Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2c815a63-7aa6-3db0-955e-0928d6e4b165.roa
File:                     2c815a63-7aa6-3db0-955e-0928d6e4b165.roa (raw, json)
Hash identifier:          0LQgX7t/DxgkWIiKvhBcuqdV8FIJR7r+CJK5KR+XiQI=
Subject key identifier:   E0:78:75:41:33:37:0B:48:42:B3:7E:7E:8E:B0:3D:B6:CF:D8:52:CD
Certificate issuer:       /CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3
Certificate serial:       010D0C9F4328584DB37A18AC838C4E3A059A4380
Authority key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2c815a63-7aa6-3db0-955e-0928d6e4b165.roa
Signing time:             Sat 02 May 2026 14:57:17 +0000
ROA not before:           Sat 02 May 2026 14:57:17 +0000
ROA not after:            Fri 31 Jul 2026 14:57:17 +0000
asID:                     7029
IP address blocks:        23.128.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:7a:18:ac:83:8c:4e:3a:05:9a:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3
        Validity
            Not Before: May  2 14:57:17 2026 GMT
            Not After : Jul 31 14:57:17 2026 GMT
        Subject: CN=cb611df2-1066-4bba-9389-c113a49d68a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:90:ac:61:d5:fa:22:cf:4b:b7:0b:89:ee:
                    91:cb:02:60:9c:77:bb:bf:88:1f:eb:f2:b4:30:69:
                    48:78:e0:84:94:ca:45:cf:74:d5:eb:2c:3a:ff:52:
                    71:45:ba:8f:9d:58:5a:91:fa:aa:4f:bc:db:97:1a:
                    26:f5:a5:a3:9a:62:15:c6:94:21:84:2d:47:c8:79:
                    9a:34:a2:c5:91:86:91:d8:07:6d:d5:16:c3:e8:29:
                    c7:5d:03:7b:36:34:c3:b4:5b:32:6c:55:42:b6:60:
                    1f:bf:b3:84:c6:12:b0:05:59:3b:f0:ad:d0:9a:aa:
                    75:1b:c4:aa:49:e8:03:92:9b:e6:2f:47:2b:dc:b9:
                    df:5e:77:39:ac:02:3f:91:2a:4f:92:29:9c:d1:37:
                    73:ff:86:53:7f:3b:3d:5a:76:28:cd:6f:19:ff:7d:
                    54:1f:fc:a6:80:4e:98:6d:fb:0f:af:ac:f8:6a:cc:
                    d0:c5:a8:ba:16:fd:d7:e2:d1:b5:e7:73:39:16:1d:
                    d4:4e:06:e9:b0:4a:62:db:5a:03:9f:42:a2:89:09:
                    17:f3:bb:ab:b1:9a:9c:d4:c7:8b:84:19:b6:d3:cb:
                    c4:fe:b0:bb:c5:2d:48:cc:ad:72:fe:c3:cc:b7:f5:
                    d3:fa:40:31:92:91:04:e0:68:68:5e:e8:bc:da:44:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:75:41:33:37:0B:48:42:B3:7E:7E:8E:B0:3D:B6:CF:D8:52:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2c815a63-7aa6-3db0-955e-0928d6e4b165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl

            X509v3 Authority Key Identifier:
