Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa
File:                     a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa (raw, json)
Hash identifier:          6348t+1F4jlmpy/d0hvv0Xctp5PcrvOGDG1rzvQ7r3Q=
Subject key identifier:   A6:A8:71:1F:7D:EE:A0:81:87:3D:CE:39:2D:85:F0:7A:C3:5A:64:69
Certificate issuer:       /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial:       010D0C9F4328584DE150A975B78CEB214064CD00
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     393406
IP address blocks:        23.131.60.0/24 maxlen: 24
                          2602:f763::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a9:75:b7:8c:eb:21:40:64:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=c896fa8f-20f3-461c-b8a9-6d632ad72111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:4f:fd:58:5a:11:d9:df:4b:73:55:8f:d4:
                    1a:c5:bb:df:8c:1c:6f:45:ac:d5:cb:12:e1:4f:35:
                    50:82:42:ad:bc:cf:7a:82:85:9a:6e:1c:8c:1a:22:
                    20:04:2a:18:ad:6f:8f:9b:dd:a8:44:28:3b:36:b9:
                    48:f9:34:09:11:8a:cd:89:28:12:65:6c:0e:09:dc:
                    a5:7a:43:b7:53:46:3c:66:7d:fe:0b:4f:23:ef:bf:
                    87:5e:b8:0f:d0:42:99:53:fb:b4:f5:4f:46:72:0a:
                    65:c0:1f:a1:53:d8:52:97:1b:37:e1:b7:8d:6b:8d:
                    19:b7:16:db:6a:ff:57:93:bc:81:15:0d:c3:56:82:
                    68:08:2c:25:75:56:a7:ac:56:00:73:a7:68:78:a0:
                    19:9d:ae:80:2e:1e:f6:7b:0f:9e:68:7c:99:58:51:
                    d6:ee:7a:1b:94:26:40:6b:25:2c:48:50:2a:87:03:
                    12:16:0f:58:be:33:6e:01:ef:e6:51:19:d6:d2:e4:
                    87:fd:c7:8c:17:a1:60:5d:1b:2e:0f:24:1d:d5:ee:
                    70:70:24:ad:c0:ab:b7:23:f1:f6:58:f4:cf:85:ed:
                    59:5b:9a:76:2d:bf:1e:d3:8c:f5:b8:da:7b:98:1b:
                    bd:80:9b:cd:04:61:d3:3e:cf:dc:d4:fa:54:73:6d:
                    dc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:71:1F:7D:EE:A0:81:87:3D:CE:39:2D:85:F0:7A:C3:5A:64:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl

            X509v3 Authority Key Identifier:
                keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.60.0/24
                IPv6:
                  2602:f763::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:a1:6b:07:68:86:83:b5:e9:3a:5d:cb:13:b0:af:43:df:
         1a:d2:a5:f9:d8:af:b6:30:ae:e3:a6:4a:3e:a7:42:d9:84:73:
         c6:51:d3:f7:c2:28:b3:39:88:8c:07:af:9b:89:a3:38:e9:06:
         13:48:b4:9e:20:db:17:8c:42:c9:1f:00:8e:be:3f:d2:15:9f:
         bf:cd:1d:be:61:55:de:84:bb:c0:4f:57:bf:49:f0:9c:6e:88:
         de:d0:d0:3c:15:22:d4:58:d3:4c:ea:64:03:63:36:cc:45:88:
         d9:42:d3:2f:ef:7f:98:be:24:6a:aa:d5:7f:23:3e:f5:47:bf:
         eb:cb:c2:9d:f9:39:b3:c0:50:59:8e:bf:57:c8:a6:c8:de:a3:
         30:71:f7:0c:c1:1c:89:c9:43:1c:61:53:59:3e:a9:04:60:a7:
         b0:b2:ea:04:10:3d:c0:6b:af:83:82:93:97:22:4a:c3:fe:71:
         3a:77:d2:fe:a3:36:b8:90:fd:75:b2:19:5e:25:8f:6b:4a:90:
         51:a6:d5:3b:f0:d9:8c:88:06:a3:fe:bb:16:df:78:07:b8:9b:
         0a:23:72:23:ae:d7:72:e4:61:64:dd:5e:82:45:a4:94:ed:c3:
         35:f7:f9:0a:45:72:97:ba:2c:c8:f2:c8:59:40:48:47:93:53:
         65:e6:21:4d
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE3hUKl1t4zrIUBkzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3
OWM5MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
Yzg5NmZhOGYtMjBmMy00NjFjLWI4YTktNmQ2MzJhZDcyMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXVP/VhaEdnfS3NVj9QaxbvfjBxvRazVyxLh
TzVQgkKtvM96goWabhyMGiIgBCoYrW+Pm92oRCg7NrlI+TQJEYrNiSgSZWwOCdyl
ekO3U0Y8Zn3+C08j77+HXrgP0EKZU/u09U9GcgplwB+hU9hSlxs34beNa40Ztxbb
av9Xk7yBFQ3DVoJoCCwldVanrFYAc6doeKAZna6ALh72ew+eaHyZWFHW7noblCZA
ayUsSFAqhwMSFg9YvjNuAe/mURnW0uSH/ceMF6FgXRsuDyQd1e5wcCStwKu3I/H2
WPTPhe1ZW5p2Lb8e04z1uNp7mBu9gJvNBGHTPs/c1PpUc23c1QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKaocR997qCBhz3OOS2F8HrDWmRpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3
ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvYTMwMGYzMWEtOTRhYi0z
NmUwLThkMGItNWExMzc5ZWU3ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5
MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy
NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh
M2YwMjc5YzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4M8MA8E
AgACMAkDBwAmAvdjAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf56hawdohoO16TpdyxOwr0PfGtKl+div
tjCu46ZKPqdC2YRzxlHT98IoszmIjAevm4mjOOkGE0i0niDbF4xCyR8Ajr4/0hWf
v80dvmFV3oS7wE9Xv0nwnG6I3tDQPBUi1FjTTOpkA2M2zEWI2ULTL+9/mL4kaqrV
fyM+9Ue/68vCnfk5s8BQWY6/V8imyN6jMHH3DMEciclDHGFTWT6pBGCnsLLqBBA9
wGuvg4KTlyJKw/5xOnfS/qM2uJD9dbIZXiWPa0qQUabVO/DZjIgGo/67Ft94B7ib
CiNyI67XcuRhZN1egkWklO3DNff5CkVyl7osyPLIWUBIR5NTZeYhTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:21 2026 by rpki-client