Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
File:                     7aa24150-2c39-3866-b24c-0bda23609ae1.roa (raw, json)
Hash identifier:          Uvan2Daei77nuYEIeDAc/w106RJ0oI/UROdT1BUtkho=
Subject key identifier:   E5:9F:03:8A:D8:78:C6:F6:70:56:89:D2:1B:7E:AE:D8:81:A8:2A:CA
Certificate issuer:       /CN=92790d80-09a9-411b-b7e0-abbcd294be57
Certificate serial:       010D0C9F4328584D2644B361CC3C7C459ABCE480
Authority key identifier: 3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     32127
IP address blocks:        23.173.208.0/22 maxlen: 32
                          23.173.212.0/24 maxlen: 32
                          45.11.140.0/22 maxlen: 32
                          2602:fcce::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:b3:61:cc:3c:7c:45:9a:bc:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92790d80-09a9-411b-b7e0-abbcd294be57
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=d6a0f2e4-44bb-45ad-85b9-cb86a869ce7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:25:10:01:fb:32:bf:10:fa:ef:36:7d:5a:
                    2c:7a:d9:03:da:e3:81:ef:3f:e3:f8:a7:ea:7b:8f:
                    88:84:4c:39:a0:90:67:88:ae:53:e5:e9:e1:c4:e5:
                    9c:ca:c0:6e:91:b0:38:81:94:19:44:6e:e9:79:f4:
                    68:5b:a8:22:c8:d2:e1:e1:50:82:85:38:26:04:39:
                    14:d2:e6:a5:61:5b:71:08:c0:d9:86:25:dc:85:de:
                    1d:7d:32:fd:23:97:cc:11:e6:ec:0c:71:d6:ce:45:
                    d7:2f:cf:51:da:88:c1:22:0e:98:d1:b5:8e:af:44:
                    3b:7a:42:79:70:ba:59:0c:42:7c:b5:ba:dc:db:1c:
                    81:60:f3:05:40:c7:fb:c7:80:e9:b8:57:8c:9f:1d:
                    1b:19:fc:ec:a8:e6:37:a1:4f:3b:76:3e:83:ed:1a:
                    7a:4e:cf:ab:e4:1a:f0:a1:74:bd:dc:d2:ae:28:ea:
                    a7:07:ce:8e:50:7f:d2:73:95:21:dd:40:54:aa:d5:
                    78:c9:01:b3:10:2f:5a:fe:1f:17:7f:9e:df:0a:13:
                    9f:24:21:84:46:03:93:fe:b7:4e:a6:b6:7c:04:f0:
                    f7:97:84:c6:d4:c1:24:b2:6f:af:90:8b:70:3e:e3:
                    b4:4b:c3:bb:61:16:a1:a3:1f:58:52:20:fa:98:98:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9F:03:8A:D8:78:C6:F6:70:56:89:D2:1B:7E:AE:D8:81:A8:2A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/7aa24150-2c39-3866-b24c-0bda23609ae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57/92790d80-09a9-411b-b7e0-abbcd294be57.crl

            X509v3 Authority Key Identifier:
                keyid:3F:34:1F:D0:4A:7A:FA:61:22:16:C0:10:48:83:DA:14:6C:57:FA:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92790d80-09a9-411b-b7e0-abbcd294be57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.208.0-23.173.212.255
                  45.11.140.0/22
                IPv6:
