Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/bf21dc79-da78-35fa-a38a-5dd72788b37c.roa
File:                     bf21dc79-da78-35fa-a38a-5dd72788b37c.roa (raw, json)
Hash identifier:          ym/EtIv1N7j/8m4yZsYej4xqWuwWjLvyXEISX/MyHCs=
Subject key identifier:   EB:68:F7:CF:66:7C:47:1B:2D:E0:61:F5:8A:25:8E:0B:E4:82:A6:55
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584D386A4E249E30765134D2F300
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/bf21dc79-da78-35fa-a38a-5dd72788b37c.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     265849
IP address blocks:        23.226.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:24:9e:30:76:51:34:d2:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=8348a005-4708-46f0-a606-2bd6834aa6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:e2:8f:ab:91:f4:af:4d:5e:92:3f:be:56:
                    b8:79:2a:eb:b8:6a:1b:43:20:7c:7e:0e:b4:9f:14:
                    9e:44:04:bb:06:a1:fb:a0:cc:55:6d:c1:05:17:19:
                    39:73:fb:82:37:c0:ed:80:98:e2:94:1d:68:23:5a:
                    23:a6:2c:44:66:13:84:e6:6d:52:33:51:58:8c:0d:
                    b4:27:73:21:cf:22:15:f5:ca:e6:4c:b8:40:0a:22:
                    a5:33:68:9a:9a:13:2a:7d:bc:c0:5d:3f:5f:20:41:
                    df:3a:76:ad:11:bf:f7:2f:4f:97:23:e7:0b:5e:94:
                    d3:63:1d:96:99:0a:f8:6f:09:d4:d9:a6:bb:9c:e0:
                    f0:43:2d:10:ae:18:b5:58:6b:9d:f7:00:38:3a:de:
                    df:77:54:86:c0:94:3e:7f:23:7e:ae:0b:b0:57:a1:
                    16:70:75:58:0d:a4:0f:2a:7b:15:f8:06:44:81:de:
                    08:e4:10:73:ba:16:76:67:62:8f:f6:64:1a:5c:db:
                    4c:d9:b8:3c:94:03:6d:c2:2e:0a:3a:94:55:28:c5:
                    76:a8:3d:96:ed:4d:34:6f:1c:fe:22:64:7c:37:5e:
                    ab:14:54:4b:93:42:44:cb:93:6b:f4:2f:cb:a0:27:
                    dc:cc:1a:91:78:40:9b:85:97:80:f4:cc:0a:ac:24:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:F7:CF:66:7C:47:1B:2D:E0:61:F5:8A:25:8E:0B:E4:82:A6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/bf21dc79-da78-35fa-a38a-5dd72788b37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:1c:8b:1d:1a:ff:32:0c:96:90:ab:f1:8f:98:87:bf:07:
         60:75:71:5b:c1:00:80:eb:fa:94:8a:50:0a:fd:7a:33:e5:80:
         97:06:8f:6f:04:9a:70:34:e1:62:bc:75:0b:59:c3:ac:55:1d:
         df:dc:57:27:0e:a7:d4:00:6b:28:2e:92:c7:e9:52:f4:a1:3c:
         7b:38:2e:8e:a3:20:7f:32:e6:f4:5c:99:f5:21:b6:73:55:79:
         99:21:11:1b:09:be:5e:08:18:28:38:40:7c:ec:30:6b:15:24:
         2a:08:9e:cf:fe:51:67:eb:e5:a6:29:31:6c:fc:3a:13:67:0e:
         3f:b2:46:bb:0d:14:3b:0c:88:cd:aa:68:26:d5:6b:5e:4b:90:
         2d:7a:47:be:90:41:da:b3:7c:d4:6d:59:a7:b3:a1:ac:72:e1:
         79:85:96:a3:38:90:8a:23:3a:b3:eb:de:a7:8c:da:15:19:70:
         e7:e0:2b:d2:e6:50:c9:29:8c:e6:13:90:8d:4a:21:17:cf:ec:
         b7:80:3c:ef:4e:37:20:be:f0:c3:8b:cb:ae:8c:26:23:9a:ce:
         ca:02:a6:9d:b8:4f:ba:00:7d:61:42:a2:84:aa:15:57:a0:85:
         69:93:04:d6:e4:0f:ea:20:a1:89:53:a1:96:11:30:34:0d:b5:
         9e:8d:0b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ak4knjB2UTTS8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
ODM0OGEwMDUtNDcwOC00NmYwLWE2MDYtMmJkNjgzNGFhNmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjzij6uR9K9NXpI/vla4eSrruGobQyB8fg60
nxSeRAS7BqH7oMxVbcEFFxk5c/uCN8DtgJjilB1oI1ojpixEZhOE5m1SM1FYjA20
J3MhzyIV9crmTLhACiKlM2iamhMqfbzAXT9fIEHfOnatEb/3L0+XI+cLXpTTYx2W
mQr4bwnU2aa7nODwQy0Qrhi1WGud9wA4Ot7fd1SGwJQ+fyN+rguwV6EWcHVYDaQP
KnsV+AZEgd4I5BBzuhZ2Z2KP9mQaXNtM2bg8lANtwi4KOpRVKMV2qD2W7U00bxz+
ImR8N16rFFRLk0JEy5Nr9C/LoCfczBqReECbhZeA9MwKrCTpDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOto989mfEcbLeBh9YoljgvkgqZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYmYyMWRjNzktZGE3OC0z
NWZhLWEzOGEtNWRkNzI3ODhiMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqLHIsdGv8yDJaQq/GPmIe/B2B1cVvBAIDr+pSKUAr9ejPlgJcGj28E
mnA04WK8dQtZw6xVHd/cVycOp9QAayguksfpUvShPHs4Lo6jIH8y5vRcmfUhtnNV
eZkhERsJvl4IGCg4QHzsMGsVJCoIns/+UWfr5aYpMWz8OhNnDj+yRrsNFDsMiM2q
aCbVa15LkC16R76QQdqzfNRtWaezoaxy4XmFlqM4kIojOrPr3qeM2hUZcOfgK9Lm
UMkpjOYTkI1KIRfP7LeAPO9ONyC+8MOLy66MJiOazsoCpp24T7oAfWFCooSqFVeg
hWmTBNbkD+ogoYlToZYRMDQNtZ6NC04=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:40 2026 by rpki-client