Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
File:                     5d7525c2-10d9-322d-888c-c13bde0efc94.roa (raw, json)
Hash identifier:          DBeq2dX7uzpZPhCgSGjkVMgD5jFuIU9CHiN53Pm2+x8=
Subject key identifier:   CF:0E:97:1E:55:78:69:47:CF:4D:8C:CB:88:74:6C:1F:76:64:24:70
Certificate issuer:       /CN=4a6ba250-5086-4d58-8336-494a05894bf9
Certificate serial:       010D0C9F4328584E7FFA31A844174E77DEFF3700
Authority key identifier: CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     62809
IP address blocks:        23.128.144.0/24 maxlen: 24
                          23.128.145.0/24 maxlen: 24
                          23.128.146.0/24 maxlen: 24
                          23.128.147.0/24 maxlen: 24
                          104.152.136.0/22 maxlen: 24
                          104.244.20.0/22 maxlen: 24
                          130.51.4.0/22 maxlen: 24
                          162.222.28.0/22 maxlen: 24
                          162.251.124.0/22 maxlen: 24
                          199.184.14.0/23 maxlen: 24
                          199.202.232.0/23 maxlen: 24
                          2605:2a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:31:a8:44:17:4e:77:de:ff:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=e6c55ee2-b899-4b0a-9928-b610111f2ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:29:22:71:e4:ec:2c:95:16:9d:0a:34:e6:
                    d5:97:6d:c2:20:23:c2:44:df:70:b4:71:56:75:0c:
                    88:96:11:03:1f:63:29:26:91:cf:a4:c3:60:19:73:
                    36:b5:55:c6:bd:3d:52:ab:d3:0e:f2:54:d3:de:c4:
                    2d:f7:e3:62:09:b2:26:98:1f:d8:fe:4e:b1:15:ba:
                    64:69:46:9f:97:cb:67:ab:85:83:c7:78:a9:39:55:
                    08:d7:de:64:26:1d:b5:00:c8:42:6d:33:76:76:cf:
                    1a:12:f0:bc:ea:a5:ca:64:69:15:5a:cf:21:01:60:
                    d5:05:49:dc:ab:be:7c:a6:8d:14:a2:83:2a:41:bc:
                    7e:5c:8e:08:ee:32:a2:6a:de:bb:b5:64:8b:28:b5:
                    02:01:d6:2a:14:9e:80:a9:44:94:fe:d7:c4:6d:75:
                    0a:0c:bd:e9:f8:fd:08:61:4f:6a:1a:33:87:0e:ee:
                    6b:29:b3:65:c3:d8:82:a7:68:3e:1a:4d:5b:c0:b1:
                    96:a3:8b:71:63:10:05:3b:4b:49:1a:2f:fd:bf:35:
                    ae:34:8d:2e:cf:8f:3f:f5:93:13:0f:dd:18:46:80:
                    94:c0:f4:f7:b0:a4:88:d8:05:77:b0:03:fb:52:f8:
                    fa:48:a7:1e:5f:be:f9:4b:f1:03:bc:30:96:35:7c:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:97:1E:55:78:69:47:CF:4D:8C:CB:88:74:6C:1F:76:64:24:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/5d7525c2-10d9-322d-888c-c13bde0efc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6f:2e:0c:5b:72:f6:88:8f:1c:d0:ab:9b:49:83:1d:b3:e1:
