Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa
File:                     8fc36576-dd0b-3abf-a62f-da4c5350d091.roa (raw, json)
Hash identifier:          VHld20R3dqFqhUTb4e6wtfXkkSjqEt1xAYrvN7n0CHc=
Subject key identifier:   B2:69:E4:9E:7B:09:3E:EA:5E:73:4D:1D:FA:1E:1A:5C:C4:1C:6B:0F
Certificate issuer:       /CN=d549bcbf-712f-4ddd-b680-cd2230986019
Certificate serial:       010D0C9F4328584D3E00188D87A11FC3B86241E0
Authority key identifier: 92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     36002
IP address blocks:        23.141.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:18:8d:87:a1:1f:c3:b8:62:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d549bcbf-712f-4ddd-b680-cd2230986019
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=dd51e17e-0033-405d-85e3-ddc9fd93287f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:1d:11:ff:1a:61:f1:61:e6:28:ed:c7:24:
                    81:21:52:b6:0d:23:d2:da:76:6b:25:c4:eb:e2:1d:
                    db:d4:f7:1d:81:a0:54:84:a7:3e:eb:eb:90:3d:44:
                    46:25:e8:89:4a:7d:e7:90:53:f0:9a:a4:fa:aa:27:
                    32:fb:3a:4a:72:26:16:db:25:7d:8a:28:03:35:4b:
                    a5:15:07:53:99:2a:79:b5:28:1d:ed:1e:d0:38:d5:
                    11:2c:6f:31:98:b4:4b:db:5e:2d:84:7b:22:90:42:
                    21:bf:db:a8:69:7c:3d:10:6d:15:f6:63:12:78:55:
                    2f:48:90:3f:82:a8:03:17:a2:b6:d0:7d:93:e1:5f:
                    7b:5e:bb:13:0f:d0:9c:95:a3:f3:d9:bc:8e:cd:59:
                    0d:ef:df:81:71:e2:fe:8a:34:03:a4:6d:ce:6c:ea:
                    d3:79:93:91:25:fb:19:3b:d9:20:bd:0b:1f:1b:b8:
                    b4:10:87:57:b0:e1:80:4b:94:f6:fa:02:5e:b5:b1:
                    b9:cf:06:11:39:97:cb:95:bf:87:ca:ae:79:2f:20:
                    d2:06:ee:b0:20:ce:1f:13:1e:bb:c0:ad:f1:b4:bd:
                    69:70:04:d1:74:e6:77:4c:f6:e3:ac:ca:65:c5:9c:
                    40:bb:48:5a:8c:29:b6:91:85:2c:9e:df:25:0c:cd:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:E4:9E:7B:09:3E:EA:5E:73:4D:1D:FA:1E:1A:5C:C4:1C:6B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/8fc36576-dd0b-3abf-a62f-da4c5350d091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl

            X509v3 Authority Key Identifier:
                keyid:92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:b8:80:6c:6b:fe:9a:17:5b:96:da:1d:cf:20:c0:12:85:
         09:05:ce:0b:23:bf:94:f6:11:e0:b6:68:95:14:80:fe:37:e6:
         9e:6c:ec:27:2c:6c:a0:44:d8:79:83:9a:1f:ef:13:a4:eb:47:
         2b:1f:4b:cc:26:b2:67:2f:61:48:f5:9a:dc:da:5a:9f:8d:e9:
         a7:90:bd:bc:12:df:e3:4a:27:1a:45:c1:c7:cf:68:c6:c6:a6:
         c8:85:ea:19:dd:9e:56:08:1f:6a:c6:26:6f:90:63:40:30:ce:
         6e:86:30:35:77:63:67:1e:38:6e:63:c6:f8:5f:55:b2:c8:7f:
         3f:90:4f:dd:94:ab:6f:83:f2:4a:48:30:8b:2e:67:67:0a:30:
         2e:86:4d:15:85:6f:b6:a0:e2:44:e5:60:7c:ba:0c:c5:f9:0c:
         cc:ca:8f:1a:d0:81:64:ee:54:b9:4d:a4:6e:af:17:e3:a2:28:
         91:f2:28:cc:b3:f6:83:15:8b:a3:4c:96:f0:93:37:ea:69:0f:
         52:fc:52:1b:80:46:ae:c9:7c:41:b6:cc:45:d6:d4:9c:16:57:
         ea:d0:7c:d5:a0:8a:a2:e7:51:4f:4f:0b:03:9f:ff:ae:5c:bc:
         ee:9e:4f:c0:c9:cc:69:13:99:c3:8c:d6:57:09:cd:85:6b:cd:
         c6:c6:58:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+ABiNh6Efw7hiQeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU0OWJjYmYtNzEyZi00ZGRkLWI2ODAtY2QyMjMwOTg2
MDE5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZGQ1MWUxN2UtMDAzMy00MDVkLTg1ZTMtZGRjOWZkOTMyODdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr8dEf8aYfFh5ijtxySBIVK2DSPS2nZrJcTr
4h3b1PcdgaBUhKc+6+uQPURGJeiJSn3nkFPwmqT6qicy+zpKciYW2yV9iigDNUul
FQdTmSp5tSgd7R7QONURLG8xmLRL214thHsikEIhv9uoaXw9EG0V9mMSeFUvSJA/
gqgDF6K20H2T4V97XrsTD9CclaPz2byOzVkN79+BceL+ijQDpG3ObOrTeZORJfsZ
O9kgvQsfG7i0EIdXsOGAS5T2+gJetbG5zwYROZfLlb+Hyq55LyDSBu6wIM4fEx67
wK3xtL1pcATRdOZ3TPbjrMplxZxAu0hajCm2kYUsnt8lDM26OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJp5J57CT7qXnNNHfoeGlzEHGsPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5
YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIyMzA5ODYwMTkvOGZjMzY1NzYtZGQwYi0z
YWJmLWE2MmYtZGE0YzUzNTBkMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU0OWJjYmYtNzEyZi00ZGRkLWI2
ODAtY2QyMjMwOTg2MDE5L2Q1NDliY2JmLTcxMmYtNGRkZC1iNjgwLWNkMjIzMDk4
NjAxOS5jcmwwHwYDVR0jBBgwFoAUkvJ5JBdcPUCdyg9+p5etRhNuc0owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIy
MzA5ODYwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvAuIBsa/6aF1uW2h3PIMAShQkFzgsjv5T2EeC2aJUUgP435p5s7Ccs
bKBE2HmDmh/vE6TrRysfS8wmsmcvYUj1mtzaWp+N6aeQvbwS3+NKJxpFwcfPaMbG
psiF6hndnlYIH2rGJm+QY0Awzm6GMDV3Y2ceOG5jxvhfVbLIfz+QT92Uq2+D8kpI
MIsuZ2cKMC6GTRWFb7ag4kTlYHy6DMX5DMzKjxrQgWTuVLlNpG6vF+OiKJHyKMyz
9oMVi6NMlvCTN+ppD1L8UhuARq7JfEG2zEXW1JwWV+rQfNWgiqLnUU9PCwOf/65c
vO6eT8DJzGkTmcOM1lcJzYVrzcbGWGw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:24 2026 by rpki-client