Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa
File:                     6f593c08-3653-34e9-8e4d-e176f1d87536.roa (raw, json)
Hash identifier:          XErdITtBPFGvNS9Rx+iQY5n0kQp//jLCjcPpXfV8OYA=
Subject key identifier:   00:3C:6F:1C:E7:62:78:12:80:C8:14:06:85:26:27:54:8A:05:62:CD
Certificate issuer:       /CN=b673aad8-2248-407c-90e8-0781473d6616
Certificate serial:       010D0C9F4328584D143D5FA9B2E9F8513365A1C0
Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        23.138.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:5f:a9:b2:e9:f8:51:33:65:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=943f35aa-1af6-4eec-a5e8-e98281edf6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:98:79:87:ea:ee:df:42:67:80:28:4c:16:37:
                    b3:04:aa:75:61:1f:fc:a8:3f:58:2e:34:fc:df:b8:
                    22:d6:3c:21:e4:ed:cd:90:5f:6c:0d:8b:5e:56:9c:
                    27:d1:14:16:31:04:98:49:08:3b:8e:56:71:14:4d:
                    57:f2:97:b7:96:2a:13:1e:ee:91:ab:4f:c9:7a:7e:
                    a3:c6:09:24:5a:36:57:9d:6b:23:fe:37:2a:82:af:
                    f1:da:cd:94:8d:58:b9:00:10:dd:f5:b5:f7:91:bb:
                    a7:0b:23:61:42:06:12:65:04:e5:57:32:66:af:6b:
                    e9:43:81:3e:6c:44:10:38:f8:43:85:94:bc:10:9b:
                    4f:58:9a:78:3d:70:51:57:a9:b7:07:33:39:7b:8d:
                    4a:0c:ce:b1:f3:33:13:6e:b4:96:10:a5:2b:af:45:
                    5c:1a:88:b7:80:77:6f:cb:34:ab:7f:8d:1c:7b:e7:
                    a7:14:9f:8e:3a:3b:f0:fe:8e:19:e1:a4:3c:10:7b:
                    82:d2:07:ba:5b:9b:c8:95:c7:90:84:8c:d6:99:0b:
                    e7:8a:0b:db:67:4a:4d:be:34:ee:39:0a:0a:d8:b5:
                    85:7b:79:4f:4e:11:97:c1:4e:40:54:4b:15:0b:1f:
                    c7:25:9a:4c:6e:96:9b:7f:5c:12:89:31:0c:f4:57:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:6F:1C:E7:62:78:12:80:C8:14:06:85:26:27:54:8A:05:62:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:bc:ba:eb:e3:bb:98:38:b4:2b:ce:f5:05:38:21:28:19:
         e7:33:b3:17:b9:15:3c:5a:d9:ac:88:88:94:d6:04:3b:bf:7f:
         b9:69:9d:85:25:16:88:74:07:7b:19:b7:1e:1d:94:e3:1d:1b:
         6b:39:8e:18:f8:d2:4f:6b:8e:ed:50:79:57:31:b9:ac:51:31:
         07:2f:fb:98:66:23:2f:7d:d9:66:cc:9b:71:44:fc:67:0c:3c:
         5f:d7:68:a2:ad:d1:02:f0:8c:00:42:5c:fb:f0:32:97:44:0a:
         92:d7:48:6d:d2:5d:cd:3e:18:de:a7:9a:c9:fd:d2:2a:12:79:
         eb:59:bb:2c:76:c6:13:a3:17:34:c6:71:70:00:a8:f0:e7:34:
         5c:c6:64:8c:5c:15:f8:97:f9:29:67:48:27:99:df:ce:8b:d2:
         1e:47:2c:bf:92:ca:c0:4f:61:6c:32:68:22:12:a0:21:c6:2c:
         41:b1:2b:c4:3e:f8:3a:85:bb:4c:76:9c:ad:51:0a:77:38:da:
         94:2d:fa:87:26:83:90:6b:26:86:67:9f:7c:d4:89:c5:f4:db:
         cf:b6:ad:43:d1:2e:41:f7:9a:f1:54:13:86:d3:ee:04:9b:cd:
         59:4e:cc:d6:c7:57:e1:1b:21:51:e9:1e:b0:64:64:33:07:fc:
         69:f3:8b:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPV+psun4UTNlocAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2
NjE2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
OTQzZjM1YWEtMWFmNi00ZWVjLWE1ZTgtZTk4MjgxZWRmNmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Zh5h+ru30JngChMFjezBKp1YR/8qD9YLjT8
37gi1jwh5O3NkF9sDYteVpwn0RQWMQSYSQg7jlZxFE1X8pe3lioTHu6Rq0/Jen6j
xgkkWjZXnWsj/jcqgq/x2s2UjVi5ABDd9bX3kbunCyNhQgYSZQTlVzJmr2vpQ4E+
bEQQOPhDhZS8EJtPWJp4PXBRV6m3BzM5e41KDM6x8zMTbrSWEKUrr0VcGoi3gHdv
yzSrf40ce+enFJ+OOjvw/o4Z4aQ8EHuC0ge6W5vIlceQhIzWmQvnigvbZ0pNvjTu
OQoK2LWFe3lPThGXwU5AVEsVCx/HJZpMbpabf1wSiTEM9FeEKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAA8bxznYngSgMgUBoUmJ1SKBWLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNjcz
YWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvNmY1OTNjMDgtMzY1My0z
NGU5LThlNGQtZTE3NmYxZDg3NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjY3M2FhZDgtMjI0OC00MDdjLTkw
ZTgtMDc4MTQ3M2Q2NjE2L2I2NzNhYWQ4LTIyNDgtNDA3Yy05MGU4LTA3ODE0NzNk
NjYxNi5jcmwwHwYDVR0jBBgwFoAU+f39vaYd7kfsQ5VBQQC2fQpoVKIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgx
NDczZDY2MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJgbvLrr47uYOLQrzvUFOCEoGeczsxe5FTxa2ayIiJTWBDu/f7lpnYUl
Foh0B3sZtx4dlOMdG2s5jhj40k9rju1QeVcxuaxRMQcv+5hmIy992WbMm3FE/GcM
PF/XaKKt0QLwjABCXPvwMpdECpLXSG3SXc0+GN6nmsn90ioSeetZuyx2xhOjFzTG
cXAAqPDnNFzGZIxcFfiX+SlnSCeZ386L0h5HLL+SysBPYWwyaCISoCHGLEGxK8Q+
+DqFu0x2nK1RCnc42pQt+ocmg5BrJoZnn3zUicX028+2rUPRLkH3mvFUE4bT7gSb
zVlOzNbHV+EbIVHpHrBkZDMH/GnziyA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:57 2026 by rpki-client