Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File:                     603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier:          xr2dHg1dYwZBABOTS3MKExJjg1VIadxL4ghHSxl8mGM=
Subject key identifier:   7E:7E:0B:DE:E6:8F:5E:E7:3C:87:0B:C2:24:B6:93:3C:95:FA:2E:A4
Certificate issuer:       /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial:       010D0C9F4328584E1A144448A4C1977D8CDF0B00
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     20055
IP address blocks:        23.131.120.0/24 maxlen: 24
                          2606:acc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:44:48:a4:c1:97:7d:8c:df:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=b8d47f6b-970a-40cd-aff1-3b25545e66ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:9e:58:af:d2:c7:d6:fe:0c:7c:6d:96:fe:
                    ca:ea:7b:2b:e9:0f:d9:2e:c3:74:32:cd:97:9f:64:
                    64:a6:1b:9c:2b:cd:4d:6e:ac:7a:10:56:a8:b6:bd:
                    cc:b4:71:fa:6a:4e:54:ac:09:84:21:75:0f:4b:13:
                    31:0d:29:56:54:45:ec:58:d2:9b:36:25:94:bc:cd:
                    92:82:11:4c:0e:72:97:ce:d2:76:5e:59:d7:35:13:
                    9c:2f:8a:95:c6:11:0b:f5:4d:6d:55:8f:e3:e4:67:
                    b9:9b:c0:4b:10:7c:d9:33:06:0c:e9:80:cf:93:12:
                    3e:58:ea:31:58:51:95:56:44:c1:96:d8:0c:31:7f:
                    dc:e3:be:0a:5c:33:cb:4e:db:e6:07:85:d2:6d:6e:
                    0d:6b:30:1d:5b:0e:dc:e2:6b:0e:06:47:e3:59:90:
                    d4:47:50:d3:1e:45:35:c9:32:41:22:21:ed:a1:89:
                    f3:53:ef:13:9d:0c:f4:2e:79:89:16:c2:81:64:6d:
                    51:f3:d4:2e:59:75:51:30:a4:68:a9:5a:29:a4:98:
                    fa:32:b7:3c:cf:45:7b:85:2d:47:34:99:fa:27:31:
                    ba:08:1b:56:4c:79:74:7f:2d:9e:92:79:24:be:7e:
                    a7:f6:df:eb:ba:10:05:15:92:55:84:de:7f:fd:67:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:0B:DE:E6:8F:5E:E7:3C:87:0B:C2:24:B6:93:3C:95:FA:2E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:cf:2c:8e:41:02:8e:08:d8:67:38:b9:01:0f:40:9e:a6:
         8d:21:69:13:4b:af:79:bf:01:b5:ef:ec:48:23:4e:55:b2:4f:
         8e:ef:dd:c0:62:45:b7:ef:5b:37:38:36:7e:6a:72:16:9c:82:
         d6:14:5d:67:3c:e6:f1:d4:b2:4e:6f:bf:4c:c1:e5:2a:46:19:
         ab:c6:2f:6a:df:7f:52:6c:bc:63:0b:cb:13:dd:f5:3c:f7:49:
         93:e6:d0:a9:25:18:61:ec:79:03:30:76:bc:bf:bd:0c:77:3a:
         77:2c:96:c6:e3:aa:ed:c6:0b:1b:6a:64:dc:2a:bb:8b:55:a0:
         23:e0:60:b6:f9:0a:8a:6e:00:28:3d:84:be:47:f3:7b:bb:01:
         2c:20:ce:db:20:26:6f:90:dd:8b:42:6c:f8:5b:5a:35:bb:31:
         ea:63:c9:18:02:a5:bd:03:42:cd:4b:42:04:14:c9:7f:e7:2b:
         fe:1c:3c:e5:5a:ad:70:33:fe:d2:13:65:f3:53:0b:8e:a2:a5:
         f9:20:5e:01:4c:fc:8e:04:59:fb:45:63:1f:a0:8a:57:0d:91:
         41:b1:a0:df:0b:e6:4c:55:6b:38:56:47:ca:b7:36:e2:13:b0:
         f6:12:48:f4:4e:de:bf:b0:37:ba:a4:e7:db:9e:82:35:c8:dc:
         78:16:5a:26
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE4aFERIpMGXfYzfCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE2NDc3MGUtMWY0OC00MjM5LTkyMWQtNzc1YjUxNTJm
YTJlMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
YjhkNDdmNmItOTcwYS00MGNkLWFmZjEtM2IyNTU0NWU2NmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3+eWK/Sx9b+DHxtlv7K6nsr6Q/ZLsN0Ms2X
n2RkphucK81Nbqx6EFaotr3MtHH6ak5UrAmEIXUPSxMxDSlWVEXsWNKbNiWUvM2S
ghFMDnKXztJ2XlnXNROcL4qVxhEL9U1tVY/j5Ge5m8BLEHzZMwYM6YDPkxI+WOox
WFGVVkTBltgMMX/c474KXDPLTtvmB4XSbW4NazAdWw7c4msOBkfjWZDUR1DTHkU1
yTJBIiHtoYnzU+8TnQz0LnmJFsKBZG1R89QuWXVRMKRoqVoppJj6Mrc8z0V7hS1H
NJn6JzG6CBtWTHl0fy2eknkkvn6n9t/ruhAFFZJVhN5//Wcp1QIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFH5+C97mj17nPIcLwiS2kzyV+i6kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MTY0
NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1MmZhMmUvNjAzYWFjNzEtNmY0Zi0z
ZWJmLWJjNmQtNmFhMjQ5YzJmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDE2NDc3MGUtMWY0OC00MjM5LTky
MWQtNzc1YjUxNTJmYTJlLzQxNjQ3NzBlLTFmNDgtNDIzOS05MjFkLTc3NWI1MTUy
ZmEyZS5jcmwwHwYDVR0jBBgwFoAUg8uL64VN8heeNxr2999SBQR2tWowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzVi
NTE1MmZhMmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4N4MA0E
AgACMAcDBQAmBqzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAG3MzyyOQQKOCNhnOLkBD0Cepo0haRNLr3m/
AbXv7EgjTlWyT47v3cBiRbfvWzc4Nn5qchacgtYUXWc85vHUsk5vv0zB5SpGGavG
L2rff1JsvGMLyxPd9Tz3SZPm0KklGGHseQMwdry/vQx3Oncslsbjqu3GCxtqZNwq
u4tVoCPgYLb5CopuACg9hL5H83u7ASwgztsgJm+Q3YtCbPhbWjW7MepjyRgCpb0D
Qs1LQgQUyX/nK/4cPOVarXAz/tITZfNTC46ipfkgXgFM/I4EWftFYx+gilcNkUGx
oN8L5kxVazhWR8q3NuITsPYSSPRO3r+wN7qk59uegjXI3HgWWiY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:26 2026 by rpki-client