Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
File:                     30f2300f-beff-367a-a51c-b65be158cc40.roa (raw, json)
Hash identifier:          vXUKgFcr9gBK8XaERl1b1rhvnZU2AxZxuQXjAXvZMTM=
Subject key identifier:   76:90:6D:7B:48:D1:14:F8:02:00:E6:6E:53:75:5C:57:1B:A2:29:06
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F4328584E059B5A2BD1A8F3148CBFBC00
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     53698
IP address blocks:        23.137.120.0/22 maxlen: 24
                          23.137.124.0/23 maxlen: 24
                          23.152.192.0/24 maxlen: 24
                          23.152.193.0/24 maxlen: 24
                          23.152.194.0/24 maxlen: 24
                          64.234.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:5a:2b:d1:a8:f3:14:8c:bf:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ba2d1aba-fc0b-42eb-ab1a-ee4cf657a337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:23:8a:4f:53:20:9a:b9:63:8b:c7:bf:e2:
                    0e:7d:7b:01:c6:37:e7:12:fc:27:10:ee:45:10:4b:
                    ad:77:45:92:e0:9d:c6:8a:53:39:bf:65:d3:e4:37:
                    60:fd:33:94:7a:f7:b6:ad:63:3b:e0:37:44:a1:ae:
                    97:27:71:c5:46:d7:ef:22:3c:b7:62:b9:78:64:59:
                    e2:61:52:3b:c9:2b:62:f4:73:c1:e9:b4:5d:44:a6:
                    3f:ce:ef:9f:28:e3:8f:37:48:de:be:65:f5:be:a2:
                    77:1b:d6:41:85:78:da:04:aa:fa:26:ae:85:9c:5a:
                    2a:4a:5b:7e:be:14:fd:bc:5c:47:4d:62:d7:cd:84:
                    36:20:b8:aa:02:58:00:3e:11:36:5d:7f:01:39:bb:
                    86:54:39:bb:71:11:ad:b1:3c:f8:ff:cd:df:56:1b:
                    77:a2:1e:61:96:be:a9:c4:56:36:b1:6c:eb:e0:44:
                    44:b2:6c:1f:fd:cb:74:39:84:1d:1d:89:3c:85:37:
                    46:c2:78:6b:f0:a7:ef:72:d8:39:c5:f7:bc:64:1f:
                    50:05:7f:75:6e:46:bb:d0:65:bc:01:cc:58:f8:88:
                    2b:16:60:ce:70:d7:7f:15:1b:af:04:ed:73:33:2d:
                    e2:c4:bc:fc:5b:51:21:e1:b8:c9:10:f5:39:53:e3:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:6D:7B:48:D1:14:F8:02:00:E6:6E:53:75:5C:57:1B:A2:29:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/30f2300f-beff-367a-a51c-b65be158cc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.120.0-23.137.125.255
                  23.152.192.0-23.152.194.255
                  64.234.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:0b:38:bc:43:73:09:ee:5e:43:5b:28:6e:2b:b1:3d:64:
         9f:5d:7a:98:66:c7:a2:7f:28:c6:fe:18:3e:e0:59:34:91:04:
         10:75:e8:5a:cb:ee:16:38:99:10:e2:21:df:80:bf:9a:56:7d:
         5e:73:af:2a:71:ec:dc:3a:da:b5:96:e9:a9:6b:da:ca:58:ff:
         da:fa:e0:30:f0:98:43:58:25:73:e0:27:51:6b:b0:e2:09:42:
         74:fd:1e:25:1a:2d:b9:43:e7:3b:31:db:ad:19:28:78:b8:2c:
         e4:cb:cd:84:93:c3:29:47:82:d8:6d:16:a6:c4:4f:e6:4d:a8:
         ec:7e:13:78:fb:ed:5c:d8:72:0e:42:ff:fc:8c:9d:62:90:5f:
         31:73:9e:bf:2c:d6:44:5e:76:be:5f:d3:20:6c:97:72:bc:34:
         34:2a:51:60:73:49:a2:e4:a2:74:ee:d8:f4:3d:68:38:3f:6b:
         8f:b7:e4:8a:0a:0f:51:b5:7a:13:69:01:00:44:9b:54:cf:9c:
         9c:bf:1e:9b:8b:f1:cb:f0:18:b1:c9:ff:1f:5a:d4:61:21:13:
         e7:ce:de:20:07:cc:b7:f1:2c:9d:1a:75:ac:47:12:d8:28:bc:
         5e:a7:38:83:6c:90:5f:3d:e8:85:58:d0:fd:56:7a:65:67:71:
         c6:df:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:48 2026 by rpki-client