Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File:                     603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier:          LDQyVLmjFiALtXQdMnRPDXTQZMtoZsoqB1WRJlKxawM=
Subject key identifier:   05:AC:00:8B:1B:A8:AA:BE:90:44:B5:2E:C1:5F:A6:E8:F3:64:52:66
Certificate issuer:       /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial:       010D0C9F4328584D39CF90D51A5D23C3198E1520
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     20055
IP address blocks:        23.131.120.0/24 maxlen: 24
                          2606:acc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:90:d5:1a:5d:23:c3:19:8e:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=50e2b020-aae0-44cb-abb3-c4bc73203218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:8b:3c:50:70:30:87:d6:bd:35:47:f1:be:
                    46:b0:27:b7:b9:e3:29:47:a5:92:0c:bc:ea:05:f5:
                    64:2c:58:27:39:b7:df:b8:2f:c6:65:a2:bc:6d:d7:
                    eb:17:24:3e:27:1f:ec:10:43:92:f6:ec:3c:1e:ea:
                    df:21:82:7f:18:e4:2f:e6:a0:d6:90:e9:60:05:9a:
                    23:84:0a:61:4f:94:74:29:78:30:0b:e2:2d:18:16:
                    80:a6:15:ec:09:19:d2:7f:1e:00:2d:90:57:57:88:
                    e5:86:e0:1d:a2:af:0e:a6:e9:42:70:24:3e:15:9e:
                    3f:a8:52:f4:bc:a6:13:e6:9f:a7:c8:5c:27:20:b0:
                    f2:61:10:20:e6:35:f1:cc:1d:73:bf:6b:ed:53:33:
                    40:fb:d4:5c:81:e2:17:d8:54:ee:07:f0:0c:db:0a:
                    91:98:a6:e4:82:d4:43:bb:00:10:74:6e:1a:ee:4d:
                    13:9e:4a:c0:9c:dd:a4:9c:36:b7:db:60:b0:08:c1:
                    fa:12:ed:5a:a0:e8:d7:6c:ab:61:7f:dd:e9:18:3d:
                    19:11:58:93:7c:d3:20:72:28:b3:00:65:56:d4:91:
                    83:85:1c:b8:05:3d:fb:b1:1b:c5:45:d7:41:0c:e6:
                    56:8b:e2:f2:c4:5c:66:23:a6:63:2d:33:9f:f5:52:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:00:8B:1B:A8:AA:BE:90:44:B5:2E:C1:5F:A6:E8:F3:64:52:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl

            X509v3 Authority Key Identifier:
                keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.120.0/24
                IPv6:
                  2606:acc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:6f:68:07:d6:80:49:8f:c1:18:17:1b:8a:f6:f9:7c:b5:
         27:a3:36:5f:92:2f:c6:b6:4d:2c:3b:eb:f6:10:e6:f9:b5:a5:
         29:23:8a:ec:1f:1f:c7:e8:f9:75:73:eb:8b:5a:c8:43:8e:8a:
         14:f8:d7:80:a9:04:92:40:ae:d3:41:1a:3c:2a:e8:60:6a:fc:
         4c:de:ea:85:c4:b8:14:95:5f:fb:ef:77:51:93:f1:5e:bf:77:
         2f:d7:cf:b3:01:8d:d1:cb:1f:c6:d1:0a:d8:59:0f:08:de:dc:
         de:73:44:ff:c9:7c:4b:a7:1e:d4:d1:04:5e:c2:39:d6:83:d5:
         a0:47:08:8c:5e:86:60:5f:1e:b8:3c:e4:06:51:ef:d0:15:14:
         67:bb:c1:95:a2:54:62:cc:07:6b:87:03:ac:d8:82:96:17:3c:
         f9:b6:63:fb:bf:c4:2e:73:cf:91:e0:78:9d:8f:75:dd:00:33:
         3a:27:af:4c:68:6e:c2:16:ae:9a:08:b9:f8:8c:f9:d5:02:06:
         61:de:58:10:39:64:e1:de:4d:a0:86:44:fe:46:a4:9c:d5:98:
         28:1d:90:44:60:c5:87:4e:bc:20:78:01:41:f1:04:ed:59:df:
         10:a4:59:af:b0:2a:b9:1f:1b:de:17:da:35:42:be:bc:f3:4e:
         b2:dc:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:27 2026 by rpki-client