Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
File:                     4c039b9f-7d95-385d-a4d5-7d3621295d94.roa (raw, json)
Hash identifier:          fNAlRJCJos4zySRVd3SwBAQqloIgtAz+scgyNoU31AU=
Subject key identifier:   9D:D7:EF:74:E9:21:37:9E:07:CA:44:FE:D4:F0:51:81:DC:5A:54:23
Certificate issuer:       /CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
Certificate serial:       010D0C9F4328584D0A77BD888DF173E96AE88F80
Authority key identifier: 13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     33741
IP address blocks:        23.184.184.0/24 maxlen: 24
                          142.249.168.0/22 maxlen: 24
                          2602:819:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:bd:88:8d:f1:73:e9:6a:e8:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=d8aa1446-859d-4ec9-a52b-d124818b9cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4c:41:ae:ee:4f:b1:8f:64:4a:89:06:69:d6:
                    15:d6:51:35:57:d6:e9:11:53:c5:87:4b:8b:75:51:
                    3d:aa:f8:30:b1:39:f1:8b:e8:e7:bf:09:35:55:e8:
                    ad:2d:56:08:87:b7:a6:9b:38:f1:2c:17:37:09:bc:
                    c7:7d:64:07:14:79:18:ba:73:fb:df:78:41:fd:0d:
                    57:0e:1a:90:1e:57:ca:f5:0a:8f:97:ce:20:4a:b7:
                    71:37:90:67:7a:35:4b:ee:02:30:54:37:ed:77:5c:
                    74:90:98:66:a5:c8:00:92:59:2f:2e:4a:8c:3b:9a:
                    38:9c:72:45:f4:5e:8f:a5:57:43:ed:ed:73:7b:aa:
                    a4:89:83:6c:73:97:98:86:12:4d:3a:9e:84:29:a1:
                    c8:be:d7:f6:64:53:b6:04:21:76:69:89:c3:57:5d:
                    80:0f:f7:b9:29:72:98:ed:09:21:15:0c:cd:82:f5:
                    0d:c0:e6:56:b5:c8:a6:7d:b3:8e:a2:69:9b:85:de:
                    ee:7a:e4:cf:ec:59:b8:ab:a8:1b:76:49:e9:4d:f9:
                    4b:a5:96:e4:05:df:c2:6f:67:47:e4:c6:13:9e:91:
                    33:8b:dd:d7:3d:eb:34:01:ec:04:3b:f1:b1:d8:e8:
                    b8:31:21:d5:39:84:9e:d5:9c:03:6e:47:34:2b:fa:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:EF:74:E9:21:37:9E:07:CA:44:FE:D4:F0:51:81:DC:5A:54:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/4c039b9f-7d95-385d-a4d5-7d3621295d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl

            X509v3 Authority Key Identifier:
                keyid:13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.184.0/24
                  142.249.168.0/22
                IPv6:
                  2602:819:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:82:ed:e8:22:13:2c:6b:80:b0:98:63:d9:a6:40:69:9c:4e:
         75:99:a8:8d:80:5a:4b:67:14:04:88:2e:d6:85:73:a2:d3:43:
         f5:70:44:ca:82:80:31:17:af:2d:4d:3c:c0:ad:fc:a4:0d:76:
         04:3b:f7:78:10:7f:84:66:4d:27:e7:90:a1:2e:17:36:d3:90:
         41:10:df:6b:90:34:c6:f2:20:7a:94:81:22:0f:3c:75:4c:3f:
         38:32:80:69:99:ad:2c:e2:f0:0d:47:d6:1b:b7:a2:6e:6a:cb:
         29:61:69:4c:79:db:5f:ce:fa:c3:a3:c4:32:c7:f5:af:75:6c:
         9f:f6:e0:46:1a:f0:82:9a:df:57:34:42:59:b6:33:d6:99:e4:
         f6:b8:24:ab:d8:1b:07:4b:e0:14:f3:c0:5d:80:04:1a:c7:33:
         ce:3e:30:37:23:76:a7:c6:38:7b:d3:e8:51:a5:a6:5c:f5:7e:
         61:02:e9:88:63:40:d8:fa:b7:ff:5a:86:ce:72:92:ff:2a:cb:
         87:dd:b5:2c:85:66:b9:ed:2c:d8:6e:59:6c:71:e1:a4:6b:a2:
         12:8d:f9:d4:8f:ed:e4:f3:5e:1d:53:73:40:f8:8f:2d:51:ea:
         1e:f4:6c:b9:d2:fb:97:0f:32:d1:81:b8:d2:39:e1:90:0b:a8:
         8a:86:19:ee
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0Kd72IjfFz6Wroj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIyMWI1NWYtYTliYi00YjA3LWJkZDUtYzM4YTcwM2Jm
NjVjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
ZDhhYTE0NDYtODU5ZC00ZWM5LWE1MmItZDEyNDgxOGI5Y2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0xBru5PsY9kSokGadYV1lE1V9bpEVPFh0uL
dVE9qvgwsTnxi+jnvwk1VeitLVYIh7emmzjxLBc3CbzHfWQHFHkYunP733hB/Q1X
DhqQHlfK9QqPl84gSrdxN5BnejVL7gIwVDftd1x0kJhmpcgAklkvLkqMO5o4nHJF
9F6PpVdD7e1ze6qkiYNsc5eYhhJNOp6EKaHIvtf2ZFO2BCF2aYnDV12AD/e5KXKY
7QkhFQzNgvUNwOZWtcimfbOOommbhd7ueuTP7Fm4q6gbdknpTflLpZbkBd/Cb2dH
5MYTnpEzi93XPes0AewEO/Gx2Oi4MSHVOYSe1ZwDbkc0K/rMSQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFJ3X73TpITeeB8pE/tTwUYHcWlQjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82YjIx
YjU1Zi1hOWJiLTRiMDctYmRkNS1jMzhhNzAzYmY2NWMvNGMwMzliOWYtN2Q5NS0z
ODVkLWE0ZDUtN2QzNjIxMjk1ZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmIyMWI1NWYtYTliYi00YjA3LWJk
ZDUtYzM4YTcwM2JmNjVjLzZiMjFiNTVmLWE5YmItNGIwNy1iZGQ1LWMzOGE3MDNi
ZjY1Yy5jcmwwHwYDVR0jBBgwFoAUExcjAfNJZcc3QXqwh26ckQKoZpIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82YjIxYjU1Zi1hOWJiLTRiMDctYmRkNS1jMzhh
NzAzYmY2NWMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7i4AwQC
jvmoMA4EAgACMAgDBgAmAggZoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtgu3oIhMsa4CwmGPZpkBpnE51
maiNgFpLZxQEiC7WhXOi00P1cETKgoAxF68tTTzArfykDXYEO/d4EH+EZk0n55Ch
Lhc205BBEN9rkDTG8iB6lIEiDzx1TD84MoBpma0s4vANR9Ybt6JuasspYWlMedtf
zvrDo8Qyx/WvdWyf9uBGGvCCmt9XNEJZtjPWmeT2uCSr2BsHS+AU88BdgAQaxzPO
PjA3I3anxjh70+hRpaZc9X5hAumIY0DY+rf/WobOcpL/KsuH3bUshWa57SzYblls
ceGka6ISjfnUj+3k814dU3NA+I8tUeoe9Gy50vuXDzLRgbjSOeGQC6iKhhnu
-----END CERTIFICATE-----
Generated at Sun Mar 15 06:05:32 2026 by rpki-client