Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/9bac2f48-bc53-31d8-9e47-4cb717e95796.roa
File:                     9bac2f48-bc53-31d8-9e47-4cb717e95796.roa (raw, json)
Hash identifier:          JdrDh3l8PYOhaJJbKzlWRWuHV3fa7+5SbqoRqzjiIFk=
Subject key identifier:   2C:16:B7:20:CD:1A:CC:AD:40:C5:BF:87:42:FE:CD:D7:2E:BE:FC:F8
Certificate issuer:       /CN=2cda86ec-8ca4-4784-9e6e-73eba390a658
Certificate serial:       010D0C9F4328584D9799AEBE620113A414652C00
Authority key identifier: AA:F1:9A:8E:21:69:A0:E6:C0:BF:2D:78:B0:4B:B1:76:8F:24:A2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/9bac2f48-bc53-31d8-9e47-4cb717e95796.roa
Signing time:             Wed 22 Apr 2026 15:18:17 +0000
ROA not before:           Wed 22 Apr 2026 15:18:17 +0000
ROA not after:            Tue 21 Jul 2026 15:18:17 +0000
asID:                     394495
IP address blocks:        23.169.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/2cda86ec-8ca4-4784-9e6e-73eba390a658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/2cda86ec-8ca4-4784-9e6e-73eba390a658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:99:ae:be:62:01:13:a4:14:65:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cda86ec-8ca4-4784-9e6e-73eba390a658
        Validity
            Not Before: Apr 22 15:18:17 2026 GMT
            Not After : Jul 21 15:18:17 2026 GMT
        Subject: CN=f7543ba8-24ae-49e8-b5a2-0177959d25cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:de:cb:c9:97:bd:38:56:42:eb:3f:18:65:
                    82:25:a3:02:3b:dc:7d:83:0e:85:99:2f:9e:62:89:
                    d2:e1:42:cc:99:84:78:86:7f:fd:cc:75:80:6b:f2:
                    e6:89:e8:8d:8c:96:1d:7c:52:c4:7a:f9:49:8f:b8:
                    29:81:89:a7:9a:40:4d:17:21:2a:a4:dd:36:87:6e:
                    8c:76:75:ca:c2:c8:14:99:b0:6b:d9:fd:ef:34:e8:
                    dd:7a:21:0f:9d:0a:37:de:72:f6:28:e2:8b:9a:0c:
                    80:93:f3:1c:d3:25:f8:52:cb:ae:10:c2:be:0e:e9:
                    0a:6a:72:22:bd:b7:4c:32:33:03:60:cc:3b:ec:42:
                    7d:9a:b9:ef:a4:f9:81:5b:c9:e0:fd:9b:e9:4d:be:
                    21:dc:67:de:fc:3f:87:08:6f:ab:c3:c3:6e:97:e5:
                    d2:82:91:ca:9d:26:6a:6a:c2:06:e1:c3:f5:17:e4:
                    ab:58:84:c9:ab:73:13:0f:e2:6c:4b:da:6d:64:8a:
                    84:8f:b5:cd:98:9d:06:98:0d:f8:90:68:54:e8:35:
                    d5:1a:3c:c1:ff:1d:55:bc:0a:fe:38:d4:c7:d1:be:
                    f3:aa:49:ce:0f:de:fb:07:f7:94:46:ac:ce:9d:99:
                    9d:c1:00:7a:3e:b7:9f:29:96:b9:01:0c:32:99:34:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:B7:20:CD:1A:CC:AD:40:C5:BF:87:42:FE:CD:D7:2E:BE:FC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/9bac2f48-bc53-31d8-9e47-4cb717e95796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658/2cda86ec-8ca4-4784-9e6e-73eba390a658.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:9A:8E:21:69:A0:E6:C0:BF:2D:78:B0:4B:B1:76:8F:24:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2cda86ec-8ca4-4784-9e6e-73eba390a658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:7c:10:62:d5:48:10:63:96:6c:8e:67:84:4f:fd:1c:48:
