Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
File:                     a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa (raw, json)
Hash identifier:          5OTRzl303VcDLf/aKkKAb0QR05BSZ7nyz5xniCtLdTE=
Subject key identifier:   4F:16:E5:51:02:37:31:16:09:8D:AC:FF:98:9F:1C:25:61:54:D4:DE
Certificate issuer:       /CN=63991382-256c-41c7-9e97-783d23a22bf2
Certificate serial:       010D0C9F4328584D8AC5561876E40B7D32DBBC40
Authority key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     398898
IP address blocks:        23.140.120.0/24 maxlen: 24
                          2620:ae:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:56:18:76:e4:0b:7d:32:db:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63991382-256c-41c7-9e97-783d23a22bf2
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=ae343239-7d1f-4986-a3df-7a3017bf7a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:b3:5c:dd:1d:71:06:52:87:e5:04:7d:70:
                    d3:64:b3:fd:8f:83:79:b9:b1:78:cb:55:dc:23:64:
                    75:5e:d2:90:07:29:42:fa:e1:74:09:8b:1f:12:07:
                    47:7b:39:0e:c1:51:c9:d5:80:f2:08:b9:0f:ca:8e:
                    03:ef:1b:22:fc:17:d3:38:66:fd:54:5b:13:11:e7:
                    f0:3f:6b:7b:7d:4f:df:ef:14:6a:b7:28:18:67:6b:
                    67:a3:1a:6d:a8:34:bc:a3:d2:ee:b0:fd:97:28:3a:
                    ae:63:ed:f8:2e:f4:e9:27:72:66:32:9a:92:05:04:
                    66:06:62:de:b7:cd:ee:b4:d5:a5:fd:dc:5b:18:e9:
                    0f:b1:7b:6c:7a:5e:a0:fc:de:27:5a:64:92:7d:86:
                    ff:ee:ec:61:fb:ba:6f:5c:ab:34:35:0b:10:a0:ba:
                    71:bc:77:1a:66:6b:61:d6:e3:e5:74:77:c6:9e:08:
                    17:d0:a7:bd:48:c7:75:40:7d:8b:de:23:1a:64:66:
                    f6:a8:35:a2:a6:20:8e:0e:49:d3:ec:67:03:db:e1:
                    80:58:d4:14:4c:71:9b:33:2e:9a:3e:16:ec:b9:55:
                    88:2c:c1:c6:f4:40:01:91:aa:0f:69:54:72:e3:69:
                    bf:f5:98:fe:15:1b:dc:9d:ab:27:57:4e:97:1a:4f:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:E5:51:02:37:31:16:09:8D:AC:FF:98:9F:1C:25:61:54:D4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl

            X509v3 Authority Key Identifier:
                keyid:77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.120.0/24
                IPv6:
                  2620:ae:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:97:c9:09:40:76:c4:13:45:89:5b:e3:2f:62:8e:0d:92:
         c1:00:d3:73:1a:69:94:ea:b4:61:b7:9b:cd:da:47:dc:5b:7f:
         90:09:e9:7f:b7:b6:66:d7:dc:b0:6f:56:b0:b8:d6:09:ec:a8:
         5d:be:e6:5b:74:42:d1:1e:b3:22:d2:c4:12:41:75:18:dc:6d:
         2a:51:93:ea:9d:6c:14:4c:e6:5b:21:90:31:12:ee:9e:9f:e4:
         dc:1a:79:2c:6d:b4:61:78:2b:d1:6c:a3:54:26:dc:4b:2b:5a:
         52:ee:64:c7:f3:32:db:51:f0:97:50:d5:48:21:b7:78:1c:41:
         b3:cd:58:dd:23:9e:51:f5:91:6b:bc:10:7e:e5:e2:45:05:79:
         e9:13:f2:0f:22:d3:c7:cf:bc:ef:27:34:04:a7:66:b9:df:c2:
         fd:b4:2e:dd:40:82:ed:d1:e6:73:aa:a5:7d:32:cf:c4:14:43:
         b1:de:eb:11:e4:b6:b0:f0:7e:55:33:b0:e1:6a:d9:32:cf:f8:
         06:32:46:b7:e2:4e:d9:7d:58:54:e4:18:d7:cb:ed:4e:2f:b1:
         25:d3:27:3a:45:c2:8b:e6:07:96:e8:9e:df:b6:98:9a:db:53:
         91:c9:59:eb:45:6f:2f:62:f4:7c:51:12:5f:49:ce:00:32:33:
         0c:7e:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:51 2026 by rpki-client