Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa
File:                     5d7b0921-4787-3c44-afb4-168140ca0aa3.roa (raw, json)
Hash identifier:          zo3efF7CDOKCNIGeFbOlLTEEXCoHKcA0U2LZGPyDzDg=
Subject key identifier:   BC:92:54:F2:65:11:33:EE:94:43:9B:29:01:57:35:DF:CA:40:B2:C7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DCF2B0C5CFD6D5771011D8600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     152700
IP address blocks:        184.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0c:5c:fd:6d:57:71:01:1d:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=f3e480aa-4d7f-4c7f-8024-97d6d1205ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:7c:90:e9:5c:17:7a:ca:17:3c:a5:e2:ab:
                    20:3d:fc:3d:f7:6f:40:e8:3d:73:38:d9:3f:78:c9:
                    2f:ba:45:ab:00:de:19:1a:7b:a4:21:94:56:bc:7c:
                    40:0a:e3:f0:7c:e3:86:fa:8d:24:f4:fe:d8:ca:2b:
                    95:0f:2b:46:43:b6:b7:4d:84:0c:a9:c7:0e:cc:24:
                    78:63:01:92:b2:02:67:5d:c3:ac:4f:8e:8b:72:91:
                    5b:5c:99:8a:fc:ca:49:3c:23:fb:e0:97:36:a1:64:
                    2c:27:9e:02:cf:f1:64:30:2f:5a:73:29:99:46:31:
                    84:86:6e:f0:e2:2c:6e:07:dd:20:ce:dd:92:ea:97:
                    22:04:1e:47:79:d2:8e:b1:43:95:cd:81:6e:9c:d0:
                    52:95:b8:21:f9:95:9f:c8:14:0b:cb:c8:bc:05:5b:
                    1d:5f:96:5e:33:18:6c:d1:6f:d8:bd:90:d6:0d:00:
                    3c:1a:82:df:94:e2:d0:37:f7:a9:c8:4a:92:c6:08:
                    13:f0:f0:fe:0f:c4:bb:8c:fd:ba:76:9a:ae:a6:b7:
                    81:f8:ba:22:ff:92:87:42:73:3b:ae:16:ea:85:10:
                    d0:b5:c9:b0:78:1b:51:f3:41:56:3e:cf:ea:6b:e0:
                    ad:97:a3:7b:09:3b:75:45:40:fe:1c:35:37:a7:67:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:54:F2:65:11:33:EE:94:43:9B:29:01:57:35:DF:CA:40:B2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d7b0921-4787-3c44-afb4-168140ca0aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:8f:34:81:2c:86:f0:5a:00:07:58:f1:8b:6b:18:2c:20:
         63:cb:72:d4:3a:f7:f7:60:57:6c:a0:6c:bb:6c:2d:13:8f:bd:
         25:18:3c:c1:67:cd:5d:15:16:80:53:5b:f5:75:92:d0:51:4d:
         ce:55:b0:94:5b:f5:20:35:ce:89:e6:45:fc:26:0a:a9:04:b0:
         b7:8f:c5:d5:85:20:08:21:16:4c:27:8d:07:6c:3f:c7:64:75:
         4e:0a:18:92:48:29:c6:d3:b3:7c:94:a6:86:34:0a:0d:51:df:
         e5:49:6c:e1:7d:61:dc:1c:5b:60:01:db:81:67:f6:1e:ac:2c:
         c3:4f:f0:a1:a3:31:a7:99:fc:be:7a:d6:a6:7a:7b:26:15:9c:
         be:73:69:ad:bb:d6:e1:e0:bf:c6:24:ef:7c:59:6b:d8:8f:db:
         b9:2a:c3:f2:50:a0:06:b1:43:b5:c2:77:f0:b2:cb:0a:44:26:
         3b:f5:8f:b2:cd:82:66:f5:62:6a:1e:86:23:41:7c:0d:3e:73:
         02:45:92:46:b8:51:ad:12:af:42:75:5e:12:bc:bd:03:5e:b7:
         7b:04:08:23:7e:93:df:09:00:6d:67:45:a9:12:c7:2d:b1:bc:
         c0:03:85:1f:82:d9:75:ea:be:6b:e3:d4:68:82:4f:1d:6d:b9:
         80:80:90:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3PKwxc/W1XcQEdhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk
ZjNlNDgwYWEtNGQ3Zi00YzdmLTgwMjQtOTdkNmQxMjA1Y2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQN8kOlcF3rKFzyl4qsgPfw9929A6D1zONk/
eMkvukWrAN4ZGnukIZRWvHxACuPwfOOG+o0k9P7YyiuVDytGQ7a3TYQMqccOzCR4
YwGSsgJnXcOsT46LcpFbXJmK/MpJPCP74Jc2oWQsJ54Cz/FkMC9acymZRjGEhm7w
4ixuB90gzt2S6pciBB5HedKOsUOVzYFunNBSlbgh+ZWfyBQLy8i8BVsdX5ZeMxhs
0W/YvZDWDQA8GoLflOLQN/epyEqSxggT8PD+D8S7jP26dpqupreB+Loi/5KHQnM7
rhbqhRDQtcmweBtR80FWPs/qa+Ctl6N7CTt1RUD+HDU3p2fD6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLySVPJlETPulEObKQFXNd/KQLLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWQ3YjA5MjEtNDc4Ny0z
YzQ0LWFmYjQtMTY4MTQwY2EwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuK4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWqjzSBLIbwWgAHWPGLaxgsIGPLctQ69/dgV2ygbLtsLROPvSUYPMFn
zV0VFoBTW/V1ktBRTc5VsJRb9SA1zonmRfwmCqkEsLePxdWFIAghFkwnjQdsP8dk
dU4KGJJIKcbTs3yUpoY0Cg1R3+VJbOF9YdwcW2AB24Fn9h6sLMNP8KGjMaeZ/L56
1qZ6eyYVnL5zaa271uHgv8Yk73xZa9iP27kqw/JQoAaxQ7XCd/CyywpEJjv1j7LN
gmb1YmoehiNBfA0+cwJFkka4Ua0Sr0J1XhK8vQNet3sECCN+k98JAG1nRakSxy2x
vMADhR+C2XXqvmvj1GiCTx1tuYCAkIA=
-----END CERTIFICATE-----
Generated at Wed May 13 14:49:29 2026 by rpki-client