Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
File:                     62cac302-3527-3ef3-beab-cc5a3b35a766.roa (raw, json)
Hash identifier:          Pl/ZfQxUdxVeQjmwgo/ySsMRaCGdSTWFvvo3UYyIrIo=
Subject key identifier:   16:EE:19:D3:BA:82:AD:5C:AF:E5:56:B0:85:7C:E6:4B:58:4A:46:15
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F4328584EA79999B7C7B0E2F0B2C4D380
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20317
IP address blocks:        23.140.60.0/24 maxlen: 24
                          2602:f8a2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:99:b7:c7:b0:e2:f0:b2:c4:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb96cf60-e9ec-48b5-ba30-e4384dd17279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:d0:30:06:eb:e0:9b:26:29:b7:c7:20:a5:
                    ca:eb:1e:a1:46:1c:ec:8e:06:8e:74:d7:2b:1b:e4:
                    23:93:50:32:40:68:65:da:2a:da:3e:87:d2:a4:8e:
                    14:19:a6:f6:f5:43:b7:3b:6f:d3:c6:2f:73:2a:db:
                    76:a5:82:b6:1a:04:c2:1e:87:ef:d8:52:1e:d1:61:
                    bd:87:70:1c:17:02:6f:60:7a:8f:7d:81:f7:81:bf:
                    29:be:15:7c:85:da:3b:69:42:a9:4c:2a:47:c2:64:
                    98:d6:d7:d5:b0:5d:f6:cf:b3:8a:aa:ac:62:bf:16:
                    3f:be:c3:a1:73:05:8b:ba:7a:f2:94:6a:9c:d8:e7:
                    4b:89:ae:78:6b:98:0d:cb:fc:48:5c:48:4c:96:f3:
                    7d:38:a1:c8:e7:d9:2e:50:92:7f:12:5b:19:22:84:
                    2a:9b:f7:55:d1:18:32:62:00:3d:ed:e4:79:f4:78:
                    81:fd:8d:d5:b9:27:06:ae:27:0c:01:0e:48:db:58:
                    cf:a2:3e:40:bf:97:7e:07:23:8f:b8:22:1e:4e:5d:
                    97:2d:30:66:61:28:ca:cd:f4:70:6f:b6:21:f7:55:
                    61:7f:49:38:d1:73:85:be:45:78:02:81:16:6b:3f:
                    14:6b:7c:47:6f:08:4d:d1:7e:ed:05:9d:ab:ce:87:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:19:D3:BA:82:AD:5C:AF:E5:56:B0:85:7C:E6:4B:58:4A:46:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.60.0/24
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:4a:3a:39:b8:49:13:25:95:ff:a4:c3:6a:03:b7:c7:22:
         d6:7b:99:58:83:e0:71:79:bb:7d:2c:fe:4a:65:d5:90:e4:06:
         d6:8d:66:1d:60:18:46:63:1d:bf:fb:61:7b:08:31:52:1d:2f:
         3b:2f:43:77:8c:67:c0:e8:a4:35:f9:1d:a5:23:88:ba:14:4b:
         58:08:55:e2:fe:fb:2f:a2:57:89:e8:92:40:4f:a6:49:c6:fb:
         e1:98:db:81:04:78:a3:6d:e8:7f:b7:ec:61:24:b7:e7:b0:e7:
         95:80:a8:7a:34:43:be:0e:d3:84:41:f3:67:7d:b6:22:a8:e1:
         1e:67:b0:70:9f:3d:67:4b:17:82:5f:8a:ea:61:28:6e:87:a0:
         2c:de:dd:98:c9:93:5e:28:30:37:5f:ca:50:f3:6c:0c:05:0b:
         27:73:0b:b0:19:37:b4:1a:fa:0d:53:99:ad:84:78:31:b8:5d:
         f9:c0:48:41:72:99:de:a1:18:75:19:a5:c2:d9:fe:5f:88:66:
         4e:43:43:b3:d9:dc:fb:14:ea:15:ba:46:83:a4:79:cd:22:56:
         70:a4:99:ba:7e:7e:64:3f:4e:0c:ed:62:b3:e3:53:74:4b:a8:
         b8:1b:a4:04:1a:e6:d4:48:ef:9a:be:da:8e:16:5f:0c:93:c5:
         d0:4e:be:b8
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nmZm3x7Di8LLE04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQwMDc4ZmItNjViNy00Yzc0LTkyMmMtMDlmNDRmMjIy
YjZlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmI5NmNmNjAtZTllYy00OGI1LWJhMzAtZTQzODRkZDE3Mjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSXQMAbr4JsmKbfHIKXK6x6hRhzsjgaOdNcr
G+Qjk1AyQGhl2iraPofSpI4UGab29UO3O2/Txi9zKtt2pYK2GgTCHofv2FIe0WG9
h3AcFwJvYHqPfYH3gb8pvhV8hdo7aUKpTCpHwmSY1tfVsF32z7OKqqxivxY/vsOh
cwWLunrylGqc2OdLia54a5gNy/xIXEhMlvN9OKHI59kuUJJ/ElsZIoQqm/dV0Rgy
YgA97eR59HiB/Y3VuScGricMAQ5I21jPoj5Av5d+ByOPuCIeTl2XLTBmYSjKzfRw
b7Yh91Vhf0k40XOFvkV4AoEWaz8Ua3xHbwhN0X7tBZ2rzoeQTQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFBbuGdO6gq1cr+VWsIV85ktYSkYVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NDAw
NzhmYi02NWI3LTRjNzQtOTIyYy0wOWY0NGYyMjJiNmUvNjJjYWMzMDItMzUyNy0z
ZWYzLWJlYWItY2M1YTNiMzVhNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTQwMDc4ZmItNjViNy00Yzc0LTky
MmMtMDlmNDRmMjIyYjZlLzk0MDA3OGZiLTY1YjctNGM3NC05MjJjLTA5ZjQ0ZjIy
MmI2ZS5jcmwwHwYDVR0jBBgwFoAURfXWqNgA6Q1pJBhwiEjXv87e/9swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85NDAwNzhmYi02NWI3LTRjNzQtOTIyYy0wOWY0
NGYyMjJiNmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4w8MA4E
AgACMAgDBgAmAviiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHXko6ObhJEyWV/6TDagO3xyLWe5lYg+Bx
ebt9LP5KZdWQ5AbWjWYdYBhGYx2/+2F7CDFSHS87L0N3jGfA6KQ1+R2lI4i6FEtY
CFXi/vsvoleJ6JJAT6ZJxvvhmNuBBHijbeh/t+xhJLfnsOeVgKh6NEO+DtOEQfNn
fbYiqOEeZ7Bwnz1nSxeCX4rqYShuh6As3t2YyZNeKDA3X8pQ82wMBQsncwuwGTe0
GvoNU5mthHgxuF35wEhBcpneoRh1GaXC2f5fiGZOQ0Oz2dz7FOoVukaDpHnNIlZw
pJm6fn5kP04M7WKz41N0S6i4G6QEGubUSO+avtqOFl8Mk8XQTr64
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:41:22 2026 by rpki-client