Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa
File:                     c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa (raw, json)
Hash identifier:          5tzhS8B1qFC44xSV4d3O1IE5oGXQ75at8CcHa4oNv3k=
Subject key identifier:   D2:43:D3:34:59:9A:40:C5:21:F8:53:44:88:56:18:54:C2:11:53:06
Certificate issuer:       /CN=058ef11e-32ea-4ce9-8998-b435c442a300
Certificate serial:       010D0C9F4328584E131986AFCD7909820818D300
Authority key identifier: 1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     23013
IP address blocks:        23.128.20.0/24 maxlen: 24
                          23.128.20.88/32 maxlen: 32
                          23.128.20.100/32 maxlen: 32
                          23.128.20.200/32 maxlen: 32
                          216.180.120.0/22 maxlen: 24
                          216.180.120.88/32 maxlen: 32
                          216.180.120.100/32 maxlen: 32
                          216.180.120.110/32 maxlen: 32
                          216.180.120.120/32 maxlen: 32
                          216.180.120.200/32 maxlen: 32
                          216.180.120.210/32 maxlen: 32
                          216.180.120.220/32 maxlen: 32
                          216.180.121.88/32 maxlen: 32
                          216.180.122.88/32 maxlen: 32
                          216.180.123.88/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:86:af:cd:79:09:82:08:18:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ef11e-32ea-4ce9-8998-b435c442a300
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=23329483-e731-4b11-a9a1-6a8526db321a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:39:84:9f:38:3b:e1:80:a9:9b:dc:b3:f8:
                    86:73:a1:fe:31:e7:1b:df:78:26:c1:a5:8c:5a:16:
                    2c:13:a1:e1:df:99:cd:d5:ec:3b:71:4b:18:ec:b6:
                    e6:44:2e:96:24:c7:b0:6a:d9:0e:f8:36:0e:ab:b8:
                    c7:41:08:30:f3:7d:3f:d0:dd:86:7a:ef:c5:2f:f7:
                    8d:ef:43:40:49:01:87:b8:bf:b0:a4:38:d5:0b:59:
                    ee:fb:df:02:fc:46:88:86:ba:60:9f:cd:2d:a9:86:
                    48:c7:bd:0b:e7:4a:43:56:8d:bc:8c:8f:9b:75:a6:
                    ae:52:77:73:78:9c:f9:9d:3f:89:91:31:d4:ed:e6:
                    3a:9b:da:cd:2a:b3:98:4a:32:de:27:e7:2a:7f:98:
                    b4:20:67:a6:b2:37:c4:8d:30:49:fa:c6:cc:f8:87:
                    15:e7:35:94:31:16:f0:58:2b:d4:ca:78:d7:7c:37:
                    77:ea:e5:c5:08:af:ce:77:92:27:cd:33:94:65:44:
                    c6:d8:6a:05:9e:41:b2:f1:a6:b9:1b:2b:8e:28:7c:
                    92:fa:e3:dc:83:25:09:10:3f:b2:f1:03:98:5b:b4:
                    81:6f:77:d5:3a:31:f4:8a:69:eb:c3:3b:8a:f3:ac:
                    05:6b:6e:73:30:b6:2d:62:cd:8f:b0:7c:f5:21:d5:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:43:D3:34:59:9A:40:C5:21:F8:53:44:88:56:18:54:C2:11:53:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl

