Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
File:                     9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa (raw, json)
Hash identifier:          l+bKl+qXQexjaOZf3qB6dPSWsVAltGFFRuk9h6GIc7c=
Subject key identifier:   53:FA:D3:CE:85:97:63:E2:27:92:79:84:0D:0F:E5:BD:4C:7D:A3:C8
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584D2D3F8472255425FBC54A0540
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     401170
IP address blocks:        23.181.136.0/25 maxlen: 25
                          23.181.136.0/26 maxlen: 26
                          23.181.136.0/27 maxlen: 27
                          23.181.136.0/28 maxlen: 28
                          23.181.136.0/29 maxlen: 29
                          23.181.136.0/30 maxlen: 30
                          23.181.136.0/31 maxlen: 31
                          23.181.136.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:84:72:25:54:25:fb:c5:4a:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=8838fbf7-cf74-499a-8261-bc0dc1d39570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0a:a7:ad:ea:58:e7:11:f8:9f:04:b8:2a:cb:
                    1a:22:99:33:41:b4:11:90:ce:d2:6d:98:c2:69:80:
                    ed:b5:7c:19:03:02:2a:31:46:3f:51:35:e1:0a:4b:
                    ec:27:af:93:cd:87:00:86:69:07:f7:10:c8:29:df:
                    ab:a0:91:ed:ea:75:6a:41:81:1e:39:7c:ba:59:40:
                    86:90:95:6b:81:5c:e9:82:54:d5:0c:cf:be:b5:bb:
                    f3:71:65:e9:ef:87:d5:72:3d:50:5c:c6:1a:aa:bf:
                    cb:b6:bf:81:82:29:b8:06:4e:51:49:e0:e5:ac:56:
                    31:7b:d3:77:51:24:d1:4a:53:f9:1a:1c:5a:a4:cd:
                    b4:99:36:03:37:71:33:a0:9a:4b:70:b9:08:74:eb:
                    e7:c8:af:07:90:8e:db:c0:12:ce:f2:3d:78:3f:49:
                    3f:40:79:9a:81:45:ae:de:12:c7:c8:4e:c1:f0:73:
                    9f:8d:78:fe:e4:fd:16:1c:bd:d3:a7:d1:87:bf:fd:
                    f9:b4:24:0e:d8:c1:d5:56:98:74:4b:3f:1d:5e:f0:
                    65:41:36:cc:ae:4c:1b:1f:e3:6c:19:f8:e8:9e:67:
                    b6:22:60:da:f7:c5:98:9e:31:69:d7:e5:54:9a:9b:
                    43:e4:fa:bf:37:bd:b7:ea:a1:30:99:75:91:5c:5f:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:D3:CE:85:97:63:E2:27:92:79:84:0D:0F:E5:BD:4C:7D:A3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.136.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:2c:08:44:f0:ef:d5:f3:dd:de:58:51:bd:54:6e:92:3e:
         b8:8e:ff:b7:92:13:b4:38:e2:1d:6f:fd:f7:3e:38:5f:3b:7e:
         e8:9b:6f:0a:c9:ae:53:7d:fd:7a:63:05:87:e3:29:fd:0d:ff:
         7b:7e:8c:12:06:99:b7:ed:47:8d:6f:7a:46:3e:ac:23:fa:c7:
         64:8f:78:ae:36:ed:50:77:31:2d:d0:7e:e1:6e:8d:79:81:d6:
         3a:0d:ee:4e:14:68:ac:91:a1:1f:28:4a:aa:64:8d:a1:f5:a6:
         20:ff:fa:fc:02:4b:57:97:f4:98:59:a0:dd:dc:f4:e5:db:7a:
         8b:cd:31:e9:7a:1d:af:97:91:f7:28:05:e2:40:10:77:e1:7a:
         6a:79:fe:b9:bc:49:d9:ec:ca:ff:28:90:1f:2e:b7:2e:09:31:
         1f:b3:10:cb:ab:41:3e:60:d2:6f:0c:84:ff:b9:2f:54:e2:39:
         bb:fe:15:94:a8:69:ca:ff:ba:40:6a:eb:8e:57:5d:78:ea:60:
         34:77:91:80:f8:fb:42:25:cd:9e:ee:41:88:b2:2b:8b:31:cd:
         22:8b:dc:e2:b6:44:54:87:98:1e:d7:7d:75:85:ab:fc:f8:46:
         94:ac:c8:2b:e1:9d:ab:74:08:2c:46:9a:5c:7f:da:31:d1:41:
         80:cd:42:f4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP4RyJVQl+8VKBUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2OTRkOWEtOGExZi00NzhkLThkNWYtYzNkNGM4NGRk
ZWE4MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
ODgzOGZiZjctY2Y3NC00OTlhLTgyNjEtYmMwZGMxZDM5NTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QqnrepY5xH4nwS4KssaIpkzQbQRkM7SbZjC
aYDttXwZAwIqMUY/UTXhCkvsJ6+TzYcAhmkH9xDIKd+roJHt6nVqQYEeOXy6WUCG
kJVrgVzpglTVDM++tbvzcWXp74fVcj1QXMYaqr/Ltr+Bgim4Bk5RSeDlrFYxe9N3
USTRSlP5GhxapM20mTYDN3EzoJpLcLkIdOvnyK8HkI7bwBLO8j14P0k/QHmagUWu
3hLHyE7B8HOfjXj+5P0WHL3Tp9GHv/35tCQO2MHVVph0Sz8dXvBlQTbMrkwbH+Ns
Gfjonme2ImDa98WYnjFp1+VUmptD5Pq/N7236qEwmXWRXF/yDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFP6086Fl2PiJ5J5hA0P5b1MfaPIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTY5
NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0Yzg0ZGRlYTgvOWExYTk4NGUtMjI3Ny0z
N2QwLWIyM2QtNmFkMWJiYjEyMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2OTRkOWEtOGExZi00NzhkLThk
NWYtYzNkNGM4NGRkZWE4LzcxNjk0ZDlhLThhMWYtNDc4ZC04ZDVmLWMzZDRjODRk
ZGVhOC5jcmwwHwYDVR0jBBgwFoAULdfzSZhsWGvHv+DBnb+PvC7kvNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MTY5NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0
Yzg0ZGRlYTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHF7WIADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB9LywIRPDv1fPd3lhRvVRukj64jv+3khO0OOIdb/33PjhfO37om28K
ya5Tff16YwWH4yn9Df97fowSBpm37UeNb3pGPqwj+sdkj3iuNu1QdzEt0H7hbo15
gdY6De5OFGiskaEfKEqqZI2h9aYg//r8AktXl/SYWaDd3PTl23qLzTHpeh2vl5H3
KAXiQBB34Xpqef65vEnZ7Mr/KJAfLrcuCTEfsxDLq0E+YNJvDIT/uS9U4jm7/hWU
qGnK/7pAauuOV1146mA0d5GA+PtCJc2e7kGIsiuLMc0ii9zitkRUh5ge1311hav8
+EaUrMgr4Z2rdAgsRppcf9ox0UGAzUL0
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:02 2026 by rpki-client