Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
File:                     860b20cf-76ac-3497-b0c1-607d390e67dd.roa (raw, json)
Hash identifier:          Uu7RmI72mjH2R1Om2LbzIHdOmx5eLDMIQnIIpW2ryrU=
Subject key identifier:   FA:47:8E:A8:9C:E6:F4:B8:8E:6B:FC:B0:FF:39:80:D3:97:B8:DB:85
Certificate issuer:       /CN=3b78e0f0-5f02-4f2e-a084-899096441110
Certificate serial:       010D0C9F4328584DC5659E96B29B7612D2CF9F60
Authority key identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     401778
IP address blocks:        23.140.76.0/24 maxlen: 24
                          2602:f615::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9e:96:b2:9b:76:12:d2:cf:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b78e0f0-5f02-4f2e-a084-899096441110
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=04eebcc9-a579-432c-8438-db85f6d059bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f5:7a:21:4b:2d:3f:72:a4:6e:7e:03:56:9d:
                    07:28:86:0d:ba:79:96:8b:78:bd:ad:37:58:6a:bb:
                    96:e5:c5:d7:76:9e:52:a6:54:c9:c1:22:21:67:e0:
                    6d:33:5d:e2:9f:2e:84:b7:77:8a:ae:c2:00:e9:6b:
                    9f:99:62:f7:62:b3:a3:51:aa:61:b0:13:04:e1:4e:
                    b3:e4:3b:ba:e0:f6:d8:01:ea:cb:bf:7f:65:48:c5:
                    f7:e7:dc:47:21:24:49:60:81:c8:fd:57:6b:51:3f:
                    3a:a7:28:6c:b4:cb:d5:8d:a0:a6:38:6f:ce:0f:e7:
                    27:bd:f6:30:4e:57:39:e3:e0:5d:cb:9f:86:ea:f0:
                    e0:cc:28:a3:0c:16:18:30:68:c8:fd:46:76:85:f1:
                    02:d9:9e:9a:3e:9b:13:69:58:bd:07:2a:06:17:ce:
                    ac:dc:be:a2:ba:ce:6c:da:ce:1b:cd:34:36:ee:3a:
                    09:a0:ec:89:43:43:cc:54:bc:ac:a0:08:7a:dc:64:
                    a8:39:b6:a0:cd:33:16:ba:c1:93:0e:49:f5:11:f9:
                    ab:ad:30:f0:3a:76:a5:66:c8:c5:2a:9c:e3:60:c5:
                    26:e9:23:69:94:ce:f2:f3:c6:a6:5d:1c:4b:3d:05:
                    e0:37:68:2a:c8:6d:65:f7:72:65:80:3b:8d:64:f4:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:47:8E:A8:9C:E6:F4:B8:8E:6B:FC:B0:FF:39:80:D3:97:B8:DB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/860b20cf-76ac-3497-b0c1-607d390e67dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl

            X509v3 Authority Key Identifier:
                keyid:02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.76.0/24
                IPv6:
                  2602:f615::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:2b:7e:b6:4e:53:79:09:d1:87:72:02:be:60:e8:12:e1:
         6d:81:f0:a5:aa:df:24:89:1a:43:fb:59:78:75:15:81:9c:37:
         c5:f3:e8:34:bc:1c:df:5d:35:5a:3c:23:c6:0d:7c:83:00:5d:
         a9:2b:aa:ff:15:69:78:c6:5f:df:5d:41:66:02:e7:82:43:13:
         23:92:ed:74:62:77:15:22:eb:ef:4b:57:9a:f4:3c:65:c8:e5:
         92:08:f7:d2:00:78:26:e1:d2:8c:2c:53:7d:86:b5:af:8a:f5:
         25:f5:b3:6e:51:46:93:41:19:4e:45:5e:4c:15:6c:97:24:6c:
         d5:aa:3d:22:ad:e3:07:da:ca:15:0c:fe:92:96:98:d2:2d:fa:
         79:3b:5a:51:25:7f:37:1c:d3:89:39:38:39:b1:e3:3a:a2:5a:
         bc:14:50:b5:5e:c2:33:a0:d7:3d:6a:e7:54:63:39:6b:07:91:
         0e:af:b0:b0:9b:f9:b7:55:4c:5a:c5:c0:f5:00:c2:15:c4:2d:
         f5:28:63:8d:ca:5d:32:f2:3d:b3:8c:c1:a3:af:a4:93:32:60:
         8a:b2:e2:27:15:f8:8f:48:02:87:47:28:50:92:f6:ef:10:72:
         23:d8:95:de:23:1a:0f:fb:c1:45:52:c9:e5:e8:f1:42:a6:0b:
         31:af:b2:f4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3FZZ6Wspt2EtLPn2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I3OGUwZjAtNWYwMi00ZjJlLWEwODQtODk5MDk2NDQx
MTEwMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk
MDRlZWJjYzktYTU3OS00MzJjLTg0MzgtZGI4NWY2ZDA1OWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvV6IUstP3Kkbn4DVp0HKIYNunmWi3i9rTdY
aruW5cXXdp5SplTJwSIhZ+BtM13iny6Et3eKrsIA6WufmWL3YrOjUaphsBME4U6z
5Du64PbYAerLv39lSMX359xHISRJYIHI/VdrUT86pyhstMvVjaCmOG/OD+cnvfYw
Tlc54+Bdy5+G6vDgzCijDBYYMGjI/UZ2hfEC2Z6aPpsTaVi9ByoGF86s3L6ius5s
2s4bzTQ27joJoOyJQ0PMVLysoAh63GSoObagzTMWusGTDkn1EfmrrTDwOnalZsjF
KpzjYMUm6SNplM7y88amXRxLPQXgN2gqyG1l93JlgDuNZPQNAQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFPpHjqic5vS4jmv8sP85gNOXuNuFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4
ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkwOTY0NDExMTAvODYwYjIwY2YtNzZhYy0z
NDk3LWIwYzEtNjA3ZDM5MGU2N2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I3OGUwZjAtNWYwMi00ZjJlLWEw
ODQtODk5MDk2NDQxMTEwLzNiNzhlMGYwLTVmMDItNGYyZS1hMDg0LTg5OTA5NjQ0
MTExMC5jcmwwHwYDVR0jBBgwFoAUAi0TqC1UqlratGs7fYOjofpzKu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkw
OTY0NDExMTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4xMMA4E
AgACMAgDBgAmAvYVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXyit+tk5TeQnRh3ICvmDoEuFtgfClqt8k
iRpD+1l4dRWBnDfF8+g0vBzfXTVaPCPGDXyDAF2pK6r/FWl4xl/fXUFmAueCQxMj
ku10YncVIuvvS1ea9DxlyOWSCPfSAHgm4dKMLFN9hrWvivUl9bNuUUaTQRlORV5M
FWyXJGzVqj0ireMH2soVDP6SlpjSLfp5O1pRJX83HNOJOTg5seM6olq8FFC1XsIz
oNc9audUYzlrB5EOr7Cwm/m3VUxaxcD1AMIVxC31KGONyl0y8j2zjMGjr6STMmCK
suInFfiPSAKHRyhQkvbvEHIj2JXeIxoP+8FFUsnl6PFCpgsxr7L0
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:01 2026 by rpki-client