Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa
File:                     4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa (raw, json)
Hash identifier:          rDMn19Gp5uxRvT8eLaA/BR5CMgWLe9MYJO3AO0NeVrE=
Subject key identifier:   ED:8C:1E:8A:BF:27:20:D5:86:8D:BB:D2:50:7A:EE:FF:1A:CE:81:3C
Certificate issuer:       /CN=7363c75e-c9d4-47b4-9294-7a310c041945
Certificate serial:       010D0C9F4328584E22744A3F5D216A7465AEB600
Authority key identifier: 3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     20443
IP address blocks:        23.130.180.0/24 maxlen: 24
                          142.248.128.0/22 maxlen: 22
                          2602:f774::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4a:3f:5d:21:6a:74:65:ae:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7363c75e-c9d4-47b4-9294-7a310c041945
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=acc86889-0609-4573-8670-0068438686e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:f3:b2:17:43:05:6f:44:02:21:d4:61:d9:
                    b3:74:98:6d:84:40:f6:c6:de:b6:5e:a9:58:91:6c:
                    da:24:64:3b:21:46:27:3d:79:39:22:8f:d3:ef:c7:
                    ec:55:27:dd:58:5f:89:65:ef:11:cd:54:dd:36:50:
                    92:41:79:a8:2c:02:f7:fe:e5:1a:d7:4d:df:c3:2f:
                    8a:2c:62:3e:77:8a:00:c9:7f:24:20:6b:7f:dd:45:
                    3e:7c:7f:2d:75:4a:8e:b1:2d:ae:72:f0:7c:76:31:
                    23:f7:70:e5:e2:8c:dd:ab:e5:bf:6c:d2:34:0a:42:
                    b4:de:d6:b7:27:63:f3:de:f2:43:aa:bf:6f:29:a3:
                    e0:96:a1:fe:8a:35:18:aa:43:ff:ec:4b:a6:da:c8:
                    cc:8d:88:a3:cc:cd:62:11:4f:2b:d5:92:38:46:3f:
                    c8:77:40:e3:10:96:41:e5:dc:7d:ce:d5:cf:52:df:
                    ef:6d:b5:f5:ed:d9:37:76:35:f0:3a:4c:f5:d1:d6:
                    13:67:4a:b6:e7:83:22:a2:65:30:6f:f8:d1:d6:ea:
                    95:9c:e0:a1:fb:37:f7:e8:e1:5f:c7:65:07:ff:03:
                    d9:32:ca:c0:8f:a5:4c:80:8f:a7:6e:fc:2b:dd:74:
                    ab:e9:22:e3:d2:c9:9a:49:ef:bd:54:bd:9c:11:6a:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:1E:8A:BF:27:20:D5:86:8D:BB:D2:50:7A:EE:FF:1A:CE:81:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.180.0/24
                  142.248.128.0/22
                IPv6:
                  2602:f774::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:06:49:9e:32:9e:a5:29:db:40:31:0e:25:ba:fa:7f:0c:0b:
         05:31:6e:11:35:4a:e5:13:bf:62:f9:7a:3d:0d:36:13:64:9d:
         6d:3d:94:64:ce:9c:4c:17:4b:3f:77:10:9b:5c:e2:53:83:d1:
         23:99:ea:67:d9:74:56:1f:7d:b3:68:93:d9:d5:d9:a8:fe:00:
         bb:39:b3:f6:35:10:c2:a0:9d:85:8e:58:9e:9e:2b:1f:61:e6:
         28:f9:fd:d6:e2:ea:74:55:48:90:1f:b3:bf:18:ce:70:6f:ef:
         d4:39:62:48:20:80:1b:67:f7:fb:f2:8c:7f:4c:8b:d6:10:07:
         61:3e:39:50:ba:ba:4f:21:fe:8d:d6:ad:dc:43:36:67:2e:41:
         87:57:6e:e3:2d:f6:bc:a8:f0:94:c6:19:84:58:f0:76:46:c8:
         6e:68:6a:79:bb:c5:58:8d:ea:9f:0a:b3:e6:92:31:39:f4:93:
         a2:44:ab:e5:a6:60:c6:41:c5:5d:94:d7:cb:89:63:d4:65:d7:
         3e:b8:97:58:46:d2:21:5f:52:f7:e8:e6:60:69:9d:81:87:9e:
         58:57:cf:7c:dd:5b:7f:09:e7:81:85:6a:1a:e9:c2:25:34:d9:
         50:76:0b:c3:c2:de:c7:be:e7:66:46:21:59:be:26:4e:b2:de:
         15:89:58:cc
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE4idEo/XSFqdGWutgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzM2M2M3NWUtYzlkNC00N2I0LTkyOTQtN2EzMTBjMDQx
OTQ1MB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YWNjODY4ODktMDYwOS00NTczLTg2NzAtMDA2ODQzODY4NmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP7zshdDBW9EAiHUYdmzdJhthED2xt62XqlY
kWzaJGQ7IUYnPXk5Io/T78fsVSfdWF+JZe8RzVTdNlCSQXmoLAL3/uUa103fwy+K
LGI+d4oAyX8kIGt/3UU+fH8tdUqOsS2ucvB8djEj93Dl4ozdq+W/bNI0CkK03ta3
J2Pz3vJDqr9vKaPglqH+ijUYqkP/7Eum2sjMjYijzM1iEU8r1ZI4Rj/Id0DjEJZB
5dx9ztXPUt/vbbX17dk3djXwOkz10dYTZ0q254MiomUwb/jR1uqVnOCh+zf36OFf
x2UH/wPZMsrAj6VMgI+nbvwr3XSr6SLj0smaSe+9VL2cEWoaSQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFO2MHoq/JyDVho270lB67v8azoE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83MzYz
Yzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMwNDE5NDUvNGM3ZmQ4YjMtMTRiOC0z
MmI0LWEyN2UtODA1YzE4NTYxYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzM2M2M3NWUtYzlkNC00N2I0LTky
OTQtN2EzMTBjMDQxOTQ1LzczNjNjNzVlLWM5ZDQtNDdiNC05Mjk0LTdhMzEwYzA0
MTk0NS5jcmwwHwYDVR0jBBgwFoAUPxIMudlacZlciEY5bDSL2/UmS4swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMx
MGMwNDE5NDUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4K0AwQC
jviAMA4EAgACMAgDBgAmAvd0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkBkmeMp6lKdtAMQ4luvp/DAsF
MW4RNUrlE79i+Xo9DTYTZJ1tPZRkzpxMF0s/dxCbXOJTg9Ejmepn2XRWH32zaJPZ
1dmo/gC7ObP2NRDCoJ2FjlienisfYeYo+f3W4up0VUiQH7O/GM5wb+/UOWJIIIAb
Z/f78ox/TIvWEAdhPjlQurpPIf6N1q3cQzZnLkGHV27jLfa8qPCUxhmEWPB2Rshu
aGp5u8VYjeqfCrPmkjE59JOiRKvlpmDGQcVdlNfLiWPUZdc+uJdYRtIhX1L36OZg
aZ2Bh55YV8983Vt/CeeBhWoa6cIlNNlQdgvDwt7HvudmRiFZviZOst4ViVjM
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:19:49 2026 by rpki-client