                  2602:fcce::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:51:4b:55:ba:57:29:6e:77:cd:19:db:69:36:67:9a:de:
         ea:6d:c1:0e:09:ca:d3:9e:ed:5b:2a:5c:44:b8:d6:a1:51:33:
         2a:3f:6f:71:45:22:9b:db:c5:38:5e:18:97:ae:ff:fc:f5:91:
         d3:76:2b:a8:6a:bd:b7:a5:d6:3b:9c:11:b3:d4:61:ef:8a:e2:
         db:06:32:56:30:24:7c:3b:a3:b8:b0:28:31:ac:2e:d2:05:4b:
         31:54:38:15:cf:22:59:ac:a3:2d:48:04:88:b0:31:be:53:84:
         59:8e:44:21:f3:bd:7d:e1:38:bb:76:ab:12:5c:5b:95:54:ca:
         d0:6b:1e:72:e5:f3:b5:ac:d3:74:a6:03:b0:c5:b9:07:f1:2f:
         20:81:0f:a7:50:63:05:85:e9:69:81:67:26:de:38:0d:68:6b:
         aa:ab:b2:73:de:05:d6:1c:28:fb:ee:55:92:b8:45:b8:40:b2:
         ba:1a:5a:e4:0a:af:0c:12:18:09:2d:94:d5:1a:31:dc:c8:65:
         fa:91:c4:f9:78:b0:ad:c3:d7:da:00:aa:fa:34:c4:f3:4c:8d:
         4c:ff:0f:22:4b:03:61:07:06:26:8c:1a:42:c9:e3:f2:35:4c:
         d9:7a:20:8e:55:6c:dc:b4:e7:81:dc:33:72:5f:5d:08:a3:3d:
         30:d3:06:b5
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE0mRLNhzDx8RZq85IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3OTBkODAtMDlhOS00MTFiLWI3ZTAtYWJiY2QyOTRi
ZTU3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDZhMGYyZTQtNDRiYi00NWFkLTg1YjktY2I4NmE4NjljZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcUlEAH7Mr8Q+u82fVosetkD2uOB7z/j+Kfq
e4+IhEw5oJBniK5T5enhxOWcysBukbA4gZQZRG7pefRoW6giyNLh4VCChTgmBDkU
0ualYVtxCMDZhiXchd4dfTL9I5fMEebsDHHWzkXXL89R2ojBIg6Y0bWOr0Q7ekJ5
cLpZDEJ8tbrc2xyBYPMFQMf7x4DpuFeMnx0bGfzsqOY3oU87dj6D7Rp6Ts+r5Brw
oXS93NKuKOqnB86OUH/Sc5Uh3UBUqtV4yQGzEC9a/h8Xf57fChOfJCGERgOT/rdO
prZ8BPD3l4TG1MEksm+vkItwPuO0S8O7YRahox9YUiD6mJhVHQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFOWfA4rYeMb2cFaJ0ht+rtiBqCrKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Mjc5
MGQ4MC0wOWE5LTQxMWItYjdlMC1hYmJjZDI5NGJlNTcvN2FhMjQxNTAtMmMzOS0z
ODY2LWIyNGMtMGJkYTIzNjA5YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTI3OTBkODAtMDlhOS00MTFiLWI3
ZTAtYWJiY2QyOTRiZTU3LzkyNzkwZDgwLTA5YTktNDExYi1iN2UwLWFiYmNkMjk0
YmU1Ny5jcmwwHwYDVR0jBBgwFoAUPzQf0Ep6+mEiFsAQSIPaFGxX+v4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85Mjc5MGQ4MC0wOWE5LTQxMWItYjdlMC1hYmJj
ZDI5NGJlNTcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUMAwDBAQXrdAD
BAAXrdQDBAItC4wwDgQCAAIwCAMGBCYC/M4AMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAGeUUtVulcpbnfN
GdtpNmea3uptwQ4JytOe7VsqXES41qFRMyo/b3FFIpvbxTheGJeu//z1kdN2K6hq
vbel1jucEbPUYe+K4tsGMlYwJHw7o7iwKDGsLtIFSzFUOBXPIlmsoy1IBIiwMb5T
hFmORCHzvX3hOLt2qxJcW5VUytBrHnLl87Ws03SmA7DFuQfxLyCBD6dQYwWF6WmB
ZybeOA1oa6qrsnPeBdYcKPvuVZK4RbhAsroaWuQKrwwSGAktlNUaMdzIZfqRxPl4
sK3D19oAqvo0xPNMjUz/DyJLA2EHBiaMGkLJ4/I1TNl6II5VbNy054HcM3JfXQij
PTDTBrU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:56 2026 by rpki-client