Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa
File:                     ac44e76e-6867-3453-ab02-2991d56b5187.roa (raw, json)
Hash identifier:          H9WkT8CSkWqeENhtwNHfsQjcGFjKwdfBTS2WrTevOlQ=
Subject key identifier:   D1:B1:BA:5C:49:74:37:AD:BA:E3:1A:2F:6A:AC:81:AA:AA:E4:66:23
Certificate issuer:       /CN=6c1a499f-4f56-4480-b4b2-2c31a96f1edc
Certificate serial:       010D0C9F4328584F498A1B5E081567CACED9EC00
Authority key identifier: 44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399861
IP address blocks:        23.134.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:1b:5e:08:15:67:ca:ce:d9:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1a499f-4f56-4480-b4b2-2c31a96f1edc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cdceac71-1b14-439b-b4ec-328dd0ee99bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:14:b2:14:80:28:15:50:3a:22:e1:e6:bf:
                    b1:eb:f8:f8:94:e3:fc:cb:4f:5d:a8:04:83:9e:f0:
                    0b:3c:1a:0e:e0:cb:a5:56:fa:2f:79:ba:28:1f:89:
                    9a:25:29:45:8b:da:85:6e:5b:27:b0:1a:1c:4c:50:
                    03:87:c5:22:74:5e:2c:8e:1a:38:f2:20:ee:b5:ea:
                    af:89:5d:68:f7:fe:91:fe:1c:8a:45:3d:11:20:36:
                    be:40:8f:32:bb:aa:b1:a4:a0:c0:d2:c2:5d:b9:8a:
                    58:cf:94:1a:52:59:35:84:f9:b6:56:40:3c:87:63:
                    1d:27:1d:d1:22:68:b0:c2:ea:30:df:b8:aa:15:11:
                    ce:0b:98:d4:ed:29:3b:14:33:8d:72:e4:40:4d:1b:
                    1c:9b:2d:ed:d2:b4:c9:e8:18:f9:e4:10:6a:ff:b9:
                    0d:57:b1:27:67:ad:51:fe:77:44:65:08:db:95:fa:
                    ef:b6:5c:39:78:c3:c2:96:b5:39:d5:36:33:f3:ce:
                    c5:0c:15:fb:78:de:9e:d1:86:13:c6:6e:63:bf:ea:
                    0d:bf:d8:80:76:dc:9c:81:3c:72:a5:39:92:ee:50:
                    c9:ea:f6:95:26:63:04:31:e8:70:38:d0:f7:04:40:
                    da:26:5a:71:52:50:8c:21:b0:bb:4a:26:58:38:b7:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B1:BA:5C:49:74:37:AD:BA:E3:1A:2F:6A:AC:81:AA:AA:E4:66:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ac44e76e-6867-3453-ab02-2991d56b5187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.crl

            X509v3 Authority Key Identifier:
                keyid:44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:3a:c0:43:0f:cd:90:df:11:54:43:c4:0a:0d:84:dd:a7:
         dd:2c:64:b5:dd:b0:33:13:ca:2c:8b:ae:63:8a:29:20:bb:eb:
         51:d6:da:d7:ff:7f:87:90:13:26:61:8d:2f:a3:93:75:5e:5c:
         8a:b7:77:2f:33:0c:23:bb:cd:58:9d:42:91:c3:8a:cf:33:24:
         ee:a6:27:ec:a5:f4:59:e1:3e:86:3d:83:e3:65:39:72:52:e0:
         3a:c9:9c:63:cf:a2:d6:9e:22:60:68:5d:e3:21:96:13:3e:fd:
         fb:ba:20:dc:20:c4:85:b3:13:f0:25:e5:d0:ec:72:4d:cb:01:
         f6:05:5c:c9:cd:af:6f:a6:00:8a:33:b9:ee:05:16:c7:eb:e1:
         80:5f:40:e0:47:eb:fb:b6:30:83:1d:56:d5:41:f4:11:8f:d2:
         8c:8e:d8:41:52:04:c9:c0:c8:ea:20:f7:5f:9c:41:3b:ae:b7:
         a9:c6:aa:c6:02:f0:35:f5:20:27:aa:a4:1e:8e:cc:bf:1b:92:
         49:e3:89:2e:ef:8f:79:16:6a:b5:7d:b2:fd:1d:1e:9e:3f:6e:
         b2:fe:ad:7c:a5:ad:6f:a5:83:59:13:c6:c1:42:a5:6f:ac:1b:
         55:b8:49:62:86:d6:93:26:e0:6f:51:7b:34:3f:a0:9e:0e:f3:
         3c:14:5a:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JihteCBVnys7Z7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmMxYTQ5OWYtNGY1Ni00NDgwLWI0YjItMmMzMWE5NmYx
ZWRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2RjZWFjNzEtMWIxNC00MzliLWI0ZWMtMzI4ZGQwZWU5OWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPcUshSAKBVQOiLh5r+x6/j4lOP8y09dqASD
nvALPBoO4MulVvovebooH4maJSlFi9qFblsnsBocTFADh8UidF4sjho48iDuteqv
iV1o9/6R/hyKRT0RIDa+QI8yu6qxpKDA0sJduYpYz5QaUlk1hPm2VkA8h2MdJx3R
Imiwwuow37iqFRHOC5jU7Sk7FDONcuRATRscmy3t0rTJ6Bj55BBq/7kNV7EnZ61R
/ndEZQjblfrvtlw5eMPClrU51TYz887FDBX7eN6e0YYTxm5jv+oNv9iAdtycgTxy
pTmS7lDJ6vaVJmMEMehwOND3BEDaJlpxUlCMIbC7SiZYOLcWLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGxulxJdDetuuMaL2qsgaqq5GYjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82YzFh
NDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMxYTk2ZjFlZGMvYWM0NGU3NmUtNjg2Ny0z
NDUzLWFiMDItMjk5MWQ1NmI1MTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmMxYTQ5OWYtNGY1Ni00NDgwLWI0
YjItMmMzMWE5NmYxZWRjLzZjMWE0OTlmLTRmNTYtNDQ4MC1iNGIyLTJjMzFhOTZm
MWVkYy5jcmwwHwYDVR0jBBgwFoAURFLsg3sPO164hTgXyc6O84levn0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82YzFhNDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMx
YTk2ZjFlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKK3OsBDD82Q3xFUQ8QKDYTdp90sZLXdsDMTyiyLrmOKKSC761HW2tf/
f4eQEyZhjS+jk3VeXIq3dy8zDCO7zVidQpHDis8zJO6mJ+yl9FnhPoY9g+NlOXJS
4DrJnGPPotaeImBoXeMhlhM+/fu6INwgxIWzE/Al5dDsck3LAfYFXMnNr2+mAIoz
ue4FFsfr4YBfQOBH6/u2MIMdVtVB9BGP0oyO2EFSBMnAyOog91+cQTuut6nGqsYC
8DX1ICeqpB6OzL8bkknjiS7vj3kWarV9sv0dHp4/brL+rXylrW+lg1kTxsFCpW+s
G1W4SWKG1pMm4G9RezQ/oJ4O8zwUWhQ=
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:42 2026 by rpki-client