Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File:                     97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier:          J3zPmVLSmekIjJl4W64lllEye3lVC6a05kmj47TIvng=
Subject key identifier:   B3:A7:CA:49:7F:E2:9A:70:84:84:AB:B5:DC:F1:94:4A:AF:30:73:54
Certificate issuer:       /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial:       010D0C9F4328584DD8F06517CF57DE93BC510DC0
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     62516
IP address blocks:        23.140.104.0/24 maxlen: 32
                          2604:4940::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:65:17:cf:57:de:93:bc:51:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=cf329aff-6a4d-4fa5-bf32-380b94fca3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1b:1b:7c:58:20:d7:1d:51:30:9f:09:ec:f5:
                    69:ef:52:c4:0b:b3:3a:ec:57:e6:ff:d2:ce:f7:28:
                    f0:87:35:5a:c4:6a:53:63:ee:f8:69:c5:ca:8c:ae:
                    c2:dc:41:b2:25:3e:be:e5:63:82:61:26:2e:ce:e3:
                    a5:01:17:0b:a6:6d:16:71:a5:a0:b5:38:a8:7b:c6:
                    95:54:eb:c2:2f:92:e3:0e:04:97:19:40:a8:fc:79:
                    86:1c:82:71:51:16:fc:20:1b:56:f0:e9:97:e1:fd:
                    7b:ae:8c:2e:07:80:79:5f:1f:5c:8c:35:34:c1:59:
                    c1:70:68:1c:59:25:ef:87:48:49:0d:cc:c8:de:5e:
                    26:7f:ce:cf:f7:13:a8:36:d5:df:a3:83:80:f9:d3:
                    52:20:b4:ba:00:a7:b0:83:3d:89:43:52:dc:8d:88:
                    83:ad:f2:ef:66:22:11:85:75:01:51:0b:1d:af:c7:
                    bd:32:c9:b8:a6:eb:79:fd:1e:d4:57:e8:ba:07:ac:
                    42:10:c4:b9:c6:25:d4:4a:74:1c:f0:81:ba:6b:15:
                    b7:0d:25:cf:48:e0:f7:68:c6:24:b2:e6:9a:5f:2e:
                    6e:4c:10:27:3b:ee:bb:91:ff:f3:53:31:6c:ed:e4:
                    4e:4f:e6:e9:46:a9:c6:c4:86:d2:05:51:cd:41:b6:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:CA:49:7F:E2:9A:70:84:84:AB:B5:DC:F1:94:4A:AF:30:73:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.104.0/24
                IPv6:
                  2604:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:ff:e0:e9:b3:b7:51:b1:b3:ca:a5:6f:75:67:4e:4e:5b:
         8f:ae:eb:2e:80:af:18:e0:82:77:21:0b:b6:93:ae:84:26:e6:
         b4:2a:73:00:c8:fc:27:ff:93:ea:20:6a:74:3b:70:cb:db:16:
         90:da:3c:6e:60:be:cb:c7:bc:38:22:f6:e0:0b:d0:c0:bd:dc:
         82:66:e0:b9:d3:3e:0d:53:3c:ea:5e:ef:7a:23:55:a9:7b:38:
         18:c7:3e:81:68:5c:24:90:95:bf:1c:c9:22:db:41:57:50:95:
         c5:06:30:a2:fb:5b:7e:66:3b:5b:e5:0d:8f:a3:ba:57:f9:ab:
         39:22:69:2d:89:dc:58:42:39:64:fa:0a:5e:5a:91:77:78:d6:
         8d:e8:b0:c9:d8:c9:5c:91:b5:91:e2:53:af:07:d6:d1:a2:03:
         27:e4:e3:1e:02:f2:54:26:ba:86:64:5a:8f:db:1b:2c:67:ef:
         c6:11:21:8f:fe:61:cb:79:e4:75:bb:8c:71:56:ca:37:c5:82:
         cd:b7:78:8f:d2:39:75:0b:fe:8b:93:2c:e3:44:81:13:ab:f4:
         ad:58:d2:04:be:ac:0f:69:4f:1f:f8:0f:53:42:32:92:3e:fd:
         8a:96:5e:40:f8:7b:ce:82:50:40:e5:99:a5:a3:fe:6c:08:d2:
         5f:22:09:0b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE3Y8GUXz1fek7xRDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4
ZmEyMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
Y2YzMjlhZmYtNmE0ZC00ZmE1LWJmMzItMzgwYjk0ZmNhM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxsbfFgg1x1RMJ8J7PVp71LEC7M67Ffm/9LO
9yjwhzVaxGpTY+74acXKjK7C3EGyJT6+5WOCYSYuzuOlARcLpm0WcaWgtTioe8aV
VOvCL5LjDgSXGUCo/HmGHIJxURb8IBtW8OmX4f17rowuB4B5Xx9cjDU0wVnBcGgc
WSXvh0hJDczI3l4mf87P9xOoNtXfo4OA+dNSILS6AKewgz2JQ1LcjYiDrfLvZiIR
hXUBUQsdr8e9Msm4put5/R7UV+i6B6xCEMS5xiXUSnQc8IG6axW3DSXPSOD3aMYk
suaaXy5uTBAnO+67kf/zUzFs7eROT+bpRqnGxIbSBVHNQbZxXwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLOnykl/4ppwhISrtdzxlEqvMHNUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1
ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z
MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl
MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5
OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw
YWJkOThmYTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4xoMA0E
AgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHTd/+Dps7dRsbPKpW91Z05OW4+u6y6Arxjg
gnchC7aTroQm5rQqcwDI/Cf/k+oganQ7cMvbFpDaPG5gvsvHvDgi9uAL0MC93IJm
4LnTPg1TPOpe73ojVal7OBjHPoFoXCSQlb8cySLbQVdQlcUGMKL7W35mO1vlDY+j
ulf5qzkiaS2J3FhCOWT6Cl5akXd41o3osMnYyVyRtZHiU68H1tGiAyfk4x4C8lQm
uoZkWo/bGyxn78YRIY/+Yct55HW7jHFWyjfFgs23eI/SOXUL/ouTLONEgROr9K1Y
0gS+rA9pTx/4D1NCMpI+/YqWXkD4e86CUEDlmaWj/mwI0l8iCQs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:42 2026 by rpki-client