Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa
File:                     4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa (raw, json)
Hash identifier:          PTLdauYyTwPHoUTr/VFb7CGimqHb+UTdJP5PCySU7sw=
Subject key identifier:   3A:DC:4E:3D:25:CE:7F:6B:46:76:D8:86:17:7F:5D:02:88:D1:08:5E
Certificate issuer:       /CN=7363c75e-c9d4-47b4-9294-7a310c041945
Certificate serial:       010D0C9F4328584D422F895DCDE526FCA5C6B760
Authority key identifier: 3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     20443
IP address blocks:        23.130.180.0/24 maxlen: 24
                          142.248.128.0/22 maxlen: 24
                          2602:f774::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:89:5d:cd:e5:26:fc:a5:c6:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7363c75e-c9d4-47b4-9294-7a310c041945
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=0aa2043c-5653-4353-8cdf-eb8be0cc33c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:a6:a6:bd:47:ef:c9:76:ca:ea:e8:a1:70:
                    af:a7:21:f2:b2:db:14:22:03:fb:7c:18:59:3b:b4:
                    7c:62:45:58:27:82:be:8d:59:2a:98:81:96:fa:cb:
                    52:02:2d:52:56:2a:90:23:1c:24:d4:4b:15:85:77:
                    56:8a:0c:5f:b9:f4:ec:03:d3:41:b1:79:0a:d8:8e:
                    e6:1b:5e:af:eb:85:c1:da:59:d4:60:91:69:03:b1:
                    6c:d7:28:15:bf:03:91:bd:06:2d:b3:8f:b4:b4:1c:
                    43:b9:6d:d3:88:44:e6:88:29:51:6f:f8:38:57:cc:
                    68:65:9e:3c:f5:e1:36:cf:a0:d2:39:2e:57:ed:c9:
                    98:9f:7c:cd:80:25:34:c7:f7:88:92:ab:12:fc:0c:
                    1f:d7:14:f9:ad:de:7e:a1:5f:23:8b:de:f0:44:65:
                    aa:eb:85:c7:91:71:eb:6a:96:8f:c8:20:ac:64:e7:
                    44:b6:09:f5:71:b1:38:0e:83:68:56:00:8f:d1:83:
                    41:09:3e:7b:a5:6c:fe:f0:11:31:3e:24:d3:86:fb:
                    97:90:ae:cf:13:ca:26:c5:f9:68:b9:35:46:2f:f0:
                    ba:b9:0a:66:19:af:ea:ad:12:e2:33:1b:07:55:d2:
                    00:ca:85:4f:0d:85:48:f1:3f:f4:ba:ec:88:d7:d1:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DC:4E:3D:25:CE:7F:6B:46:76:D8:86:17:7F:5D:02:88:D1:08:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/4c7fd8b3-14b8-32b4-a27e-805c18561b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945/7363c75e-c9d4-47b4-9294-7a310c041945.crl

            X509v3 Authority Key Identifier:
                keyid:3F:12:0C:B9:D9:5A:71:99:5C:88:46:39:6C:34:8B:DB:F5:26:4B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7363c75e-c9d4-47b4-9294-7a310c041945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.180.0/24
                  142.248.128.0/22
                IPv6:
                  2602:f774::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f9:90:73:a4:87:9f:e0:e8:c4:2f:ed:9f:d2:f2:18:d4:0c:
         90:40:22:f5:40:6f:40:7c:3f:f5:46:6b:21:1d:9f:f9:cd:8f:
         66:de:d2:9f:e0:70:59:42:d6:b8:86:f9:0d:b0:c5:58:2c:20:
         55:6f:ff:58:0f:3d:00:17:ec:77:61:60:9b:45:b4:8b:2a:04:
         13:16:4a:c1:b1:09:5c:00:3c:b3:c7:2f:e6:7a:5a:fd:d4:46:
         24:e7:ba:07:dc:c5:7c:a8:3c:07:38:a3:83:21:87:9e:e0:d9:
         6a:34:03:74:50:56:c7:a9:0e:3f:61:36:47:87:3d:f2:f4:b0:
         4a:d7:6f:21:a3:84:d0:da:16:36:db:4e:2a:c9:dd:4a:b2:4b:
         50:8a:52:ee:52:02:ea:d1:f6:55:8c:35:a6:39:1f:01:ea:1d:
         c5:6f:d6:4e:9d:7b:29:de:84:a4:37:ff:16:f8:23:4e:28:f8:
         3e:4a:cc:07:ec:cb:39:5d:f6:54:c9:44:7d:ee:73:f7:c8:4f:
         b7:aa:5c:b7:fb:61:9f:07:5f:72:2f:5e:9c:22:47:98:90:4a:
         e0:8e:c3:47:d9:34:87:e0:87:a6:ea:1f:ab:44:b5:61:48:a0:
         f7:92:ec:eb:41:36:e2:a8:c9:4e:19:19:4f:85:26:cb:48:52:
         bc:ef:c7:4c
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1CL4ldzeUm/KXGt2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzM2M2M3NWUtYzlkNC00N2I0LTkyOTQtN2EzMTBjMDQx
OTQ1MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
MGFhMjA0M2MtNTY1My00MzUzLThjZGYtZWI4YmUwY2MzM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHimpr1H78l2yurooXCvpyHystsUIgP7fBhZ
O7R8YkVYJ4K+jVkqmIGW+stSAi1SViqQIxwk1EsVhXdWigxfufTsA9NBsXkK2I7m
G16v64XB2lnUYJFpA7Fs1ygVvwORvQYts4+0tBxDuW3TiETmiClRb/g4V8xoZZ48
9eE2z6DSOS5X7cmYn3zNgCU0x/eIkqsS/Awf1xT5rd5+oV8ji97wRGWq64XHkXHr
apaPyCCsZOdEtgn1cbE4DoNoVgCP0YNBCT57pWz+8BExPiTThvuXkK7PE8omxflo
uTVGL/C6uQpmGa/qrRLiMxsHVdIAyoVPDYVI8T/0uuyI19FPAwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFDrcTj0lzn9rRnbYhhd/XQKI0QheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83MzYz
Yzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMxMGMwNDE5NDUvNGM3ZmQ4YjMtMTRiOC0z
MmI0LWEyN2UtODA1YzE4NTYxYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzM2M2M3NWUtYzlkNC00N2I0LTky
OTQtN2EzMTBjMDQxOTQ1LzczNjNjNzVlLWM5ZDQtNDdiNC05Mjk0LTdhMzEwYzA0
MTk0NS5jcmwwHwYDVR0jBBgwFoAUPxIMudlacZlciEY5bDSL2/UmS4swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83MzYzYzc1ZS1jOWQ0LTQ3YjQtOTI5NC03YTMx
MGMwNDE5NDUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4K0AwQC
jviAMA4EAgACMAgDBgAmAvd0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD+ZBzpIef4OjEL+2f0vIY1AyQ
QCL1QG9AfD/1RmshHZ/5zY9m3tKf4HBZQta4hvkNsMVYLCBVb/9YDz0AF+x3YWCb
RbSLKgQTFkrBsQlcADyzxy/melr91EYk57oH3MV8qDwHOKODIYee4NlqNAN0UFbH
qQ4/YTZHhz3y9LBK128ho4TQ2hY2204qyd1KsktQilLuUgLq0fZVjDWmOR8B6h3F
b9ZOnXsp3oSkN/8W+CNOKPg+SswH7Ms5XfZUyUR97nP3yE+3qly3+2GfB19yL16c
IkeYkErgjsNH2TSH4Iem6h+rRLVhSKD3kuzrQTbiqMlOGRlPhSbLSFK878dM
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:06 2026 by rpki-client