         4e:81:0b:1b:c5:a2:90:83:4e:4c:f7:ce:84:6c:47:8b:c2:bd:
         40:59:92:12:56:3b:fd:f6:95:37:ba:c9:d4:dc:cd:1d:d7:46:
         fd:44:80:4a:ad:29:02:55:b1:7c:76:50:27:10:35:a6:c7:70:
         a7:6f:55:e2:b3:23:7d:87:31:60:be:45:73:35:81:e1:ea:af:
         0d:74:4f:c3:cf:d7:cf:3c:0c:9e:2e:88:ba:b5:b3:f3:c1:a3:
         fd:0e:57:25:82:78:fe:14:63:71:fc:fa:71:41:c7:03:73:b2:
         2b:2c:6e:a2:3a:50:68:b2:f2:05:2f:17:2f:87:91:54:64:34:
         68:d8:17:6f:14:07:02:d6:74:58:b8:ff:83:5e:51:d8:84:fa:
         2e:09:44:09:bc:84:cf:8e:fc:65:24:05:5e:6b:5e:87:dd:ed:
         aa:e6:d2:82:f5:c6:ac:9c:50:a3:f3:90:f7:0e:51:69:c2:2f:
         4c:63:d7:d9:45:df:e7:bf:5f:14:9a:3a:be:d9:47:cc:7e:90:
         4a:3c:48:2a:2c:ae:2d:27:2e:fe:9c:ae:45:7f:6e:53:ba:4d:
         91:0c:45:9c:e2:d8:8e:fb:eb:1a:50:c9:19:8b:a1:3e:95:7e:
         a8:33:24:ea
-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWE5/+jGoRBdOd97/NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE2YmEyNTAtNTA4Ni00ZDU4LTgzMzYtNDk0YTA1ODk0
YmY5MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTZjNTVlZTItYjg5OS00YjBhLTk5MjgtYjYxMDExMWYyYWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0MpInHk7CyVFp0KNObVl23CICPCRN9wtHFW
dQyIlhEDH2MpJpHPpMNgGXM2tVXGvT1Sq9MO8lTT3sQt9+NiCbImmB/Y/k6xFbpk
aUafl8tnq4WDx3ipOVUI195kJh21AMhCbTN2ds8aEvC86qXKZGkVWs8hAWDVBUnc
q758po0UooMqQbx+XI4I7jKiat67tWSLKLUCAdYqFJ6AqUSU/tfEbXUKDL3p+P0I
YU9qGjOHDu5rKbNlw9iCp2g+Gk1bwLGWo4txYxAFO0tJGi/9vzWuNI0uz48/9ZMT
D90YRoCUwPT3sKSI2AV3sAP7Uvj6SKceX775S/EDvDCWNXw7AwIDAQABo4IDjjCC
A4owHQYDVR0OBBYEFM8Olx5VeGlHz02My4h0bB92ZCRwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTZi
YTI1MC01MDg2LTRkNTgtODMzNi00OTRhMDU4OTRiZjkvNWQ3NTI1YzItMTBkOS0z
MjJkLTg4OGMtYzEzYmRlMGVmYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGE2YmEyNTAtNTA4Ni00ZDU4LTgz
MzYtNDk0YTA1ODk0YmY5LzRhNmJhMjUwLTUwODYtNGQ1OC04MzM2LTQ5NGEwNTg5
NGJmOS5jcmwwHwYDVR0jBBgwFoAUzTILa3g6FIRXeaTNy+x7v1GWkqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YTZiYTI1MC01MDg2LTRkNTgtODMzNi00OTRh
MDU4OTRiZjkuY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCF4CQAwQC
aJiIAwQCaPQUAwQCgjMEAwQCot4cAwQCovt8AwQBx7gOAwQBx8roMA0EAgACMAcD
BQAmBSpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAK5vLgxbcvaIjxzQq5tJgx2z4U6BCxvFopCDTkz3zoRs
R4vCvUBZkhJWO/32lTe6ydTczR3XRv1EgEqtKQJVsXx2UCcQNabHcKdvVeKzI32H
MWC+RXM1geHqrw10T8PP1888DJ4uiLq1s/PBo/0OVyWCeP4UY3H8+nFBxwNzsiss
bqI6UGiy8gUvFy+HkVRkNGjYF28UBwLWdFi4/4NeUdiE+i4JRAm8hM+O/GUkBV5r
Xofd7arm0oL1xqycUKPzkPcOUWnCL0xj19lF3+e/XxSaOr7ZR8x+kEo8SCosri0n
Lv6crkV/blO6TZEMRZzi2I776xpQyRmLoT6VfqgzJOo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:09:29 2026 by rpki-client