Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
File:                     f0d10397-6934-3c37-9304-645005e262ae.roa (raw, json)
Hash identifier:          +IJElJcDPE/TaRVwge+8ECvAWckMZyswUShkeoTQCvk=
Subject key identifier:   B9:80:87:A6:8E:69:40:3A:6D:39:F9:D9:2F:25:93:D3:43:FF:86:73
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584EA7947A77EB4709BBDCB5C9C0
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        23.141.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:7a:77:eb:47:09:bb:dc:b5:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c9c02d7-36c0-4e06-af74-09076853686c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:25:ff:dc:b9:5b:05:5e:4c:03:52:18:0b:
                    10:28:d1:e9:d2:21:b5:b5:21:04:ed:3e:25:8f:65:
                    37:25:12:6c:62:da:76:f6:54:84:ad:95:80:61:d8:
                    c7:cb:55:a1:f5:07:7a:1b:6b:ac:c4:84:24:ba:6d:
                    4f:e1:ea:3c:12:16:17:97:16:d8:d2:7b:ef:01:a1:
                    fa:36:dd:2f:ca:e4:ec:ad:96:21:da:87:4c:af:d2:
                    6e:f6:d8:0d:65:9d:97:09:8c:2c:18:dd:82:65:1f:
                    6a:2b:8c:e6:a7:bb:e9:a6:f7:23:ff:29:04:6c:84:
                    6b:48:bd:d3:96:e0:80:0b:7c:da:93:2d:aa:67:0a:
                    b0:fb:5c:22:33:84:3c:7a:26:23:3b:35:2d:82:46:
                    07:8a:1a:cd:b1:c8:0e:63:bd:e1:08:36:5e:05:1b:
                    8a:7c:78:99:69:98:ec:ad:cf:35:53:7d:68:17:b2:
                    62:b5:91:70:c1:db:29:1f:4c:45:26:50:f8:45:75:
                    43:af:24:5d:a6:ad:d4:a4:63:d1:bf:3d:4e:c2:8f:
                    21:3c:b0:7b:0c:5a:4d:4e:a8:68:e2:2c:31:d2:94:
                    2f:d1:d5:1c:0a:21:24:b3:ab:86:03:39:ac:61:85:
                    cf:d8:90:ab:da:97:68:ec:77:81:67:61:f9:81:08:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:80:87:A6:8E:69:40:3A:6D:39:F9:D9:2F:25:93:D3:43:FF:86:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/f0d10397-6934-3c37-9304-645005e262ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:06:b4:38:d7:78:0a:a8:5a:5a:6d:7c:fc:80:b3:0f:9f:
         c7:73:f1:ec:75:f7:62:a3:9f:42:e1:45:99:30:7a:93:2e:1c:
         aa:97:4a:e2:19:3c:45:b7:a3:14:c0:40:0b:4f:2c:32:a3:27:
         e2:70:a8:3e:14:4e:dc:2c:e0:a3:54:7e:60:96:e5:2a:6c:74:
         b4:cc:85:d0:02:90:98:21:a4:4a:a9:0d:cb:2c:fc:c8:23:93:
         94:d0:02:07:4b:a5:c6:f6:33:6d:d2:69:ee:91:2d:c9:8a:75:
         ba:e1:d0:16:3e:1d:97:47:48:81:8b:3b:74:ce:2d:f2:93:a9:
         ce:ea:8c:f8:65:22:d5:ae:c9:0c:2c:c2:90:e4:6a:f9:1b:78:
         8c:72:dd:49:48:13:70:35:5f:db:77:7d:75:16:43:a2:bf:b0:
         14:52:97:bc:fa:70:cc:8b:84:18:1d:5a:fc:96:f5:8a:f9:8c:
         2e:84:06:4c:ac:5b:e3:10:b2:b6:a2:cf:fe:65:a5:0e:51:37:
         4d:b4:03:30:93:cd:3f:02:a6:62:b9:fe:02:15:c0:11:c6:54:
         47:cc:3a:da:b4:33:7b:70:fa:c2:6b:95:1c:3a:ce:00:85:33:
         f5:e3:9f:2f:5a:d6:ed:ac:69:8e:2e:38:8d:8b:e3:6e:8d:85:
         e1:b7:ac:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHp360cJu9y1ycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl
Yzc0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGM5YzAyZDctMzZjMC00ZTA2LWFmNzQtMDkwNzY4NTM2ODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTQl/9y5WwVeTANSGAsQKNHp0iG1tSEE7T4l
j2U3JRJsYtp29lSErZWAYdjHy1Wh9Qd6G2usxIQkum1P4eo8EhYXlxbY0nvvAaH6
Nt0vyuTsrZYh2odMr9Ju9tgNZZ2XCYwsGN2CZR9qK4zmp7vppvcj/ykEbIRrSL3T
luCAC3zaky2qZwqw+1wiM4Q8eiYjOzUtgkYHihrNscgOY73hCDZeBRuKfHiZaZjs
rc81U31oF7JitZFwwdspH0xFJlD4RXVDryRdpq3UpGPRvz1Owo8hPLB7DFpNTqho
4iwx0pQv0dUcCiEks6uGAzmsYYXP2JCr2pdo7HeBZ2H5gQhZlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmAh6aOaUA6bTn52S8lk9ND/4ZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh
NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvZjBkMTAzOTctNjkzNC0z
YzM3LTkzMDQtNjQ1MDA1ZTI2MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky
NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx
ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2
Y2UyMWVjNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFusBrQ413gKqFpabXz8gLMPn8dz8ex192Kjn0LhRZkwepMuHKqXSuIZ
PEW3oxTAQAtPLDKjJ+JwqD4UTtws4KNUfmCW5SpsdLTMhdACkJghpEqpDcss/Mgj
k5TQAgdLpcb2M23Sae6RLcmKdbrh0BY+HZdHSIGLO3TOLfKTqc7qjPhlItWuyQws
wpDkavkbeIxy3UlIE3A1X9t3fXUWQ6K/sBRSl7z6cMyLhBgdWvyW9Yr5jC6EBkys
W+MQsraiz/5lpQ5RN020AzCTzT8CpmK5/gIVwBHGVEfMOtq0M3tw+sJrlRw6zgCF
M/Xjny9a1u2saY4uOI2L426NheG3rNM=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:54:10 2026 by rpki-client