         54:dc:33:fb:9b:69:d9:e2:1a:14:2f:ef:b4:55:39:7b:b4:8c:
         e5:4c:a6:7a:85:b5:a3:16:a9:57:52:81:38:86:b5:08:ef:8b:
         74:6e:ba:3c:2b:09:b8:64:18:18:6d:c9:99:9b:6c:9f:67:84:
         cf:05:7b:a3:bf:d2:a7:fc:d0:46:55:b8:5a:54:8e:aa:e8:1f:
         fd:88:b9:8a:54:f6:40:a8:51:38:a2:ea:c9:2e:6a:1c:91:05:
         04:74:23:fe:75:82:dc:a6:4f:da:68:d6:71:1d:04:f5:26:c2:
         dc:76:60:06:ef:57:8c:47:a8:d7:19:b3:7b:8a:f9:4a:46:a5:
         67:f1:f4:74:54:56:20:a8:69:28:6a:b4:20:bd:1b:d0:d9:50:
         66:4a:a3:d8:01:6d:09:11:a7:cf:4e:36:93:93:49:bd:0f:59:
         b3:9e:35:58:1c:42:a2:bb:0e:d2:15:63:65:d8:5c:4d:5a:94:
         47:bb:3b:b7:aa:3f:3f:2e:dc:5a:10:77:0a:71:11:98:26:cd:
         7c:b7:f2:90:37:c0:ec:b9:d8:4f:b0:0f:b4:41:10:53:db:01:
         b1:85:b2:e3:03:ed:81:88:ef:71:92:38:61:ad:98:48:b5:7e:
         b3:2e:51:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Xma6+YgETpBRlLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNkYTg2ZWMtOGNhNC00Nzg0LTllNmUtNzNlYmEzOTBh
NjU4MB4XDTI2MDQyMjE1MTgxN1oXDTI2MDcyMTE1MTgxN1owLzEtMCsGA1UEAxMk
Zjc1NDNiYTgtMjRhZS00OWU4LWI1YTItMDE3Nzk1OWQyNWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/ey8mXvThWQus/GGWCJaMCO9x9gw6FmS+e
YonS4ULMmYR4hn/9zHWAa/LmieiNjJYdfFLEevlJj7gpgYmnmkBNFyEqpN02h26M
dnXKwsgUmbBr2f3vNOjdeiEPnQo33nL2KOKLmgyAk/Mc0yX4UsuuEMK+DukKanIi
vbdMMjMDYMw77EJ9mrnvpPmBW8ng/ZvpTb4h3Gfe/D+HCG+rw8Nul+XSgpHKnSZq
asIG4cP1F+SrWITJq3MTD+JsS9ptZIqEj7XNmJ0GmA34kGhU6DXVGjzB/x1VvAr+
ONTH0b7zqknOD977B/eURqzOnZmdwQB6PrefKZa5AQwymTTAqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwWtyDNGsytQMW/h0L+zdcuvvz4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yY2Rh
ODZlYy04Y2E0LTQ3ODQtOWU2ZS03M2ViYTM5MGE2NTgvOWJhYzJmNDgtYmM1My0z
MWQ4LTllNDctNGNiNzE3ZTk1Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmNkYTg2ZWMtOGNhNC00Nzg0LTll
NmUtNzNlYmEzOTBhNjU4LzJjZGE4NmVjLThjYTQtNDc4NC05ZTZlLTczZWJhMzkw
YTY1OC5jcmwwHwYDVR0jBBgwFoAUqvGajiFpoObAvy14sEuxdo8koiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yY2RhODZlYy04Y2E0LTQ3ODQtOWU2ZS03M2Vi
YTM5MGE2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6nYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFthfBBi1UgQY5ZsjmeET/0cSFTcM/ubadniGhQv77RVOXu0jOVMpnqF
taMWqVdSgTiGtQjvi3RuujwrCbhkGBhtyZmbbJ9nhM8Fe6O/0qf80EZVuFpUjqro
H/2IuYpU9kCoUTii6skuahyRBQR0I/51gtymT9po1nEdBPUmwtx2YAbvV4xHqNcZ
s3uK+UpGpWfx9HRUViCoaShqtCC9G9DZUGZKo9gBbQkRp89ONpOTSb0PWbOeNVgc
QqK7DtIVY2XYXE1alEe7O7eqPz8u3FoQdwpxEZgmzXy38pA3wOy52E+wD7RBEFPb
AbGFsuMD7YGI73GSOGGtmEi1frMuUaI=
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:51 2026 by rpki-client