Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa
File:                     4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json)
Hash identifier:          yYlkXDPssnGvsxzGm+srjoa0ARXvYYqVTMU/e9aXi3Q=
Subject key identifier:   CD:F5:48:18:87:73:8C:25:2A:7D:02:68:2D:57:D2:C0:51:67:E2:C2
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D9B85561F3F6C6886744F5579
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     26548
IP address blocks:        23.156.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:56:1f:3f:6c:68:86:74:4f:55:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=89cce93b-c204-484f-860e-ccee9bf8cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:61:7a:2f:d8:c9:ea:7d:22:80:11:f9:de:
                    41:ba:9d:4b:1f:c8:9c:e3:4f:41:4c:55:fc:ec:d7:
                    0f:1e:a2:8f:a5:93:29:df:94:a9:47:28:d8:eb:f6:
                    54:74:43:f9:d4:04:4a:a4:f2:37:0b:4e:b1:12:0c:
                    7e:c4:19:34:ad:12:27:da:ab:0c:c7:f2:39:1f:8d:
                    f0:55:07:95:06:dc:cb:e8:b9:fa:56:b1:4b:9d:a0:
                    e3:ff:ce:95:80:ab:cc:1a:e2:31:3a:8e:f7:a2:ae:
                    38:06:e5:ce:c7:65:a6:22:eb:c3:57:78:79:7f:ee:
                    d0:93:09:1d:82:00:be:24:e2:1d:01:9d:aa:a1:3d:
                    c7:45:d1:fe:1b:91:02:cd:ee:73:1c:36:00:a8:ad:
                    01:12:81:15:03:e3:ee:cb:75:af:52:0e:dc:3c:c0:
                    f1:8f:b1:e5:94:bd:a6:42:d2:43:5e:11:ba:f9:3a:
                    08:c6:f3:f9:bc:51:15:6d:2c:ee:7b:3f:b8:4a:8b:
                    ed:22:32:64:e8:06:1e:d1:d5:b9:40:fd:e2:57:d0:
                    6d:a8:b6:99:99:9f:f1:28:5b:40:2a:60:62:af:7c:
                    ff:f5:b2:b0:7d:db:e0:a6:06:a1:92:12:cd:3d:d1:
                    aa:32:80:df:0b:81:8c:86:73:46:8e:8f:c9:59:29:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F5:48:18:87:73:8C:25:2A:7D:02:68:2D:57:D2:C0:51:67:E2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:3f:27:8a:ce:97:e0:3b:d7:55:aa:e2:a1:74:23:74:e8:18:
         1f:04:65:f2:d6:e3:7a:28:61:c3:1c:97:ae:ab:a5:47:e2:f0:
         0f:92:8e:03:0e:c0:a2:e2:5c:f7:48:49:bb:85:d3:da:33:96:
         45:51:4d:46:6a:64:f7:a3:58:c3:6f:f0:64:1c:03:5a:50:65:
         86:c8:31:40:3f:98:b2:c6:78:b2:37:8a:a3:23:00:97:71:1d:
         c5:20:0a:82:1f:95:89:9b:a9:28:53:87:96:74:96:16:6c:9d:
         30:38:e3:f6:c5:14:42:59:52:64:80:39:ba:f6:8b:1f:42:26:
         f5:b3:29:e7:42:86:18:f0:12:77:61:a8:0a:28:2f:c4:eb:bd:
         01:50:29:a7:48:56:bd:22:96:a7:bb:83:25:a8:fa:d4:6d:b5:
         6d:79:3c:75:b5:d8:e3:b4:49:1e:9b:ef:9f:10:83:b5:18:71:
         46:1d:1f:ee:24:87:06:43:f0:79:c3:ac:39:ae:44:15:17:12:
         10:af:36:2a:66:b9:a0:2b:5f:d6:e6:bc:5f:08:b4:03:c6:b5:
         82:90:32:08:bd:ff:64:2d:1b:78:95:0e:3a:c6:b4:1f:53:ed:
         b4:88:47:51:ad:33:cc:2d:64:18:9b:f9:ea:0f:2c:dc:6c:1d:
         9c:2f:97:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVYfP2xohnRPVXkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk
ODljY2U5M2ItYzIwNC00ODRmLTg2MGUtY2NlZTliZjhjZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxhei/Yyep9IoAR+d5Bup1LH8ic409BTFX8
7NcPHqKPpZMp35SpRyjY6/ZUdEP51ARKpPI3C06xEgx+xBk0rRIn2qsMx/I5H43w
VQeVBtzL6Ln6VrFLnaDj/86VgKvMGuIxOo73oq44BuXOx2WmIuvDV3h5f+7Qkwkd
ggC+JOIdAZ2qoT3HRdH+G5ECze5zHDYAqK0BEoEVA+Puy3WvUg7cPMDxj7HllL2m
QtJDXhG6+ToIxvP5vFEVbSzuez+4SovtIjJk6AYe0dW5QP3iV9BtqLaZmZ/xKFtA
KmBir3z/9bKwfdvgpgahkhLNPdGqMoDfC4GMhnNGjo/JWSk0xQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM31SBiHc4wlKn0CaC1X0sBRZ+LCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNDUwNGMzOWMtMjJkMS0z
ZWRiLWIyYWEtN2NmMGNmNmM2YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJw/J4rOl+A711Wq4qF0I3ToGB8EZfLW43ooYcMcl66rpUfi8A+SjgMO
wKLiXPdISbuF09ozlkVRTUZqZPejWMNv8GQcA1pQZYbIMUA/mLLGeLI3iqMjAJdx
HcUgCoIflYmbqShTh5Z0lhZsnTA44/bFFEJZUmSAObr2ix9CJvWzKedChhjwEndh
qAooL8TrvQFQKadIVr0ilqe7gyWo+tRttW15PHW12OO0SR6b758Qg7UYcUYdH+4k
hwZD8HnDrDmuRBUXEhCvNipmuaArX9bmvF8ItAPGtYKQMgi9/2QtG3iVDjrGtB9T
7bSIR1GtM8wtZBib+eoPLNxsHZwvl1U=
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:10 2026 by rpki-client