                keyid:35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fb:8c:49:d7:2f:d3:f5:f0:5b:b0:26:09:32:c5:df:c3:8b:
         ce:67:25:1c:ca:bb:b3:26:4a:6b:db:dc:7f:07:f5:a3:4b:cb:
         3e:f9:4a:b3:81:b1:6d:94:f0:77:89:33:17:0e:5f:23:c8:94:
         a7:ac:fd:6a:7e:32:88:d4:f0:a1:e3:45:59:bb:5d:7e:89:1c:
         03:7a:1f:cf:51:ec:ab:39:cc:58:45:09:01:01:bf:21:af:24:
         51:fc:16:a3:45:6f:c4:6e:fd:88:1f:6c:24:7e:45:78:a7:60:
         b7:5a:c0:76:c7:1a:11:38:a3:0f:96:ef:e5:af:69:37:18:9f:
         5a:44:4a:35:a7:5c:33:e2:8d:be:8d:d6:d3:a0:53:a5:67:fc:
         57:a8:bc:2d:87:bf:ca:cc:85:7e:32:49:d2:2b:08:1e:fc:8c:
         b6:db:53:21:a2:fe:fe:e7:85:71:e0:35:c1:78:a1:16:24:27:
         98:9f:b2:2c:7e:98:f2:3e:d5:33:b3:ab:86:00:f5:8e:47:56:
         0b:c6:0d:9e:5d:3c:d8:3f:29:47:29:d4:5c:e6:e7:f5:9b:7b:
         7d:d6:ad:14:fe:84:5c:5e:31:07:6e:50:d2:19:a2:d1:16:aa:
         28:5f:62:d9:ad:e6:67:93:56:15:93:e6:b9:76:bc:97:50:dc:
         68:ac:bc:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2zehisg4xOOgWaQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQwMDYzZjgtNTM4YS00NzE3LTg1ZWUtN2VmOWVlNTJi
ZGUzMB4XDTI2MDUwMjE0NTcxN1oXDTI2MDczMTE0NTcxN1owLzEtMCsGA1UEAxMk
Y2I2MTFkZjItMTA2Ni00YmJhLTkzODktYzExM2E0OWQ2OGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+WQrGHV+iLPS7cLie6RywJgnHe7v4gf6/K0
MGlIeOCElMpFz3TV6yw6/1JxRbqPnVhakfqqT7zblxom9aWjmmIVxpQhhC1HyHma
NKLFkYaR2Adt1RbD6CnHXQN7NjTDtFsybFVCtmAfv7OExhKwBVk78K3Qmqp1G8Sq
SegDkpvmL0cr3LnfXnc5rAI/kSpPkimc0Tdz/4ZTfzs9WnYozW8Z/31UH/ymgE6Y
bfsPr6z4aszQxai6Fv3X4tG153M5Fh3UTgbpsEpi21oDn0KiiQkX87ursZqc1MeL
hBm208vE/rC7xS1IzK1y/sPMt/XT+kAxkpEE4GhoXui82kRyEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOB4dUEzNwtIQrN+fo6wPbbP2FLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZDAw
NjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1MmJkZTMvMmM4MTVhNjMtN2FhNi0z
ZGIwLTk1NWUtMDkyOGQ2ZTRiMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmQwMDYzZjgtNTM4YS00NzE3LTg1
ZWUtN2VmOWVlNTJiZGUzLzJkMDA2M2Y4LTUzOGEtNDcxNy04NWVlLTdlZjllZTUy
YmRlMy5jcmwwHwYDVR0jBBgwFoAUNfm52x/MCUxv5oLDSoMgKveEJ80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5
ZWU1MmJkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/7jEnXL9P18FuwJgkyxd/Di85nJRzKu7MmSmvb3H8H9aNLyz75SrOB
sW2U8HeJMxcOXyPIlKes/Wp+MojU8KHjRVm7XX6JHAN6H89R7Ks5zFhFCQEBvyGv
JFH8FqNFb8Ru/YgfbCR+RXinYLdawHbHGhE4ow+W7+WvaTcYn1pESjWnXDPijb6N
1tOgU6Vn/FeovC2Hv8rMhX4ySdIrCB78jLbbUyGi/v7nhXHgNcF4oRYkJ5ifsix+
mPI+1TOzq4YA9Y5HVgvGDZ5dPNg/KUcp1Fzm5/Wbe33WrRT+hFxeMQduUNIZotEW
qihfYtmt5meTVhWT5rl2vJdQ3GisvLc=
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:36 2026 by rpki-client