Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa
File:                     73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa (raw, json)
Hash identifier:          eovodLBZAgm8hcI8ao7IZmVti6jq0S6ei9XvpofgdPY=
Subject key identifier:   A9:07:FC:6B:2C:C8:78:E7:F9:38:52:7F:7C:6C:8F:64:F7:B5:9F:32
Certificate issuer:       /CN=2dbba49e-9fe2-42a4-a957-87e73ca24f53
Certificate serial:       010D0C9F4328584D1707D90E70D5D6F54A72CD60
Authority key identifier: CE:42:FE:C2:44:2C:34:2A:F6:45:BA:0F:61:69:E1:2A:4E:E6:8D:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     398099
IP address blocks:        23.140.24.0/24 maxlen: 24
                          2602:810:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:d9:0e:70:d5:d6:f5:4a:72:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbba49e-9fe2-42a4-a957-87e73ca24f53
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=b1ac82be-e62b-4de9-a7a2-c9d1359dca47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:ee:9b:40:ef:b3:8f:17:38:4d:dc:d7:29:
                    0b:6d:b0:42:7d:21:80:f9:33:07:8d:58:88:30:9e:
                    dd:42:0c:b4:d9:82:2f:25:67:7a:34:c8:12:20:cf:
                    9e:e0:04:1e:3b:6d:4b:98:0c:ae:db:8d:fb:8f:2f:
                    93:66:92:c3:1e:2b:f1:8a:d3:67:59:22:65:67:5c:
                    08:76:2e:3e:1b:5e:15:f3:bd:21:e4:77:04:d2:60:
                    2b:30:2a:d7:2c:65:16:a9:4e:14:05:e6:30:a4:db:
                    ca:f8:d7:ed:d0:65:8c:a1:3a:eb:1e:84:91:73:a5:
                    4b:74:08:41:06:8b:4d:1b:87:e9:e7:72:68:a4:17:
                    7b:e3:9d:33:9c:85:fe:ab:bf:ff:0d:0b:bd:93:5a:
                    72:cc:3b:a2:b1:ee:40:fb:ce:40:ce:c7:31:72:05:
                    b4:60:5e:7b:71:da:7d:d0:bc:4d:38:8f:8a:9c:45:
                    44:b6:a1:20:c8:f9:df:ae:b8:c6:fa:7b:7c:d7:16:
                    29:7b:2e:9c:85:6a:30:04:e9:7e:27:66:c0:8b:b1:
                    c0:07:57:1e:f3:0e:1e:7c:26:f7:df:04:62:6d:11:
                    84:3a:97:4f:33:b1:fb:ce:c2:6e:56:df:b6:2e:71:
                    a5:62:82:52:fd:86:3f:2f:20:b6:34:d5:99:96:e0:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:FC:6B:2C:C8:78:E7:F9:38:52:7F:7C:6C:8F:64:F7:B5:9F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/73db188a-ac32-37e4-a6de-5bcfa6b5954f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53/2dbba49e-9fe2-42a4-a957-87e73ca24f53.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:C2:44:2C:34:2A:F6:45:BA:0F:61:69:E1:2A:4E:E6:8D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dbba49e-9fe2-42a4-a957-87e73ca24f53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.24.0/24
                IPv6:
