Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa
File:                     356e9326-e69c-3c5b-9030-c62d6acfbed1.roa (raw, json)
Hash identifier:          ySu8iebA8Jx28CMEuE9e0H75l16TZQun6uqxUvnfbeE=
Subject key identifier:   53:2D:CF:A7:E3:1A:46:DF:19:8D:0F:F6:2C:0A:93:E6:4E:0D:6F:36
Certificate issuer:       /CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
Certificate serial:       010D0C9F4328584D9A2031EF3161170197CE2E00
Authority key identifier: 8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     399599
IP address blocks:        23.182.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:31:ef:31:61:17:01:97:ce:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5a521b67-73c5-4980-b9c2-224d1b2ca6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:28:11:d2:2a:5f:a3:f0:a9:41:bd:b3:c6:17:
                    66:d3:9c:49:cb:c9:df:0b:51:16:d2:a3:29:8c:a7:
                    74:1b:6e:1b:ec:1c:bb:5c:73:d7:4e:cd:0f:db:33:
                    6e:89:9a:51:e9:8b:e1:1d:09:92:d4:70:48:5c:80:
                    0d:42:07:83:8b:b8:59:ce:ea:f2:3a:14:89:42:b3:
                    45:73:d3:6d:6f:ac:e1:ca:32:04:42:01:ff:0c:b0:
                    e9:2b:9b:98:53:62:f2:1b:16:63:62:f6:39:86:1a:
                    fb:b7:be:a2:ea:14:e3:52:b1:69:cb:6f:86:d2:17:
                    77:ee:38:8d:5c:f7:d6:27:07:6a:e8:64:78:3e:08:
                    5e:64:22:78:11:0d:d0:05:30:d6:24:86:da:17:79:
                    ad:cf:f9:6c:fc:65:f3:36:cc:bf:a8:7b:15:4e:5b:
                    3e:49:eb:9f:d6:18:62:a7:4d:a3:c7:0b:86:f8:d8:
                    9a:7e:a8:24:75:08:2a:70:5b:d6:f6:45:76:49:04:
                    12:c9:b8:04:95:ea:26:00:cd:f5:a7:5a:d3:97:76:
                    b2:36:fb:d4:d3:d4:91:e1:a3:3f:ba:3f:e3:d0:9c:
                    b0:76:17:1f:90:23:f1:bc:c3:91:5f:43:e5:f8:b0:
                    5b:2d:22:af:57:ac:87:0f:48:d9:d5:f3:c0:28:ed:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:CF:A7:E3:1A:46:DF:19:8D:0F:F6:2C:0A:93:E6:4E:0D:6F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/356e9326-e69c-3c5b-9030-c62d6acfbed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:ef:1b:00:2f:7c:ba:fd:14:2f:87:d1:06:07:03:9f:62:
         ba:79:91:a8:be:86:fd:6d:fe:0f:e8:ec:71:bc:7d:79:84:fa:
         9e:b2:b6:49:7e:ab:26:e4:2e:41:d5:53:4e:d1:96:cd:86:a8:
         1b:bc:92:5d:68:75:1e:9b:7c:85:08:fe:fc:6b:98:0e:69:9e:
         87:3f:86:9d:c6:cb:fd:fb:ba:70:f2:fd:f3:7e:4c:98:b4:9f:
         ed:f7:54:2c:00:47:b3:0f:5b:96:21:d2:6f:55:62:da:f4:2b:
         2c:82:03:3a:43:aa:41:5a:9e:f7:6b:23:aa:04:45:3e:0c:00:
         85:41:20:8f:ec:3e:f9:57:46:64:66:2b:b4:f9:cc:da:66:e6:
         c3:a7:bb:d8:83:e9:f1:6b:51:b2:7c:78:47:b1:b9:d6:ec:c1:
         23:52:83:0c:0d:c9:2b:70:cd:25:2a:df:eb:77:d9:ec:81:7f:
         ce:8f:42:57:30:ca:5d:71:3a:88:fe:3f:16:82:0e:34:1b:38:
         21:2b:1f:d9:b4:fb:13:2e:2a:37:fe:0c:7e:1d:ab:7c:97:43:
         ee:2a:02:c0:f8:e1:81:e0:a1:5b:0e:83:61:0b:80:ca:58:5c:
         86:ab:69:94:c8:30:a6:bd:d5:f4:85:ba:ce:d3:f9:26:72:5f:
         7a:d7:f6:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDHvMWEXAZfOLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU5ZDkzZTctNWM3ZS00MjRlLTk2MGYtMmVkZjE1ZmE1
ZGIwMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NWE1MjFiNjctNzNjNS00OTgwLWI5YzItMjI0ZDFiMmNhNmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SgR0ipfo/CpQb2zxhdm05xJy8nfC1EW0qMp
jKd0G24b7By7XHPXTs0P2zNuiZpR6YvhHQmS1HBIXIANQgeDi7hZzuryOhSJQrNF
c9Ntb6zhyjIEQgH/DLDpK5uYU2LyGxZjYvY5hhr7t76i6hTjUrFpy2+G0hd37jiN
XPfWJwdq6GR4PgheZCJ4EQ3QBTDWJIbaF3mtz/ls/GXzNsy/qHsVTls+Seuf1hhi
p02jxwuG+NiafqgkdQgqcFvW9kV2SQQSybgEleomAM31p1rTl3ayNvvU09SR4aM/
uj/j0JywdhcfkCPxvMORX0Pl+LBbLSKvV6yHD0jZ1fPAKO1x3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMtz6fjGkbfGY0P9iwKk+ZODW82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlk
OTNlNy01YzdlLTQyNGUtOTYwZi0yZWRmMTVmYTVkYjAvMzU2ZTkzMjYtZTY5Yy0z
YzViLTkwMzAtYzYyZDZhY2ZiZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDU5ZDkzZTctNWM3ZS00MjRlLTk2
MGYtMmVkZjE1ZmE1ZGIwL2Q1OWQ5M2U3LTVjN2UtNDI0ZS05NjBmLTJlZGYxNWZh
NWRiMC5jcmwwHwYDVR0jBBgwFoAUi0v/sxuEBmO2+EbkmFQEtqP1G8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlkOTNlNy01YzdlLTQyNGUtOTYwZi0yZWRm
MTVmYTVkYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7aQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLl7xsAL3y6/RQvh9EGBwOfYrp5kai+hv1t/g/o7HG8fXmE+p6ytkl+
qybkLkHVU07Rls2GqBu8kl1odR6bfIUI/vxrmA5pnoc/hp3Gy/37unDy/fN+TJi0
n+33VCwAR7MPW5Yh0m9VYtr0KyyCAzpDqkFanvdrI6oERT4MAIVBII/sPvlXRmRm
K7T5zNpm5sOnu9iD6fFrUbJ8eEexudbswSNSgwwNyStwzSUq3+t32eyBf86PQlcw
yl1xOoj+PxaCDjQbOCErH9m0+xMuKjf+DH4dq3yXQ+4qAsD44YHgoVsOg2ELgMpY
XIaraZTIMKa91fSFus7T+SZyX3rX9lY=
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:59 2026 by rpki-client