Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
File:                     d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa (raw, json)
Hash identifier:          yCr6bzLMlzIqykrX1oLud4jCVkq2fSd6guKJJdF0hBk=
Subject key identifier:   AC:61:B5:0E:39:2E:AE:D0:DD:E5:09:72:86:F4:B6:8A:0D:5B:C4:D9
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584E4C548982CE17CF89012C7AC0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        23.227.35.0/24 maxlen: 24
                          23.227.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:89:82:ce:17:cf:89:01:2c:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=63811f3c-e408-4aba-94a3-0ce49deaa9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:10:2a:dc:14:33:73:6f:19:23:75:d9:12:
                    79:a4:65:b6:de:53:c5:35:d9:aa:42:98:7a:a6:50:
                    39:bd:53:aa:c6:db:2a:af:33:20:88:ab:ac:90:ba:
                    68:c4:89:68:d0:43:10:de:19:fb:f6:be:d0:14:2a:
                    05:c8:3d:84:0e:3f:d3:1b:12:68:07:4a:1e:40:5a:
                    bc:e9:3a:65:8f:ed:ca:e8:38:e7:cc:03:af:10:64:
                    fc:1d:08:44:cc:5d:fd:e1:b4:09:76:a4:c6:f8:fa:
                    81:eb:b5:7d:18:07:5c:14:20:90:e0:5e:a4:0e:b3:
                    ee:b3:a0:e1:83:37:f4:49:98:c2:65:0a:0a:86:98:
                    69:60:c8:f6:36:aa:a1:a9:3b:63:58:1b:e5:4b:7c:
                    57:ce:0e:50:6f:d4:96:02:d0:40:6b:68:9e:4e:f7:
                    b3:92:69:e6:2f:68:b6:ef:8a:b4:01:a7:59:1e:d9:
                    00:44:51:b6:fc:e9:2b:16:b5:5e:98:5a:b7:c5:4a:
                    05:08:0c:5f:9b:03:2a:8c:41:97:a7:10:3c:6b:bd:
                    f2:5c:b7:57:84:32:bb:47:f1:9d:ee:d3:79:a8:5d:
                    16:19:0e:62:2f:26:03:a8:7a:13:fd:e9:4c:ae:9e:
                    bb:52:53:2c:b2:e7:c7:38:33:db:95:d0:0d:9c:75:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:B5:0E:39:2E:AE:D0:DD:E5:09:72:86:F4:B6:8A:0D:5B:C4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.35.0-23.227.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3e:21:c7:c8:d9:81:f4:7d:50:65:d7:07:ef:c3:fc:31:58:
         2a:cc:a8:33:83:91:7b:2e:8d:5b:a5:29:22:40:9a:e1:af:90:
         f4:12:7b:c9:b3:0a:9a:72:01:44:5f:bc:17:5b:ff:1b:a2:d9:
         2f:f8:39:4f:77:40:00:48:f9:81:12:e9:86:7e:fd:db:60:b9:
         4e:4a:95:86:d7:e3:01:77:5e:8f:50:e4:48:ba:16:00:68:15:
         d7:ed:8e:4f:d5:20:1b:92:bc:e0:78:44:76:0f:41:f0:5a:ad:
         cd:fb:60:b0:f8:08:38:40:69:2e:7c:8e:29:35:98:f6:ee:4d:
         ee:6e:0a:e3:f1:9a:6d:14:96:26:a5:31:ec:7a:76:ec:01:2a:
         85:94:04:1c:96:9e:5f:bf:95:d6:c2:fc:90:17:59:92:a3:c5:
         88:66:45:95:5b:d9:2c:1b:e1:3b:13:d5:84:6d:1f:e3:aa:66:
         1a:25:fb:68:5d:9f:61:24:1b:eb:f5:4b:46:f2:01:f7:e8:cf:
         c3:d7:a8:fd:c2:92:5a:e4:7e:82:39:33:48:c3:6a:11:e9:98:
         f9:71:06:7d:26:40:d9:2d:91:41:02:74:8d:95:37:d5:1e:31:
         4a:38:72:cf:8a:f4:c6:77:1a:7c:74:79:5f:8d:0b:91:5c:b5:
         c4:80:9a:bf
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE5MVImCzhfPiQEsesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NjM4MTFmM2MtZTQwOC00YWJhLTk0YTMtMGNlNDlkZWFhOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R4QKtwUM3NvGSN12RJ5pGW23lPFNdmqQph6
plA5vVOqxtsqrzMgiKuskLpoxIlo0EMQ3hn79r7QFCoFyD2EDj/TGxJoB0oeQFq8
6Tplj+3K6DjnzAOvEGT8HQhEzF394bQJdqTG+PqB67V9GAdcFCCQ4F6kDrPus6Dh
gzf0SZjCZQoKhphpYMj2NqqhqTtjWBvlS3xXzg5Qb9SWAtBAa2ieTvezkmnmL2i2
74q0AadZHtkARFG2/OkrFrVemFq3xUoFCAxfmwMqjEGXpxA8a73yXLdXhDK7R/Gd
7tN5qF0WGQ5iLyYDqHoT/elMrp67UlMssufHODPbldANnHVBYwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKxhtQ45Lq7Q3eUJcob0tooNW8TZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvZDBmZTQwMGUtNWJmNS0z
NmE4LWE0YWEtOGZiYzg2YTI0MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX4yMD
BAAX4yQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAEz4hx8jZgfR9UGXXB+/D/DFYKsyoM4ORey6NW6UpIkCa
4a+Q9BJ7ybMKmnIBRF+8F1v/G6LZL/g5T3dAAEj5gRLphn7922C5TkqVhtfjAXde
j1DkSLoWAGgV1+2OT9UgG5K84HhEdg9B8FqtzftgsPgIOEBpLnyOKTWY9u5N7m4K
4/GabRSWJqUx7Hp27AEqhZQEHJaeX7+V1sL8kBdZkqPFiGZFlVvZLBvhOxPVhG0f
46pmGiX7aF2fYSQb6/VLRvIB9+jPw9eo/cKSWuR+gjkzSMNqEemY+XEGfSZA2S2R
QQJ0jZU31R4xSjhyz4r0xncafHR5X40LkVy1xICavw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:18 2026 by rpki-client