Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/26c26b4d-aaba-3e39-9190-55eab48b9313.roa
File:                     26c26b4d-aaba-3e39-9190-55eab48b9313.roa (raw, json)
Hash identifier:          CdZgssEV5xZm67igMRK8U5p6fvw58kGyjfRnk2yv9aQ=
Subject key identifier:   23:D8:F5:6F:63:BB:F0:73:40:25:A2:CD:4B:A4:75:E3:C4:E4:50:16
Certificate issuer:       /CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
Certificate serial:       010D0C9F4328584F549D6B1EB70FA2A6F5BF1B80
Authority key identifier: 16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/26c26b4d-aaba-3e39-9190-55eab48b9313.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     133199
IP address blocks:        23.154.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6b:1e:b7:0f:a2:a6:f5:bf:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=5f65bebc-4302-4500-9e5a-fa3d6b171dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:63:12:7a:cd:73:1b:4b:4d:e9:5e:65:a7:
                    7e:a6:fe:57:4f:a9:93:00:ce:ee:25:f2:b3:d4:09:
                    03:4a:00:00:f3:6f:f7:9b:95:ec:84:93:02:ea:6a:
                    c6:1a:d3:cc:70:02:ef:e5:e4:25:d0:2d:79:4b:78:
                    b7:0f:73:47:ab:1d:55:24:32:9b:68:36:a7:39:a5:
                    f4:e9:84:85:c2:ab:ed:17:57:05:af:b4:48:27:b0:
                    31:d6:a1:cd:8f:4f:2d:f0:1e:c6:bd:8c:36:b4:81:
                    b7:55:76:7f:f3:8c:1a:22:a3:18:eb:0a:27:0e:f2:
                    0f:d1:3e:10:4a:e4:5a:77:8a:6d:50:a9:34:42:e4:
                    b4:10:24:5b:6f:01:76:af:ad:dd:82:d2:8d:3a:58:
                    4e:d0:e7:2e:bc:b0:57:d7:88:38:be:59:67:7f:4f:
                    c1:6e:bd:aa:b5:c0:45:2a:87:da:5c:19:04:a4:ce:
                    e7:7b:60:57:96:78:7b:5f:3c:0e:2f:a2:af:df:de:
                    7e:fc:ce:dd:a8:4e:0e:2d:e9:9e:41:41:ca:6d:2a:
                    c3:95:c8:ee:59:75:de:75:3b:be:4c:c3:b0:bd:bb:
                    ba:fe:f2:66:12:8b:bd:2b:f8:64:85:85:df:8a:fb:
                    1f:68:85:c6:51:cc:d4:f5:d0:ca:29:d7:d8:21:2e:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:F5:6F:63:BB:F0:73:40:25:A2:CD:4B:A4:75:E3:C4:E4:50:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/26c26b4d-aaba-3e39-9190-55eab48b9313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl

            X509v3 Authority Key Identifier:
                keyid:16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f5:37:04:64:28:49:5e:f0:46:e2:d3:01:92:96:6c:ae:68:
         e3:6d:ae:30:11:3b:c2:fc:ee:97:72:27:52:83:1b:66:81:1d:
         11:65:ea:54:e3:6e:d6:0c:a9:4a:ac:f8:1d:7c:35:ad:a3:33:
         ea:0e:32:fe:4f:72:06:ba:83:c9:53:62:18:7d:51:7e:8d:e2:
         08:2c:4f:aa:08:3b:d4:76:78:3f:73:b4:1a:5a:1d:1a:3c:c2:
         96:47:bc:09:3f:c8:b5:ed:c3:fd:9d:36:da:ae:92:b4:cf:ef:
         1e:92:68:9f:f2:76:d9:1d:4d:f2:b4:87:c7:a2:26:6c:49:64:
         0c:f2:db:1c:94:e3:70:8f:e8:05:d6:54:ae:df:ca:fb:d9:f1:
         84:81:19:68:73:32:f1:be:8e:2a:5c:f6:b6:73:b8:c2:25:d5:
         a3:3a:74:cb:45:16:77:dd:77:58:b5:71:3e:f0:a1:c5:91:d1:
         51:9e:7d:5d:63:89:74:ef:4a:8c:5f:af:0b:0e:e2:72:32:45:
         31:a9:d4:a4:e2:e1:fd:8e:20:6f:3a:dc:25:3c:34:0a:2a:92:
         38:fd:d6:72:c4:bd:a7:39:44:02:44:55:75:f1:20:5f:21:7f:
         03:a3:98:7e:ac:c5:a6:85:c4:13:f0:7b:96:03:54:d8:21:d2:
         df:db:3f:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWsetw+ipvW/G4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFiNmNjZjItMTlmNi00ZTk2LWFhZDctOWNiNjA2ZTEz
Y2M1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
NWY2NWJlYmMtNDMwMi00NTAwLTllNWEtZmEzZDZiMTcxZGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZjEnrNcxtLTeleZad+pv5XT6mTAM7uJfKz
1AkDSgAA82/3m5XshJMC6mrGGtPMcALv5eQl0C15S3i3D3NHqx1VJDKbaDanOaX0
6YSFwqvtF1cFr7RIJ7Ax1qHNj08t8B7GvYw2tIG3VXZ/84waIqMY6wonDvIP0T4Q
SuRad4ptUKk0QuS0ECRbbwF2r63dgtKNOlhO0OcuvLBX14g4vllnf0/Bbr2qtcBF
KofaXBkEpM7ne2BXlnh7XzwOL6Kv395+/M7dqE4OLemeQUHKbSrDlcjuWXXedTu+
TMOwvbu6/vJmEou9K/hkhYXfivsfaIXGUczU9dDKKdfYIS43ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPY9W9ju/BzQCWizUukdePE5FAWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYWI2
Y2NmMi0xOWY2LTRlOTYtYWFkNy05Y2I2MDZlMTNjYzUvMjZjMjZiNGQtYWFiYS0z
ZTM5LTkxOTAtNTVlYWI0OGI5MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmFiNmNjZjItMTlmNi00ZTk2LWFh
ZDctOWNiNjA2ZTEzY2M1L2ZhYjZjY2YyLTE5ZjYtNGU5Ni1hYWQ3LTljYjYwNmUx
M2NjNS5jcmwwHwYDVR0jBBgwFoAUFqekMpt3DnmQC11vCrYuN8St4DQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYWI2Y2NmMi0xOWY2LTRlOTYtYWFkNy05Y2I2
MDZlMTNjYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALj1NwRkKEle8Ebi0wGSlmyuaONtrjARO8L87pdyJ1KDG2aBHRFl6lTj
btYMqUqs+B18Na2jM+oOMv5Pcga6g8lTYhh9UX6N4ggsT6oIO9R2eD9ztBpaHRo8
wpZHvAk/yLXtw/2dNtqukrTP7x6SaJ/ydtkdTfK0h8eiJmxJZAzy2xyU43CP6AXW
VK7fyvvZ8YSBGWhzMvG+jipc9rZzuMIl1aM6dMtFFnfdd1i1cT7wocWR0VGefV1j
iXTvSoxfrwsO4nIyRTGp1KTi4f2OIG863CU8NAoqkjj91nLEvac5RAJEVXXxIF8h
fwOjmH6sxaaFxBPwe5YDVNgh0t/bP7w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:46:58 2026 by rpki-client