Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
File:                     c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa (raw, json)
Hash identifier:          rgadANb9bMCWJaNgE1b8mv9a5aiXB3Qi23yUlpjLycU=
Subject key identifier:   F3:45:A4:D0:79:76:F5:14:34:DE:DA:51:11:F1:6F:E6:6A:35:AB:1E
Certificate issuer:       /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
Certificate serial:       010D0C9F4328584DCAFB05B9F3BFBFA9EAF7DE00
Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     401474
IP address blocks:        23.130.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:05:b9:f3:bf:bf:a9:ea:f7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=0af20505-9121-4af8-a6f6-ae62de6cc13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:70:c7:df:d5:71:41:48:52:21:15:14:4f:
                    d8:bb:c4:4e:9e:25:52:25:43:94:d8:da:6e:8e:48:
                    b2:35:03:14:42:a0:ff:5c:f8:c7:37:da:c2:f7:a6:
                    39:57:e5:d8:6a:8f:a2:22:1e:a8:c6:2e:7c:33:b7:
                    76:66:9a:59:8f:8d:d5:a5:9e:07:11:30:3d:5a:bf:
                    52:7c:37:2e:2a:21:8f:cb:1e:15:1f:32:c4:59:91:
                    72:13:3d:2f:15:53:4c:75:b7:a2:15:0a:77:d4:e4:
                    e1:1a:15:08:ff:d0:0b:c3:df:4b:ad:1b:22:a7:17:
                    83:55:ab:f0:5b:c3:f9:42:2b:56:0f:62:61:54:81:
                    2b:a4:07:5d:97:42:2f:e8:c2:f6:e4:fe:bd:ce:a2:
                    5b:e4:59:be:56:83:7f:f5:78:d4:81:b7:5f:5a:b2:
                    b5:16:cf:24:45:ba:40:08:9d:20:fd:20:6c:b0:97:
                    81:92:6d:bd:1b:a0:26:1c:ee:df:27:18:f7:cb:f8:
                    0a:fc:26:99:e4:15:c6:c4:fb:59:25:ee:a5:97:99:
                    df:56:ee:c9:ad:fd:c8:49:2b:34:c1:83:c3:30:4e:
                    e6:cc:49:de:7e:1d:10:34:63:3c:18:d1:4b:0f:fe:
                    d7:89:3b:b5:d6:9a:95:c7:47:15:87:50:ae:dd:28:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:A4:D0:79:76:F5:14:34:DE:DA:51:11:F1:6F:E6:6A:35:AB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9e:7b:66:93:0f:1e:1a:79:07:5d:5e:22:26:31:9f:3f:99:
         47:5c:1f:bb:2b:08:fb:1a:15:35:0e:f4:37:3a:d4:05:d7:45:
         14:02:ec:64:02:1f:f6:70:f6:3b:32:30:83:8b:1d:22:86:af:
         2f:2a:7c:db:ce:55:7b:77:d2:ce:02:2c:7f:d8:ae:8c:4e:e0:
         58:92:1c:f9:08:d1:fa:44:3e:32:96:30:34:4b:fa:f5:eb:f0:
         97:37:c3:77:1d:7f:5d:5a:5e:2e:ad:b8:83:94:6c:71:bd:16:
         1d:d8:36:57:18:f7:39:77:5b:6b:82:fc:81:e5:d6:83:c4:51:
         c9:4f:6d:f6:1a:55:4e:65:fb:84:61:5d:2c:e3:ab:1c:3a:d3:
         44:fa:74:af:2d:d9:f5:08:6c:92:ce:c2:0e:be:33:21:7d:4c:
         37:63:4d:0b:5b:f7:55:88:26:29:c8:e2:4d:de:af:2d:67:9d:
         10:24:d6:80:64:ff:a6:c8:44:2e:34:ff:9f:cc:17:b4:61:b9:
         f1:50:34:6c:bc:bb:f2:64:f9:45:e5:8a:2d:16:e1:53:a6:71:
         ed:20:05:6d:d0:d3:37:e9:3c:af:d1:5e:b5:91:81:ec:77:7e:
         f5:4f:b5:b9:35:31:64:c3:80:14:34:36:06:cb:11:a0:56:0a:
         a6:81:9b:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wW587+/qer33gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi
MjUxMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MGFmMjA1MDUtOTEyMS00YWY4LWE2ZjYtYWU2MmRlNmNjMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPFwx9/VcUFIUiEVFE/Yu8ROniVSJUOU2Npu
jkiyNQMUQqD/XPjHN9rC96Y5V+XYao+iIh6oxi58M7d2ZppZj43VpZ4HETA9Wr9S
fDcuKiGPyx4VHzLEWZFyEz0vFVNMdbeiFQp31OThGhUI/9ALw99LrRsipxeDVavw
W8P5QitWD2JhVIErpAddl0Iv6ML25P69zqJb5Fm+VoN/9XjUgbdfWrK1Fs8kRbpA
CJ0g/SBssJeBkm29G6AmHO7fJxj3y/gK/CaZ5BXGxPtZJe6ll5nfVu7Jrf3ISSs0
wYPDME7mzEnefh0QNGM8GNFLD/7XiTu11pqVx0cVh1Cu3SgdxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNFpNB5dvUUNN7aURHxb+ZqNaseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5
NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvYzljOTBlMTItMGI0MC0z
MjlkLWE1NjgtMzhiMWZmZGY0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj
MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1
YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0
ODIxNWIyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2ee2aTDx4aeQddXiImMZ8/mUdcH7srCPsaFTUO9Dc61AXXRRQC7GQC
H/Zw9jsyMIOLHSKGry8qfNvOVXt30s4CLH/YroxO4FiSHPkI0fpEPjKWMDRL+vXr
8Jc3w3cdf11aXi6tuIOUbHG9Fh3YNlcY9zl3W2uC/IHl1oPEUclPbfYaVU5l+4Rh
XSzjqxw600T6dK8t2fUIbJLOwg6+MyF9TDdjTQtb91WIJinI4k3ery1nnRAk1oBk
/6bIRC40/5/MF7RhufFQNGy8u/Jk+UXlii0W4VOmce0gBW3Q0zfpPK/RXrWRgex3
fvVPtbk1MWTDgBQ0NgbLEaBWCqaBmzM=
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:21 2026 by rpki-client