Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6edc1-a395-3ce7-8548-caac267af147.roa
File:                     23c6edc1-a395-3ce7-8548-caac267af147.roa (raw, json)
Hash identifier:          cMKQVJFcDCFGP9h8rCYQUDMYfPplV4nd5MlW/wJTXJE=
Subject key identifier:   6E:4E:F3:6E:FC:64:C7:9A:68:4E:43:9D:7E:87:F7:E8:5F:13:2D:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0387B1D64AF0ADBBAE840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6edc1-a395-3ce7-8548-caac267af147.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        63.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:38:7b:1d:64:af:0a:db:ba:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=82d588a1-b63a-4ab5-8b2c-3bee1e6ac983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:03:ad:de:d7:a1:50:c8:a3:a7:b0:fb:5e:
                    6b:a5:7c:43:78:ef:1a:18:94:15:bb:dc:49:bf:fe:
                    52:35:b4:f9:55:2a:d9:77:12:23:b4:24:93:6d:3a:
                    07:df:f7:62:f5:79:a8:c0:ae:fe:f4:db:3a:92:39:
                    9c:10:53:c5:78:30:b3:4f:41:c5:4e:34:53:56:82:
                    f1:fc:24:df:e9:b3:ba:1d:76:99:ad:35:d6:fa:1d:
                    7d:58:a6:09:b4:ae:f3:46:23:ab:f7:57:35:48:03:
                    99:31:c3:bb:63:55:4e:84:fd:d1:73:2f:c6:80:f7:
                    90:53:46:7c:31:0f:12:d1:67:f3:f5:00:57:79:1e:
                    0a:63:ab:98:96:d1:de:c0:74:58:66:ec:19:60:02:
                    1a:34:24:51:03:46:3d:bc:8b:4c:62:93:1b:92:d2:
                    28:26:b1:e3:21:ef:9d:7a:b7:7d:b9:9c:83:07:c8:
                    5b:c4:c9:30:ba:d6:05:f7:6d:82:9c:1f:f3:77:f4:
                    70:6a:29:2f:9c:6d:44:6e:e8:fd:df:c2:a6:48:cd:
                    69:97:03:98:f1:4a:db:91:9c:0e:2a:e1:79:08:31:
                    e3:1e:4d:fa:63:9a:1f:6d:08:9f:ea:5a:85:50:48:
                    25:24:c1:98:06:35:a5:7c:4f:4f:a2:88:a1:7d:ca:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:F3:6E:FC:64:C7:9A:68:4E:43:9D:7E:87:F7:E8:5F:13:2D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23c6edc1-a395-3ce7-8548-caac267af147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:c8:3d:a5:58:3d:2e:83:33:31:e8:dd:25:20:8c:28:b4:
         07:8b:ad:f5:bc:13:1f:73:cd:16:53:8b:de:3b:1f:12:77:fd:
         31:bf:f3:75:4f:a8:88:f5:74:b4:31:b0:68:23:09:fb:88:d7:
         45:c1:fe:5b:86:e0:50:06:99:b5:33:cc:ca:53:d3:5b:dc:f3:
         bb:d6:e4:8a:ea:8c:2e:c8:d2:85:77:92:84:0f:4d:ab:67:57:
         80:ea:46:bc:12:a5:f3:5c:ab:a3:c5:7b:db:8d:dd:22:f5:a7:
         3c:b1:46:c1:8a:ff:95:94:05:30:ad:53:85:56:8a:69:48:b4:
         a9:0b:a5:6b:b2:c1:34:f4:9a:cc:7f:b7:1b:61:cf:c2:ff:89:
         01:23:30:5a:65:5e:ac:3d:7e:55:66:da:08:04:f5:3b:03:14:
         fe:9d:f5:96:8f:59:a5:66:81:77:51:7c:fa:58:c3:e1:cf:73:
         e0:c0:84:03:da:b7:c9:15:85:c7:a3:4d:d0:18:1a:22:99:aa:
         17:f1:39:fd:29:39:3f:ac:56:d8:2e:13:a9:da:70:e1:01:2c:
         33:75:c3:9f:af:d5:4c:3a:37:51:b8:fc:fa:96:e1:18:8e:41:
         a7:8a:3f:a3:25:d1:74:78:c1:5a:34:dc:63:84:22:fe:a4:d3:
         17:12:fd:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2q4Dh7HWSvCtu66EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ODJkNTg4YTEtYjYzYS00YWI1LThiMmMtM2JlZTFlNmFjOTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkooDrd7XoVDIo6ew+15rpXxDeO8aGJQVu9xJ
v/5SNbT5VSrZdxIjtCSTbToH3/di9XmowK7+9Ns6kjmcEFPFeDCzT0HFTjRTVoLx
/CTf6bO6HXaZrTXW+h19WKYJtK7zRiOr91c1SAOZMcO7Y1VOhP3Rcy/GgPeQU0Z8
MQ8S0Wfz9QBXeR4KY6uYltHewHRYZuwZYAIaNCRRA0Y9vItMYpMbktIoJrHjIe+d
erd9uZyDB8hbxMkwutYF922CnB/zd/RwaikvnG1Ebuj938KmSM1plwOY8UrbkZwO
KuF5CDHjHk36Y5ofbQif6lqFUEglJMGYBjWlfE9PooihfcoFJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG5O8278ZMeaaE5DnX6H9+hfEy0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjNjNmVkYzEtYTM5NS0z
Y2U3LTg1NDgtY2FhYzI2N2FmMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPyswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXRzIPaVYPS6DMzHo3SUgjCi0B4ut9bwTH3PNFlOL3jsfEnf9Mb/zdU+o
iPV0tDGwaCMJ+4jXRcH+W4bgUAaZtTPMylPTW9zzu9bkiuqMLsjShXeShA9Nq2dX
gOpGvBKl81yro8V7243dIvWnPLFGwYr/lZQFMK1ThVaKaUi0qQula7LBNPSazH+3
G2HPwv+JASMwWmVerD1+VWbaCAT1OwMU/p31lo9ZpWaBd1F8+ljD4c9z4MCEA9q3
yRWFx6NN0BgaIpmqF/E5/Sk5P6xW2C4Tqdpw4QEsM3XDn6/VTDo3Ubj8+pbhGI5B
p4o/oyXRdHjBWjTcY4Qi/qTTFxL9uA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:40 2026 by rpki-client