Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa
File:                     5d63b206-9807-3c07-b865-78c350073c3e.roa (raw, json)
Hash identifier:          ru4OINXF3iVUutTLUNQJ/YIjW3mC4Xb07G9ZzF9g1zQ=
Subject key identifier:   F3:E9:E4:E1:B4:8F:68:1E:28:39:4F:AC:A5:AF:CB:70:55:D6:72:97
Certificate issuer:       /CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
Certificate serial:       010D0C9F4328584F549D494DE9A7AB0F62D30380
Authority key identifier: 06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     402038
IP address blocks:        23.146.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:49:4d:e9:a7:ab:0f:62:d3:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=6b879284-a23b-49b3-a8d8-14cddc094e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:99:a6:11:ed:ce:3b:5e:f4:7f:45:78:d3:
                    0d:52:af:04:41:c5:7e:27:d5:17:1d:52:0f:34:e8:
                    50:02:07:18:b9:f2:dd:3e:a0:3e:26:5d:b9:66:b7:
                    9b:30:aa:9b:0b:29:83:77:c6:51:1f:02:da:e2:72:
                    dd:0d:4d:92:f1:02:1d:fc:84:c2:b6:1b:64:dd:6f:
                    45:a9:ae:6f:09:16:fb:81:92:64:cb:ed:3f:e8:7d:
                    ec:86:35:ec:ee:5f:cb:de:51:ac:7e:92:ee:ae:0b:
                    b3:34:b8:f8:fa:f6:15:28:5f:39:3b:5f:e7:cc:e7:
                    b2:0a:d3:74:c9:ca:5a:87:5d:76:44:f7:08:63:c6:
                    b6:b2:42:4a:83:e8:21:96:21:a7:74:fa:d0:6e:4f:
                    90:5d:87:35:23:b5:1f:3e:81:1a:11:11:30:3b:35:
                    a4:46:88:2d:1b:db:3a:02:55:6b:be:d0:7b:f2:f3:
                    f0:ca:65:41:8d:0c:93:32:02:6e:ac:95:b9:18:df:
                    7c:fd:22:dd:c5:ad:ed:19:cf:11:54:f1:b9:06:41:
                    28:17:c0:87:f4:66:ff:67:93:41:f2:86:e4:64:4a:
                    6d:a7:d5:ac:d6:8d:b3:66:b7:01:77:99:87:0f:63:
                    17:0f:a0:82:b1:f1:cd:4a:09:78:00:a2:0a:90:b6:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E9:E4:E1:B4:8F:68:1E:28:39:4F:AC:A5:AF:CB:70:55:D6:72:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl

            X509v3 Authority Key Identifier:
                keyid:06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:23:06:24:e2:db:2e:77:cb:ee:0c:18:40:0a:0b:d9:c4:fb:
         f4:10:cc:3a:c0:a0:41:20:c2:8e:e1:20:71:c6:23:47:20:16:
         ca:04:07:e9:3f:69:c8:fb:d0:ae:3a:da:d3:26:2f:6e:ad:f3:
         1b:67:ba:4a:a2:5f:87:c8:b4:f9:75:6b:03:f7:07:73:72:0c:
         c3:23:43:89:fb:9d:52:ef:5f:d8:2c:08:1f:73:6b:26:12:70:
         d4:d3:16:2c:69:8b:8d:e2:a1:da:f2:64:60:6e:50:d6:0c:f5:
         47:1f:c4:8a:70:6b:a4:bd:05:95:47:0b:c7:5b:24:b7:b5:27:
         8e:fc:3b:de:69:1d:73:21:e9:cc:73:f3:2d:f1:a2:c0:80:5c:
         6c:74:29:ea:6b:3b:d2:13:e4:c8:de:58:90:06:cc:81:c9:59:
         19:bb:71:28:c6:63:68:e9:98:3a:fc:c7:c2:9b:b0:87:14:59:
         9c:c2:b2:8d:e0:01:8c:61:da:2d:b3:a4:c4:fa:bf:a6:ca:fe:
         02:10:49:9b:72:0f:bc:7e:cf:6c:d4:58:91:76:21:67:a0:cb:
         ba:2a:af:fe:59:a5:56:56:eb:7e:21:db:e7:ee:a3:ed:49:02:
         f0:75:e0:78:a0:55:fe:a8:4c:72:8b:a2:e8:82:64:91:6a:91:
         55:04:ff:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUlN6aerD2LTA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQzMDljZGYtN2VjZC00MDFlLTlmNzUtYjRiMTgxYjQ0
YjYzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NmI4NzkyODQtYTIzYi00OWIzLWE4ZDgtMTRjZGRjMDk0ZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDaZphHtzjte9H9FeNMNUq8EQcV+J9UXHVIP
NOhQAgcYufLdPqA+Jl25ZrebMKqbCymDd8ZRHwLa4nLdDU2S8QId/ITCthtk3W9F
qa5vCRb7gZJky+0/6H3shjXs7l/L3lGsfpLurguzNLj4+vYVKF85O1/nzOeyCtN0
ycpah112RPcIY8a2skJKg+ghliGndPrQbk+QXYc1I7UfPoEaEREwOzWkRogtG9s6
AlVrvtB78vPwymVBjQyTMgJurJW5GN98/SLdxa3tGc8RVPG5BkEoF8CH9Gb/Z5NB
8obkZEptp9Ws1o2zZrcBd5mHD2MXD6CCsfHNSgl4AKIKkLbuLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPp5OG0j2geKDlPrKWvy3BV1nKXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ZDMw
OWNkZi03ZWNkLTQwMWUtOWY3NS1iNGIxODFiNDRiNjMvNWQ2M2IyMDYtOTgwNy0z
YzA3LWI4NjUtNzhjMzUwMDczYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGQzMDljZGYtN2VjZC00MDFlLTlm
NzUtYjRiMTgxYjQ0YjYzLzRkMzA5Y2RmLTdlY2QtNDAxZS05Zjc1LWI0YjE4MWI0
NGI2My5jcmwwHwYDVR0jBBgwFoAUBj5J0KQTvwGCXrueDvYoOFcBceYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80ZDMwOWNkZi03ZWNkLTQwMWUtOWY3NS1iNGIx
ODFiNDRiNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5K0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYjBiTi2y53y+4MGEAKC9nE+/QQzDrAoEEgwo7hIHHGI0cgFsoEB+k/
acj70K462tMmL26t8xtnukqiX4fItPl1awP3B3NyDMMjQ4n7nVLvX9gsCB9zayYS
cNTTFixpi43iodryZGBuUNYM9UcfxIpwa6S9BZVHC8dbJLe1J478O95pHXMh6cxz
8y3xosCAXGx0KeprO9IT5MjeWJAGzIHJWRm7cSjGY2jpmDr8x8KbsIcUWZzCso3g
AYxh2i2zpMT6v6bK/gIQSZtyD7x+z2zUWJF2IWegy7oqr/5ZpVZW634h2+fuo+1J
AvB14HigVf6oTHKLouiCZJFqkVUE/wo=
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:02:58 2026 by rpki-client