            X509v3 Authority Key Identifier:
                keyid:1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.20.0/24
                  216.180.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:dc:ae:4e:be:21:23:12:b9:d1:89:78:89:9d:a1:8c:7d:
         be:c9:d4:c5:e9:f3:c9:f3:fb:91:44:f2:48:46:d2:9a:a8:46:
         46:0e:f0:1a:cf:a8:f6:4e:2a:c1:6d:3c:1d:35:17:30:c0:28:
         00:ce:f7:19:ae:51:27:c4:c5:77:de:11:c5:c3:04:e1:82:37:
         88:f8:96:2a:d5:4d:9a:f6:d6:0f:6c:92:89:9e:59:9c:d3:8b:
         77:e3:6a:c7:c6:d3:96:71:98:49:88:08:a7:a2:1d:e5:b4:81:
         8f:43:a1:63:e2:58:dc:77:f4:c4:0f:28:df:08:c6:5a:b0:7b:
         88:df:8a:9a:15:32:7f:14:5e:02:66:7b:5a:1f:1c:b9:65:22:
         bb:cf:f8:8c:41:05:f2:f8:3a:4d:df:7a:74:c2:f6:dd:bd:6e:
         94:85:a6:a4:b8:05:8e:8a:4b:47:5f:34:25:e9:65:93:9b:c2:
         58:f2:67:b0:39:f1:b0:49:d6:71:db:42:d2:67:a7:a6:c7:34:
         c5:9e:7f:f8:01:1b:59:61:fe:c0:9a:df:c6:c6:b5:e8:cf:47:
         63:c5:44:5c:c3:45:ba:ff:d5:28:85:90:3e:b0:51:ea:67:08:
         68:53:1b:cc:8f:15:28:fe:28:49:7c:7c:53:c1:14:d8:d5:5a:
         72:15:13:e9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4TGYavzXkJgggY0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU4ZWYxMWUtMzJlYS00Y2U5LTg5OTgtYjQzNWM0NDJh
MzAwMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
MjMzMjk0ODMtZTczMS00YjExLWE5YTEtNmE4NTI2ZGIzMjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTE5hJ84O+GAqZvcs/iGc6H+Mecb33gmwaWM
WhYsE6Hh35nN1ew7cUsY7LbmRC6WJMewatkO+DYOq7jHQQgw830/0N2Geu/FL/eN
70NASQGHuL+wpDjVC1nu+98C/EaIhrpgn80tqYZIx70L50pDVo28jI+bdaauUndz
eJz5nT+JkTHU7eY6m9rNKrOYSjLeJ+cqf5i0IGemsjfEjTBJ+sbM+IcV5zWUMRbw
WCvUynjXfDd36uXFCK/Od5InzTOUZUTG2GoFnkGy8aa5GyuOKHyS+uPcgyUJED+y
8QOYW7SBb3fVOjH0imnrwzuK86wFa25zMLYtYs2PsHz1IdUHAQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNJD0zRZmkDFIfhTRIhWGFTCEVMGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNThl
ZjExZS0zMmVhLTRjZTktODk5OC1iNDM1YzQ0MmEzMDAvYzA2NjFhZDYtMjAzZC0z
NmY0LTg2MmEtMTAxMGY1YzFkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDU4ZWYxMWUtMzJlYS00Y2U5LTg5
OTgtYjQzNWM0NDJhMzAwLzA1OGVmMTFlLTMyZWEtNGNlOS04OTk4LWI0MzVjNDQy
YTMwMC5jcmwwHwYDVR0jBBgwFoAUGk8gGrgsIcOmTZ21uA8FILJO7NMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNThlZjExZS0zMmVhLTRjZTktODk5OC1iNDM1
YzQ0MmEzMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4AUAwQC
2LR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABLJ3K5OviEjErnRiXiJnaGMfb7J1MXp88nz+5FE8khG0pqo
RkYO8BrPqPZOKsFtPB01FzDAKADO9xmuUSfExXfeEcXDBOGCN4j4lirVTZr21g9s
komeWZzTi3fjasfG05ZxmEmICKeiHeW0gY9DoWPiWNx39MQPKN8Ixlqwe4jfipoV
Mn8UXgJme1ofHLllIrvP+IxBBfL4Ok3fenTC9t29bpSFpqS4BY6KS0dfNCXpZZOb
wljyZ7A58bBJ1nHbQtJnp6bHNMWef/gBG1lh/sCa38bGtejPR2PFRFzDRbr/1SiF
kD6wUepnCGhTG8yPFSj+KEl8fFPBFNjVWnIVE+k=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:22 2026 by rpki-client