Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/ad94ef69-72cd-37f4-bd4e-61fc74018a4b.roa
File:                     ad94ef69-72cd-37f4-bd4e-61fc74018a4b.roa (raw, json)
Hash identifier:          OBDWiINlTQ33FJY4n9oOHdMFzx8RUq8kPYo8W/wj3TA=
Subject key identifier:   CE:5C:DB:10:DB:F0:89:6A:93:E7:93:6F:89:49:9D:D1:70:14:DC:27
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584F5E62BC3D3FAE9F82486BFD00
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/ad94ef69-72cd-37f4-bd4e-61fc74018a4b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     54980
IP address blocks:        23.169.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:bc:3d:3f:ae:9f:82:48:6b:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=a54aaad6-ca18-4ffc-895c-50adea41daf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:7a:18:19:5c:b2:02:2f:a9:2d:0a:df:88:
                    54:68:7e:a9:77:62:b0:89:c2:dc:07:26:83:f4:74:
                    98:57:ed:d5:f4:f6:c2:23:fa:ed:6c:d3:6b:80:1f:
                    53:6e:96:f3:a9:97:f3:98:74:60:3d:51:40:40:70:
                    3b:45:f4:9b:6c:3a:25:ca:f9:d8:83:a7:31:28:c2:
                    c8:eb:3f:4a:e2:db:d1:99:ca:49:ed:8b:d9:ce:05:
                    3c:6c:55:ce:68:8f:15:32:c4:81:95:5f:a7:ab:43:
                    57:9f:25:f1:4b:25:62:26:cc:6d:33:46:f2:2c:14:
                    bf:03:ec:82:cd:8d:77:3d:39:eb:b9:fb:bc:21:cb:
                    4b:0c:67:db:ff:42:99:db:96:c2:b3:81:7d:19:45:
                    94:39:93:a7:92:2a:c9:d4:66:83:2d:85:e4:f8:92:
                    e4:9a:4c:38:db:f6:cb:ee:41:59:2d:df:09:d2:3d:
                    03:c9:6d:9b:d6:81:3f:5a:06:2e:9d:29:cd:55:e6:
                    93:46:33:bc:93:4a:8c:84:1e:bf:0e:49:f8:03:8f:
                    29:14:10:25:2b:bc:dc:12:87:4f:cf:14:01:b7:46:
                    05:e1:96:48:73:d9:3c:e9:85:a9:5d:60:7d:12:98:
                    cb:65:bf:b1:8a:99:9c:b0:2e:72:c0:71:de:f8:b4:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:DB:10:DB:F0:89:6A:93:E7:93:6F:89:49:9D:D1:70:14:DC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/ad94ef69-72cd-37f4-bd4e-61fc74018a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:18:6a:d2:e8:86:83:03:d8:5d:12:be:ba:1b:1f:b2:ea:
         aa:96:7a:0b:ba:84:a0:b9:6b:28:8d:c7:80:24:39:8b:d8:c6:
         ed:87:b9:4d:fd:1e:e4:1d:e7:4e:a1:bb:61:39:d8:08:78:cf:
         ff:b0:9e:ee:63:56:41:97:a2:e1:e7:40:83:61:89:a3:fb:44:
         60:3a:62:14:06:1a:9e:1a:9d:7d:4f:e9:24:fd:44:77:02:5a:
         79:5c:18:2c:88:5d:b1:13:18:b6:9a:57:4b:92:7d:3e:57:27:
         19:16:c3:d1:c4:87:c1:66:8d:8a:e3:cd:26:c1:6b:73:41:50:
         f2:e6:e7:42:c0:f1:95:51:af:62:7d:27:c8:ad:a8:e2:8d:68:
         63:75:e2:35:25:a9:f8:63:42:7a:5a:12:ee:7e:61:af:e6:82:
         35:77:d7:bc:7e:05:24:6c:14:5d:cc:02:2e:85:63:e2:31:af:
         0d:92:d5:c6:b8:11:16:e0:4d:fa:fe:95:67:86:9b:73:e7:99:
         a0:04:f6:49:d6:5f:9c:e9:ce:4e:4e:e6:a2:f2:df:05:77:fa:
         3f:d1:64:3c:e7:d4:60:63:c4:83:dc:b4:c7:c2:7d:6b:e6:df:
         95:92:d9:f8:0a:a5:70:41:d5:e4:f1:f9:eb:9d:4b:ed:f7:32:
         71:0c:51:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrw9P66fgkhr/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk
YzQ1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
YTU0YWFhZDYtY2ExOC00ZmZjLTg5NWMtNTBhZGVhNDFkYWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF96GBlcsgIvqS0K34hUaH6pd2KwicLcByaD
9HSYV+3V9PbCI/rtbNNrgB9TbpbzqZfzmHRgPVFAQHA7RfSbbDolyvnYg6cxKMLI
6z9K4tvRmcpJ7YvZzgU8bFXOaI8VMsSBlV+nq0NXnyXxSyViJsxtM0byLBS/A+yC
zY13PTnrufu8IctLDGfb/0KZ25bCs4F9GUWUOZOnkirJ1GaDLYXk+JLkmkw42/bL
7kFZLd8J0j0DyW2b1oE/WgYunSnNVeaTRjO8k0qMhB6/Dkn4A48pFBAlK7zcEodP
zxQBt0YF4ZZIc9k86YWpXWB9EpjLZb+xipmcsC5ywHHe+LT9mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5c2xDb8Ilqk+eTb4lJndFwFNwnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh
NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvYWQ5NGVmNjktNzJjZC0z
N2Y0LWJkNGUtNjFmYzc0MDE4YTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1
MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl
ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm
ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6kgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESpGGrS6IaDA9hdEr66Gx+y6qqWegu6hKC5ayiNx4AkOYvYxu2HuU39
HuQd506hu2E52Ah4z/+wnu5jVkGXouHnQINhiaP7RGA6YhQGGp4anX1P6ST9RHcC
WnlcGCyIXbETGLaaV0uSfT5XJxkWw9HEh8FmjYrjzSbBa3NBUPLm50LA8ZVRr2J9
J8itqOKNaGN14jUlqfhjQnpaEu5+Ya/mgjV317x+BSRsFF3MAi6FY+Ixrw2S1ca4
ERbgTfr+lWeGm3PnmaAE9knWX5zpzk5O5qLy3wV3+j/RZDzn1GBjxIPctMfCfWvm
35WS2fgKpXBB1eTx+eudS+33MnEMUa4=
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:47:18 2026 by rpki-client