Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/fac91ecf-0b85-38ff-8033-f5754466c884.roa
File:                     fac91ecf-0b85-38ff-8033-f5754466c884.roa (raw, json)
Hash identifier:          GpQfFbpkqvTMqqYjHF7cs9RD/o1fNsIkrj9XJOG0zBo=
Subject key identifier:   61:AC:E6:03:5A:2B:5D:6B:FC:75:45:40:96:6A:92:96:8A:01:AE:C5
Certificate issuer:       /CN=30fb5362-ced8-4e1b-93c6-3ce7a2019666
Certificate serial:       010D0C9F4328584F1897C1A527C1492F50283090
Authority key identifier: 54:78:83:B4:D0:E8:07:DB:C4:45:BD:F6:C1:93:DD:78:3E:61:AF:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/fac91ecf-0b85-38ff-8033-f5754466c884.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     32205
IP address blocks:        23.146.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:c1:a5:27:c1:49:2f:50:28:30:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30fb5362-ced8-4e1b-93c6-3ce7a2019666
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=69e4941e-70eb-41e4-bcb7-49ebe32a2e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:9e:82:2a:da:b8:31:8d:75:de:0f:5a:f9:
                    2c:fa:49:d9:c1:df:ad:60:28:78:d1:2f:0c:22:d7:
                    20:de:92:30:9c:e0:e2:89:92:0f:56:7c:18:63:b5:
                    b1:25:81:e5:49:87:ba:1c:cf:c6:d7:f2:06:cc:13:
                    e2:97:93:da:88:d6:a1:80:85:04:ce:58:30:ff:20:
                    8b:4c:96:a6:19:ae:ab:21:f2:32:16:81:32:44:72:
                    00:ca:fd:30:c5:59:ef:80:0c:12:0d:97:e3:49:18:
                    ac:14:30:98:9e:eb:2d:2b:0e:a0:f4:80:ce:75:0c:
                    12:f5:4d:d5:e2:f5:c1:80:b1:78:c9:e7:83:81:af:
                    d7:ee:4c:07:c6:52:16:9b:15:84:d9:eb:a8:69:b2:
                    af:e8:8c:ad:db:73:3d:40:5b:53:8a:fb:1c:3c:f4:
                    75:1d:c6:9d:7a:01:82:d6:3a:e9:2a:97:9b:5c:f7:
                    e5:46:a6:1a:db:82:7e:a4:03:4c:20:7e:c2:fe:26:
                    dd:b6:6d:7c:87:6d:51:aa:0e:71:ff:cd:ba:64:ed:
                    b4:73:35:df:45:31:3f:93:71:aa:c8:bf:75:30:1a:
                    04:26:c3:c8:3b:7e:57:2c:e1:35:55:bb:af:3f:b8:
                    d4:84:ce:ae:e3:95:2c:ae:4a:a1:59:ac:ec:ca:49:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:E6:03:5A:2B:5D:6B:FC:75:45:40:96:6A:92:96:8A:01:AE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/fac91ecf-0b85-38ff-8033-f5754466c884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.crl

            X509v3 Authority Key Identifier:
                keyid:54:78:83:B4:D0:E8:07:DB:C4:45:BD:F6:C1:93:DD:78:3E:61:AF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e0:ca:1f:15:59:7c:27:92:44:8a:54:fc:a3:01:f7:9a:78:
         5a:7f:d8:f5:c3:34:9f:50:48:b3:7c:c2:c0:fd:43:df:69:51:
         b5:b3:2f:ea:a9:c5:12:fe:89:bc:28:bc:3c:8f:d4:36:34:97:
         e6:3a:41:a4:f5:f3:f4:db:9c:84:37:d1:e9:8d:2c:c4:67:d7:
         e0:22:18:7d:70:fa:ca:1c:e4:0b:90:0e:fe:d4:a7:c7:47:ae:
         21:0e:de:eb:8b:02:95:8e:13:ca:4d:9a:6d:01:45:44:ea:7c:
         36:3d:54:41:ad:74:ea:4f:73:98:1c:27:38:e7:dd:80:fc:fc:
         80:c0:5c:e4:25:af:64:72:ac:48:06:a6:09:bc:0b:b8:7a:2b:
         4a:32:3d:11:ce:ae:e4:ad:3d:45:d1:d9:b7:52:31:6c:bf:23:
         40:6c:40:37:89:e8:0e:a9:ed:78:bd:d1:6a:db:03:f1:30:b7:
         40:cd:d8:e3:20:3f:e2:9f:2e:ea:a9:2d:c6:91:74:91:5e:81:
         ae:78:95:62:52:6e:95:6c:b2:39:28:22:da:35:73:ac:11:b7:
         f9:01:5a:8c:3b:7d:ef:d4:0f:01:99:fc:20:d5:11:cd:fe:3b:
         cd:72:7b:c1:66:1f:cd:08:ff:24:a2:2c:23:1d:83:aa:88:12:
         18:30:bf:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8GlJ8FJL1AoMJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBmYjUzNjItY2VkOC00ZTFiLTkzYzYtM2NlN2EyMDE5
NjY2MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NjllNDk0MWUtNzBlYi00MWU0LWJjYjctNDllYmUzMmEyZTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycKegirauDGNdd4PWvks+knZwd+tYCh40S8M
Itcg3pIwnODiiZIPVnwYY7WxJYHlSYe6HM/G1/IGzBPil5PaiNahgIUEzlgw/yCL
TJamGa6rIfIyFoEyRHIAyv0wxVnvgAwSDZfjSRisFDCYnustKw6g9IDOdQwS9U3V
4vXBgLF4yeeDga/X7kwHxlIWmxWE2euoabKv6Iyt23M9QFtTivscPPR1HcadegGC
1jrpKpebXPflRqYa24J+pANMIH7C/ibdtm18h21Rqg5x/826ZO20czXfRTE/k3Gq
yL91MBoEJsPIO35XLOE1VbuvP7jUhM6u45UsrkqhWazsykmJBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGs5gNaK11r/HVFQJZqkpaKAa7FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMGZi
NTM2Mi1jZWQ4LTRlMWItOTNjNi0zY2U3YTIwMTk2NjYvZmFjOTFlY2YtMGI4NS0z
OGZmLTgwMzMtZjU3NTQ0NjZjODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzBmYjUzNjItY2VkOC00ZTFiLTkz
YzYtM2NlN2EyMDE5NjY2LzMwZmI1MzYyLWNlZDgtNGUxYi05M2M2LTNjZTdhMjAx
OTY2Ni5jcmwwHwYDVR0jBBgwFoAUVHiDtNDoB9vERb32wZPdeD5hr1YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zMGZiNTM2Mi1jZWQ4LTRlMWItOTNjNi0zY2U3
YTIwMTk2NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5K8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHgyh8VWXwnkkSKVPyjAfeaeFp/2PXDNJ9QSLN8wsD9Q99pUbWzL+qp
xRL+ibwovDyP1DY0l+Y6QaT18/TbnIQ30emNLMRn1+AiGH1w+soc5AuQDv7Up8dH
riEO3uuLApWOE8pNmm0BRUTqfDY9VEGtdOpPc5gcJzjn3YD8/IDAXOQlr2RyrEgG
pgm8C7h6K0oyPRHOruStPUXR2bdSMWy/I0BsQDeJ6A6p7Xi90WrbA/Ewt0DN2OMg
P+KfLuqpLcaRdJFega54lWJSbpVssjkoIto1c6wRt/kBWow7fe/UDwGZ/CDVEc3+
O81ye8FmH80I/ySiLCMdg6qIEhgwv3Q=
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:50 2026 by rpki-client