Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa
File:                     3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa (raw, json)
Hash identifier:          X6bWjtLCQpGM6O/FX9ZAI3qSTRqJEFJa9qsvOUxlJn8=
Subject key identifier:   EB:5C:21:F0:E9:EA:16:6B:40:90:F3:51:40:FE:E2:2C:64:FB:6B:FB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D19B4CDE655BF5F924A19B380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.207.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:cd:e6:55:bf:5f:92:4a:19:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=afa0b801-e3a5-4797-9373-7bfb113d19e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:b4:d7:f8:58:11:06:b0:50:0e:d4:c6:f3:
                    ea:2e:9f:64:b9:90:f3:98:0a:11:81:8d:49:17:d9:
                    ef:27:ea:4d:43:4d:fa:e5:0a:cf:22:46:56:c4:b1:
                    a4:93:f1:b6:bd:bd:55:61:5d:48:fb:32:12:a7:1e:
                    b5:b5:80:18:e5:35:f2:c0:59:2d:78:bc:f0:ec:3c:
                    37:06:d4:6d:34:ae:6d:ab:9c:22:8a:c8:1b:d1:d2:
                    09:a9:ba:14:73:77:db:1b:6c:8f:4c:b2:0a:fe:08:
                    a8:eb:6c:22:c6:0f:e2:12:fc:1a:42:6e:f4:68:f8:
                    d4:48:0d:5c:52:45:91:eb:93:13:44:1b:4d:9f:d2:
                    a9:0e:07:6d:4a:b4:24:f9:c4:af:e6:b8:ec:a4:22:
                    20:66:f0:74:3f:41:6f:73:c2:80:a2:2f:9e:e1:d0:
                    b2:b7:b8:d3:8d:c0:02:0b:3e:f5:95:fa:b9:38:5a:
                    af:32:b7:23:66:f4:20:26:d5:e9:ba:59:35:15:ca:
                    a1:ca:b2:17:7e:f1:fe:b8:0b:1f:2e:67:eb:ca:a5:
                    e5:78:45:a1:98:62:61:ac:01:23:38:7d:56:e9:88:
                    02:0b:65:ca:7e:77:1b:b8:a3:ce:22:ed:da:50:77:
                    2f:a6:0b:ec:a7:99:1d:86:16:f3:52:b1:f2:d0:ea:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:21:F0:E9:EA:16:6B:40:90:F3:51:40:FE:E2:2C:64:FB:6B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ebdddf1-beef-3369-b8f1-91143ce1fabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:f0:3e:27:7d:fd:6a:ec:c1:35:c6:ed:14:e8:9a:3e:29:
         0b:59:0a:55:59:ee:b9:16:fd:5b:8a:73:5d:8e:d0:58:69:b4:
         b2:70:fe:bd:a3:00:08:d3:0f:8f:50:13:6a:93:73:c4:0c:10:
         f2:08:66:df:60:cb:c7:a5:cc:05:3e:9e:a8:6b:7f:29:23:23:
         c0:29:9f:df:77:ec:51:07:a2:5f:1d:02:bd:32:40:07:48:b9:
         df:80:46:6e:02:24:fe:f4:bf:60:f9:48:67:7d:19:ce:3b:b7:
         a9:e6:23:34:2d:89:8e:c0:39:24:af:41:ea:4e:1c:8c:52:d0:
         ae:7b:dc:32:f7:91:c3:29:e6:0e:f5:5a:03:53:1c:f1:2a:ab:
         82:d1:10:14:3a:32:32:42:2c:67:65:cf:10:f7:ef:67:4b:45:
         e1:7f:3a:4c:99:bd:52:d4:fc:1e:ff:9c:19:8c:b6:e9:f7:3a:
         13:aa:8b:62:b2:e8:2a:bb:00:8a:87:5d:2d:07:f2:b5:79:b7:
         e0:03:2d:84:77:7d:d5:74:fb:4e:e4:b3:d3:7b:41:3a:11:d3:
         49:cd:99:32:0a:90:5c:a9:22:9d:e8:23:82:d4:4e:43:3d:10:
         fe:94:20:28:c1:68:85:3d:aa:20:0d:c7:ab:a9:86:2e:d0:2c:
         b6:8a:fc:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtM3mVb9fkkoZs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
YWZhMGI4MDEtZTNhNS00Nzk3LTkzNzMtN2JmYjExM2QxOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxe01/hYEQawUA7UxvPqLp9kuZDzmAoRgY1J
F9nvJ+pNQ0365QrPIkZWxLGkk/G2vb1VYV1I+zISpx61tYAY5TXywFkteLzw7Dw3
BtRtNK5tq5wiisgb0dIJqboUc3fbG2yPTLIK/gio62wixg/iEvwaQm70aPjUSA1c
UkWR65MTRBtNn9KpDgdtSrQk+cSv5rjspCIgZvB0P0Fvc8KAoi+e4dCyt7jTjcAC
Cz71lfq5OFqvMrcjZvQgJtXpulk1FcqhyrIXfvH+uAsfLmfryqXleEWhmGJhrAEj
OH1W6YgCC2XKfncbuKPOIu3aUHcvpgvsp5kdhhbzUrHy0Oou/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtcIfDp6hZrQJDzUUD+4ixk+2v7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ViZGRkZjEtYmVlZi0z
MzY5LWI4ZjEtOTExNDNjZTFmYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF88QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABnj8D4nff1q7ME1xu0U6Jo+KQtZClVZ7rkW/VuKc12O0FhptLJw/r2j
AAjTD49QE2qTc8QMEPIIZt9gy8elzAU+nqhrfykjI8Apn9937FEHol8dAr0yQAdI
ud+ARm4CJP70v2D5SGd9Gc47t6nmIzQtiY7AOSSvQepOHIxS0K573DL3kcMp5g71
WgNTHPEqq4LREBQ6MjJCLGdlzxD372dLReF/OkyZvVLU/B7/nBmMtun3OhOqi2Ky
6Cq7AIqHXS0H8rV5t+ADLYR3fdV0+07ks9N7QToR00nNmTIKkFypIp3oI4LUTkM9
EP6UICjBaIU9qiANx6uphi7QLLaK/DQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:55 2026 by rpki-client