Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17e2ca4c-4016-37fd-b370-0855850db06d.roa
File:                     17e2ca4c-4016-37fd-b370-0855850db06d.roa (raw, json)
Hash identifier:          O4f1l2mFIgPuHcT77VYtcTAQFSv5Qcvka2Cp0c2el3w=
Subject key identifier:   0B:85:6E:70:FE:E0:43:66:E2:58:95:09:D2:15:03:55:D9:6E:AA:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DB0758DA0A953159CB68DA300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17e2ca4c-4016-37fd-b370-0855850db06d.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     20940
IP address blocks:        23.7.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8d:a0:a9:53:15:9c:b6:8d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=05da446b-4221-451f-9374-959ba165eb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:42:2e:f2:b1:50:0c:e0:5a:54:c4:97:4a:
                    87:29:2a:94:7a:9c:3f:79:11:16:0a:75:ea:86:ec:
                    ba:b3:5b:a0:0c:02:61:0a:84:5d:06:52:20:99:f6:
                    aa:5e:e2:22:e0:6a:b3:cd:89:22:46:63:8b:96:f2:
                    09:4e:dd:85:c9:24:0f:01:56:c9:09:db:39:93:5c:
                    50:98:09:c9:d9:9c:39:f6:ce:27:a0:08:17:4a:d5:
                    e5:2f:6a:cd:d5:e7:bf:bd:32:03:23:0e:b1:3a:d1:
                    1c:ed:e6:5d:4f:66:31:12:13:48:37:a2:8e:d1:33:
                    9d:4e:05:0f:19:f6:5f:32:e3:f5:9f:ec:5d:49:48:
                    84:0e:c3:ac:4d:3a:e9:ff:a7:bb:29:65:00:7c:9f:
                    f8:4f:97:c9:4a:eb:c2:b7:27:15:58:d4:7a:da:28:
                    50:14:27:48:fb:c1:b0:8c:52:fa:86:d4:57:2b:6c:
                    97:44:be:77:10:27:57:3c:d3:c9:3e:a2:a6:30:e2:
                    b1:8e:30:d2:5e:ed:04:aa:1a:aa:08:4a:fd:ea:9a:
                    05:d1:50:2d:08:ca:a6:8d:1d:61:b0:3e:84:44:51:
                    d8:22:d9:40:77:cb:fb:eb:76:fb:f7:76:e7:d3:5e:
                    b1:f7:d8:d1:ff:14:34:18:c0:12:cf:b4:30:f1:0c:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:6E:70:FE:E0:43:66:E2:58:95:09:D2:15:03:55:D9:6E:AA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17e2ca4c-4016-37fd-b370-0855850db06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.7.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:22:68:a9:ab:ed:5c:35:84:93:06:c8:e1:d5:d9:61:20:ba:
         71:7e:d5:05:05:3b:03:0d:ed:94:bc:89:50:d6:88:10:87:93:
         26:0a:6c:41:5c:f1:3c:2e:3b:9d:2a:87:fb:07:c7:b1:01:6d:
         fa:13:24:8b:3f:24:5a:6f:28:be:30:7c:ac:23:61:e3:47:7f:
         b0:24:f7:bb:00:6f:bb:df:da:a3:f4:3f:b2:29:8c:4e:6a:a8:
         cd:6e:ff:dc:3c:5a:97:05:98:e8:d7:a6:bc:68:e4:7a:1e:81:
         f6:53:f7:8f:ee:ee:b4:fb:0c:c5:13:46:f0:13:6f:72:a6:92:
         28:ff:47:24:56:3d:7c:7d:1f:31:19:68:e4:57:66:fa:89:15:
         50:32:cf:82:da:2f:33:4b:8e:ee:99:1c:4b:56:5a:19:16:72:
         88:cb:27:33:cc:eb:52:b1:6d:af:f0:98:bb:f1:b5:98:ac:40:
         c8:7d:f4:4f:45:f0:83:88:55:de:81:c5:67:db:7b:7b:00:fa:
         2e:c3:76:37:3a:a8:76:45:fe:05:b9:07:83:4f:e6:e0:59:27:
         33:86:b3:03:b8:5d:2c:d3:ca:4c:43:a0:1a:b8:1d:1f:19:7b:
         70:9f:6d:28:9b:19:3e:f2:78:6d:54:61:8f:97:3c:21:ee:db:
         84:c1:6e:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdY2gqVMVnLaNowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
MDVkYTQ0NmItNDIyMS00NTFmLTkzNzQtOTU5YmExNjVlYjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAxCLvKxUAzgWlTEl0qHKSqUepw/eREWCnXq
huy6s1ugDAJhCoRdBlIgmfaqXuIi4GqzzYkiRmOLlvIJTt2FySQPAVbJCds5k1xQ
mAnJ2Zw59s4noAgXStXlL2rN1ee/vTIDIw6xOtEc7eZdT2YxEhNIN6KO0TOdTgUP
GfZfMuP1n+xdSUiEDsOsTTrp/6e7KWUAfJ/4T5fJSuvCtycVWNR62ihQFCdI+8Gw
jFL6htRXK2yXRL53ECdXPNPJPqKmMOKxjjDSXu0EqhqqCEr96poF0VAtCMqmjR1h
sD6ERFHYItlAd8v763b793bn016x99jR/xQ0GMASz7Qw8Qz+eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuFbnD+4ENm4liVCdIVA1XZbqqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdlMmNhNGMtNDAxNi0z
N2ZkLWIzNzAtMDg1NTg1MGRiMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwf7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYiaKmr7Vw1hJMGyOHV2WEgunF+1QUFOwMN7ZS8iVDWiBCHkyYKbEFc
8TwuO50qh/sHx7EBbfoTJIs/JFpvKL4wfKwjYeNHf7Ak97sAb7vf2qP0P7IpjE5q
qM1u/9w8WpcFmOjXprxo5HoegfZT94/u7rT7DMUTRvATb3Kmkij/RyRWPXx9HzEZ
aORXZvqJFVAyz4LaLzNLju6ZHEtWWhkWcojLJzPM61Kxba/wmLvxtZisQMh99E9F
8IOIVd6BxWfbe3sA+i7Ddjc6qHZF/gW5B4NP5uBZJzOGswO4XSzTykxDoBq4HR8Z
e3CfbSibGT7yeG1UYY+XPCHu24TBbg4=
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:54 2026 by rpki-client