                  2602:810:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:59:d5:34:07:00:17:51:18:98:00:61:bd:3d:bb:af:85:62:
         87:f5:d3:53:80:02:c5:b1:71:ea:4b:f4:16:d7:26:f0:2a:67:
         36:04:3a:ba:07:22:80:2b:50:e6:b2:f1:64:7f:f1:0e:d8:7a:
         8a:20:10:7c:73:43:9e:4e:e1:cc:d9:7a:e2:69:74:31:b6:4b:
         34:b7:9b:ec:3a:a8:c6:56:23:11:4b:0f:be:27:03:11:85:fa:
         fb:23:ec:69:66:f3:0e:61:ee:29:aa:fb:4a:ed:d5:b5:c1:3f:
         22:a6:0c:b5:25:1a:1c:91:4f:eb:46:66:d0:6e:9e:a1:64:7f:
         d7:f5:24:88:19:e9:a0:84:43:32:03:2d:31:ac:b5:8e:21:f1:
         ce:f1:37:a8:28:78:e2:c6:47:fe:4a:02:15:12:53:83:2a:8a:
         e8:29:76:cd:b1:89:eb:34:d7:80:dc:89:de:3f:e8:fc:46:e5:
         91:39:32:88:d4:c4:3c:38:5e:95:01:d8:ff:74:71:79:c7:5e:
         a9:df:6f:bb:e3:94:91:ef:f4:d6:37:a4:bc:d0:65:1a:bd:91:
         dd:82:67:b2:22:83:87:ff:20:54:fd:bc:83:58:f4:f7:dc:12:
         39:d4:75:47:53:af:36:5e:21:aa:07:8b:d7:ae:67:6d:04:ac:
         0d:d6:42:8f
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0XB9kOcNXW9UpyzWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiYmE0OWUtOWZlMi00MmE0LWE5NTctODdlNzNjYTI0
ZjUzMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
YjFhYzgyYmUtZTYyYi00ZGU5LWE3YTItYzlkMTM1OWRjYTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu33um0Dvs48XOE3c1ykLbbBCfSGA+TMHjViI
MJ7dQgy02YIvJWd6NMgSIM+e4AQeO21LmAyu2437jy+TZpLDHivxitNnWSJlZ1wI
di4+G14V870h5HcE0mArMCrXLGUWqU4UBeYwpNvK+Nft0GWMoTrrHoSRc6VLdAhB
BotNG4fp53JopBd7450znIX+q7//DQu9k1pyzDuise5A+85AzscxcgW0YF57cdp9
0LxNOI+KnEVEtqEgyPnfrrjG+nt81xYpey6chWowBOl+J2bAi7HAB1ce8w4efCb3
3wRibRGEOpdPM7H7zsJuVt+2LnGlYoJS/YY/LyC2NNWZluBR5wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKkH/GssyHjn+ThSf3xsj2T3tZ8yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGJi
YTQ5ZS05ZmUyLTQyYTQtYTk1Ny04N2U3M2NhMjRmNTMvNzNkYjE4OGEtYWMzMi0z
N2U0LWE2ZGUtNWJjZmE2YjU5NTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRiYmE0OWUtOWZlMi00MmE0LWE5
NTctODdlNzNjYTI0ZjUzLzJkYmJhNDllLTlmZTItNDJhNC1hOTU3LTg3ZTczY2Ey
NGY1My5jcmwwHwYDVR0jBBgwFoAUzkL+wkQsNCr2RboPYWnhKk7mjRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZGJiYTQ5ZS05ZmUyLTQyYTQtYTk1Ny04N2U3
M2NhMjRmNTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4wYMA8E
AgACMAkDBwQmAggQkAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIlnVNAcAF1EYmABhvT27r4Vih/XTU4AC
xbFx6kv0Ftcm8CpnNgQ6ugcigCtQ5rLxZH/xDth6iiAQfHNDnk7hzNl64ml0MbZL
NLeb7DqoxlYjEUsPvicDEYX6+yPsaWbzDmHuKar7Su3VtcE/IqYMtSUaHJFP60Zm
0G6eoWR/1/UkiBnpoIRDMgMtMay1jiHxzvE3qCh44sZH/koCFRJTgyqK6Cl2zbGJ
6zTXgNyJ3j/o/EblkTkyiNTEPDhelQHY/3Rxecdeqd9vu+OUke/01jekvNBlGr2R
3YJnsiKDh/8gVP28g1j099wSOdR1R1OvNl4hqgeL165nbQSsDdZCjw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:34 2026 by rpki-client