Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
File:                     65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json)
Hash identifier:          p8KX8uaTc7iE0KF3d/ecsvKPK9MwEwmfp4AAbjVVtD4=
Subject key identifier:   AD:18:EF:D1:EA:06:E7:BC:13:8C:07:1C:7C:A6:CD:FD:57:F7:00:3B
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F4328584E8F54F551457AD06DED92C280
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     13849
IP address blocks:        23.133.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f5:51:45:7a:d0:6d:ed:92:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=40aeffba-a207-4b10-b10d-c012b53ad693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:2a:bc:59:5d:f0:77:83:1d:0e:4f:29:8f:
                    83:5f:ec:bb:ff:5f:5e:b1:56:63:5a:52:4d:34:d3:
                    33:f4:4f:e8:36:a5:ee:cc:59:b2:46:7d:38:f2:38:
                    72:14:16:ec:c8:63:5c:96:1c:62:49:89:8b:8e:df:
                    54:23:b0:9c:f7:73:07:98:a9:35:7d:16:8d:e1:63:
                    0d:af:9b:bd:98:8e:cc:1e:43:1b:1a:cf:1b:96:1c:
                    62:70:1a:de:47:c2:ce:ce:36:a3:78:5e:d0:6a:eb:
                    95:3a:8a:f5:d6:03:d5:42:57:98:08:91:f7:2c:ec:
                    a8:f6:7b:da:34:db:1a:da:03:4b:b3:90:16:13:5a:
                    08:79:85:70:40:f4:79:16:fc:f1:e0:84:02:54:ca:
                    93:0a:53:ca:89:52:f9:2d:86:94:eb:ce:b7:ca:eb:
                    b8:75:20:e1:f1:62:80:4a:7c:7b:2b:f2:1d:2d:2e:
                    6d:bd:32:11:18:40:7c:aa:41:2e:b1:93:f7:14:65:
                    7f:30:af:dd:3a:43:67:b9:e1:47:95:21:16:a8:50:
                    2f:a6:da:9c:f2:35:66:88:e0:58:05:42:93:f5:01:
                    e5:c6:9b:9b:29:dc:20:94:99:ab:30:74:7d:13:1e:
                    70:a3:a3:2b:5b:8f:26:d5:aa:43:e9:61:54:49:67:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:EF:D1:EA:06:E7:BC:13:8C:07:1C:7C:A6:CD:FD:57:F7:00:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:00:9c:42:b7:3d:f4:b4:09:67:34:cd:b3:97:c4:83:fd:
         b4:df:82:7e:46:34:a6:f8:3b:60:ec:a7:f3:85:00:e5:0b:51:
         f8:ab:fb:61:cb:e2:84:86:3c:53:d1:2d:72:17:3b:c4:b9:1d:
         d3:82:0f:2c:71:53:2a:30:90:50:02:15:75:ff:45:3a:b1:92:
         97:12:d4:c7:77:ab:30:8e:b4:be:6d:4b:2c:73:fe:f2:14:ca:
         9a:4f:11:7c:e6:5b:ae:03:b3:ea:b7:f2:b8:7f:04:b3:87:39:
         92:d6:1f:8c:14:c9:11:29:39:7b:c5:31:1f:b0:01:cb:4f:b3:
         f1:9c:6f:0c:7f:8c:1f:56:cc:23:0c:f3:f8:05:6c:57:1e:89:
         c2:d7:d1:c4:95:8c:5e:78:94:03:bb:b8:29:dd:97:c6:11:b9:
         1f:bc:2c:df:e5:30:60:78:1c:55:8d:cf:ae:7d:b9:2a:5e:f9:
         04:9e:19:d8:dd:34:b4:e6:d8:2b:3f:e7:af:dc:1e:99:e8:c8:
         39:ce:30:b8:de:19:05:78:3b:e6:f9:47:9e:d0:c8:a5:68:8d:
         de:d1:eb:59:ae:87:2e:0f:83:78:42:32:ba:ee:7b:59:d3:83:
         3e:96:96:46:7c:c2:4b:f1:e4:48:44:a0:46:ff:d9:f0:ac:cc:
         d7:f6:2c:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPVRRXrQbe2SwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl
MDIwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk
NDBhZWZmYmEtYTIwNy00YjEwLWIxMGQtYzAxMmI1M2FkNjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LgqvFld8HeDHQ5PKY+DX+y7/19esVZjWlJN
NNMz9E/oNqXuzFmyRn048jhyFBbsyGNclhxiSYmLjt9UI7Cc93MHmKk1fRaN4WMN
r5u9mI7MHkMbGs8blhxicBreR8LOzjajeF7QauuVOor11gPVQleYCJH3LOyo9nva
NNsa2gNLs5AWE1oIeYVwQPR5Fvzx4IQCVMqTClPKiVL5LYaU6863yuu4dSDh8WKA
Snx7K/IdLS5tvTIRGEB8qkEusZP3FGV/MK/dOkNnueFHlSEWqFAvptqc8jVmiOBY
BUKT9QHlxpubKdwglJmrMHR9Ex5wo6MrW48m1apD6WFUSWfZswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0Y79HqBue8E4wHHHymzf1X9wA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl
ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z
MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy
NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2
ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz
MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHsAJxCtz30tAlnNM2zl8SD/bTfgn5GNKb4O2Dsp/OFAOULUfir+2HL
4oSGPFPRLXIXO8S5HdOCDyxxUyowkFACFXX/RTqxkpcS1Md3qzCOtL5tSyxz/vIU
yppPEXzmW64Ds+q38rh/BLOHOZLWH4wUyREpOXvFMR+wActPs/Gcbwx/jB9WzCMM
8/gFbFceicLX0cSVjF54lAO7uCndl8YRuR+8LN/lMGB4HFWNz659uSpe+QSeGdjd
NLTm2Cs/56/cHpnoyDnOMLjeGQV4O+b5R57QyKVojd7R61muhy4Pg3hCMrrue1nT
gz6WlkZ8wkvx5EhEoEb/2fCszNf2LM0=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:03 2026 by rpki-client