Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/45eca4ef-9410-3be0-9d13-2d5a9c66a678.roa
File:                     45eca4ef-9410-3be0-9d13-2d5a9c66a678.roa (raw, json)
Hash identifier:          /6PZ+Ub+tCPCt7YOGOLkXhuefmLS8PTm3d5Xrpq9aiU=
Subject key identifier:   E4:75:67:5E:53:E1:1D:A2:43:BB:DB:73:CB:E8:21:9C:44:F3:FC:0F
Certificate issuer:       /CN=63991382-256c-41c7-9e97-783d23a22bf2
Certificate serial:       010D0C9F4328584F6292C0D63937EA5C04132700
Authority key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/45eca4ef-9410-3be0-9d13-2d5a9c66a678.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     13334
IP address blocks:        23.140.120.0/24 maxlen: 24
                          2620:ae:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c0:d6:39:37:ea:5c:04:13:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63991382-256c-41c7-9e97-783d23a22bf2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=178b8222-98d0-4979-ac85-5c16d5bc4e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:bb:83:5c:b6:73:5f:21:49:79:56:68:f8:
                    0b:3b:df:92:a0:d6:3f:01:d3:97:89:e8:f1:1c:97:
                    d2:af:5e:d7:c8:36:d3:62:e5:6d:cc:01:de:3e:7f:
                    ac:b4:8b:fb:88:3e:ab:1d:52:dc:58:6d:51:8b:98:
                    48:8b:a7:8b:69:db:57:5f:0c:31:9e:d4:c7:65:37:
                    b2:15:a3:ad:a7:f6:fd:82:d4:8d:f7:05:f1:3c:86:
                    d1:ea:8f:31:3e:8b:9b:f4:04:32:5d:00:28:bc:d4:
                    bd:4f:83:79:ca:9c:90:ca:a1:2c:85:7d:cf:64:a2:
                    56:1e:e6:28:f3:31:5d:b7:49:f1:79:ad:80:14:55:
                    0d:eb:9f:d0:31:bd:79:16:8d:d7:e6:b6:78:5d:f6:
                    b7:50:80:36:29:8e:47:a1:17:3c:af:6d:4f:c2:25:
                    14:7c:84:61:29:d9:3d:cc:a6:cc:f1:62:83:b0:35:
                    a0:2f:6a:b9:b5:86:1c:63:7d:ee:3a:22:35:10:e9:
                    0d:68:38:75:0e:96:f5:b5:96:b8:c1:fb:77:38:a8:
                    24:0f:62:3e:ea:a7:72:94:fe:59:da:30:c9:92:e8:
                    e6:e9:ab:5f:d3:ef:5d:7e:33:58:ee:6e:69:1d:7a:
                    57:c7:5c:85:70:8f:8a:8a:59:b5:4d:b5:b7:9c:31:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:67:5E:53:E1:1D:A2:43:BB:DB:73:CB:E8:21:9C:44:F3:FC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/45eca4ef-9410-3be0-9d13-2d5a9c66a678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl

            X509v3 Authority Key Identifier:
                keyid:77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.120.0/24
                IPv6:
                  2620:ae:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:5a:a3:57:80:31:57:0c:b7:b5:f0:b1:08:82:ae:b6:ae:
         d2:13:02:e6:a4:f3:cf:7b:f3:9a:97:28:6b:c5:d6:7c:4e:c9:
         c4:88:e0:5d:02:13:b4:2f:f5:0f:57:0b:bd:20:b3:8b:2f:65:
         8c:74:67:d9:2b:9d:ed:0b:51:ac:70:e8:5d:23:7f:1a:5b:1f:
         5f:90:3e:91:b1:89:cf:bd:c1:76:1d:13:72:fe:2a:3d:a5:df:
         bd:c8:bd:aa:d6:7b:25:67:71:57:df:22:9a:25:01:9d:ef:9d:
         a7:a5:72:3e:e9:00:58:65:1a:0a:2d:b3:48:83:5d:de:7d:ab:
         d7:a5:06:b5:e1:e8:a8:55:ab:56:14:82:c6:37:3d:ae:6e:72:
         7a:86:11:02:ec:05:4b:1b:8b:06:ab:7c:34:4e:a3:c5:d5:dc:
         14:4d:e5:cc:ad:cc:94:8a:de:83:b4:b2:ad:b8:55:3b:3c:bd:
         3f:c8:86:7a:e6:12:72:39:e6:4d:9e:46:05:da:c6:ac:d6:b6:
         80:92:a7:f7:46:5c:46:d0:d7:93:15:00:1e:18:58:43:dc:4f:
         2d:f1:9a:43:a9:9e:55:37:1a:58:e0:41:3b:8d:cc:d8:11:99:
         04:70:79:5e:cc:dd:6b:79:7d:d9:39:f7:ae:3e:88:e8:90:29:
         49:6e:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:51:58 2026 by rpki-client