Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
File:                     4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa (raw, json)
Hash identifier:          hSBBKc4RM+zzfvZsL9tDgnCAuAGXaafvzNssAjCooBo=
Subject key identifier:   D0:B3:D7:81:37:A3:D7:BF:62:D3:98:74:5A:B8:0A:23:8B:04:5D:B5
Certificate issuer:       /CN=b511cf32-0933-4308-8981-9c296fc06987
Certificate serial:       010D0C9F4328584DBA3AF9FC41C3808B12D18200
Authority key identifier: B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     32995
IP address blocks:        23.137.160.0/24 maxlen: 24
                          2620:4d:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f9:fc:41:c3:80:8b:12:d1:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b511cf32-0933-4308-8981-9c296fc06987
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=601d5e75-67e8-4ec8-bf77-a22cbdeb6ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:50:b8:bb:f3:07:93:bd:00:7c:fb:d4:45:
                    ea:df:31:a4:fc:ee:b4:12:af:12:d2:f2:b3:24:2c:
                    ef:77:fc:0d:a1:c2:38:2b:31:d5:eb:a4:10:bf:31:
                    4a:d5:99:a9:12:33:a2:2f:09:1c:8b:f2:d3:ed:07:
                    c0:89:4d:7d:15:c0:db:6d:33:9f:e2:c8:8a:56:d6:
                    f1:7b:a0:e1:1f:bd:74:a3:5f:12:e7:a1:78:5d:b1:
                    21:09:79:47:17:f4:20:3f:15:de:6f:c8:4a:64:ea:
                    ac:65:a9:44:f2:63:f1:52:b7:89:cf:96:7c:39:f5:
                    50:23:0f:4f:ea:9f:81:5f:c2:fa:dd:57:8b:f0:42:
                    7c:b1:69:79:70:10:ee:cf:a6:3b:a8:cc:17:c2:4c:
                    f7:39:fa:79:0a:89:b5:d3:2c:5a:25:74:85:47:77:
                    b5:88:ad:7c:9b:a0:9c:e5:c9:84:29:80:bc:00:22:
                    e6:d2:f1:e7:ca:9a:ad:ba:43:1d:d0:b4:d4:5b:f8:
                    da:20:18:16:ad:7a:a1:27:81:ce:d0:d8:d7:f5:44:
                    2f:ee:16:6e:e9:25:e1:9b:bc:d2:4d:b2:cc:86:4c:
                    e8:98:e7:ac:f1:94:20:23:37:25:6d:be:cb:e3:93:
                    e1:fd:81:68:e4:ae:36:4a:2a:ac:b1:03:fe:6e:4d:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:D7:81:37:A3:D7:BF:62:D3:98:74:5A:B8:0A:23:8B:04:5D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/4b08360c-1313-3bbb-a1c8-d6e7251e2ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl

            X509v3 Authority Key Identifier:
                keyid:B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.160.0/24
                IPv6:
                  2620:4d:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:76:9b:3a:2c:2d:8e:ca:91:39:d5:4c:1a:47:b6:68:a1:
         63:8d:bb:33:fe:f1:a1:db:94:41:04:aa:18:60:b3:22:02:6e:
         c1:8c:5e:d8:9f:88:ad:65:c6:20:aa:92:ae:53:aa:c0:e9:05:
         ca:e8:c1:c5:7d:97:99:6e:25:70:07:28:91:a6:3b:bc:74:e5:
         f2:2e:4d:fb:e8:e5:6e:84:82:2f:3f:99:01:47:93:c1:30:f5:
         61:bc:f7:f8:e4:ab:73:ad:9f:27:31:96:16:92:aa:1e:00:34:
         cf:4e:ce:ca:9b:8b:5a:ff:67:1f:f1:53:ef:e7:f5:35:0e:76:
         14:d0:16:b1:3d:38:d6:8c:43:bb:b2:a5:84:8b:1e:3b:0e:d6:
         7d:1f:06:c1:3d:b5:41:f0:12:5c:6b:0a:c7:cd:c0:c0:4b:0b:
         60:a3:05:9a:72:6b:3a:61:94:af:94:94:86:f9:55:c6:af:8f:
         85:d8:24:4b:9f:e3:93:dc:44:2b:96:96:f8:02:f6:68:bd:54:
         4a:ba:51:fa:bf:fa:d7:1e:bf:fe:2c:4f:c6:42:1a:15:25:01:
         03:4c:19:93:d9:60:51:d8:54:29:81:ef:b1:5b:50:99:7c:ea:
         5f:d8:10:ad:d2:ac:5a:85:87:ad:55:11:91:51:95:58:17:24:
         d4:92:92:ed
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE26Ovn8QcOAixLRggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxMWNmMzItMDkzMy00MzA4LTg5ODEtOWMyOTZmYzA2
OTg3MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
NjAxZDVlNzUtNjdlOC00ZWM4LWJmNzctYTIyY2JkZWI2YWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEdQuLvzB5O9AHz71EXq3zGk/O60Eq8S0vKz
JCzvd/wNocI4KzHV66QQvzFK1ZmpEjOiLwkci/LT7QfAiU19FcDbbTOf4siKVtbx
e6DhH710o18S56F4XbEhCXlHF/QgPxXeb8hKZOqsZalE8mPxUreJz5Z8OfVQIw9P
6p+BX8L63VeL8EJ8sWl5cBDuz6Y7qMwXwkz3Ofp5Com10yxaJXSFR3e1iK18m6Cc
5cmEKYC8ACLm0vHnypqtukMd0LTUW/jaIBgWrXqhJ4HO0NjX9UQv7hZu6SXhm7zS
TbLMhkzomOes8ZQgIzclbb7L45Ph/YFo5K42SiqssQP+bk1gnwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNCz14E3o9e/YtOYdFq4CiOLBF21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNTEx
Y2YzMi0wOTMzLTQzMDgtODk4MS05YzI5NmZjMDY5ODcvNGIwODM2MGMtMTMxMy0z
YmJiLWExYzgtZDZlNzI1MWUyZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjUxMWNmMzItMDkzMy00MzA4LTg5
ODEtOWMyOTZmYzA2OTg3L2I1MTFjZjMyLTA5MzMtNDMwOC04OTgxLTljMjk2ZmMw
Njk4Ny5jcmwwHwYDVR0jBBgwFoAUt2MJJsFK+5cXzGf7+2vA/qXhUsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNTExY2YzMi0wOTMzLTQzMDgtODk4MS05YzI5
NmZjMDY5ODcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4mgMA8E
AgACMAkDBwAmIABNoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACe92mzosLY7KkTnVTBpHtmihY427M/7x
oduUQQSqGGCzIgJuwYxe2J+IrWXGIKqSrlOqwOkFyujBxX2XmW4lcAcokaY7vHTl
8i5N++jlboSCLz+ZAUeTwTD1Ybz3+OSrc62fJzGWFpKqHgA0z07OypuLWv9nH/FT
7+f1NQ52FNAWsT041oxDu7KlhIseOw7WfR8GwT21QfASXGsKx83AwEsLYKMFmnJr
OmGUr5SUhvlVxq+PhdgkS5/jk9xEK5aW+AL2aL1USrpR+r/61x6//ixPxkIaFSUB
A0wZk9lgUdhUKYHvsVtQmXzqX9gQrdKsWoWHrVURkVGVWBck1JKS7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:40 2026 by rpki-client