLxn3tJ/TiK8TJJnaFSsQkwlU
DWsbyOBq6n9YGGSqJo52lHJiXx1eM+KMfWOGhPTHbgvOGBgpwpdpokDq3LZDoexO
MnfX0GLSD/MqiZ+xJDKxc1WlK3BHCeykJxokio+qCBDdQ/FIIQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFFAZEKqXNEDQeERr/rIVyaITNS9VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZDYz
OWE3NS00YWQ2LTQzNTctYmZiMS0wYTFjYmQ2NWYzNDQvNTdmNTgzZGMtYmViOC0z
NWRkLTlhZGEtOGQ3ZDgzYjA5YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZGQ2MzlhNzUtNGFkNi00MzU3LWJm
YjEtMGExY2JkNjVmMzQ0L2RkNjM5YTc1LTRhZDYtNDM1Ny1iZmIxLTBhMWNiZDY1
ZjM0NC5jcmwwHwYDVR0jBBgwFoAUPwbMGIfTnd6mzdN8jPchXcMhpeIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZDYzOWE3NS00YWQ2LTQzNTctYmZiMS0wYTFj
YmQ2NWYzNDQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5S4MA4E
AgACMAgDBgAmAv8pADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2qTytpx5hopzCgn/zLPAe6fbQ5ansUBcu
Yet2HHQQ2ycDOGdklEPVdKXZcEK+enN9qmMwKyaITmv5dbubp5HoRZUpOpNy6ghj
jen5gAweVH66/fiZG4Jj8waZE7gdLfodE/N5XYsB7w7A6eMNW6g0fYb15U8ZmeyC
pOhAh0Eua3MP/5817XZR6+XTuSqSyF4TKZNAYUT7c8OpSAzV+k3+6l8rOBu0c7uf
vR1tXH3xsOPuMa4xUxY2ZkaJ8BTxbQcLTMYKLlH0NYFZykYT503cRmuCn4SDr0Tm
AntPitIuQ6XqThiQQXEveJSkeQbWovodq7aAaDhU/tArksM/TCUU
-----END CERTIFICATE-----
Generated at Fri Jul 17 05:22:07 2026 by rpki-client