Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
File:                     53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa (raw, json)
Hash identifier:          RMZC/oHxPB4XErNHX1fmiynYcjOakIdZLUt4AOrfmR4=
Subject key identifier:   2D:CD:90:D4:76:DF:BC:94:95:B5:BC:AC:7C:6D:AC:A9:AD:17:9C:8E
Certificate issuer:       /CN=04723749-feb1-4da5-ac21-ba89ad1d057e
Certificate serial:       010D0C9F4328584D5E1A570A1F0821A0F673E800
Authority key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     398766
IP address blocks:        23.252.16.0/20 maxlen: 24
                          124.198.160.0/19 maxlen: 24
                          162.118.96.0/19 maxlen: 24
                          2605:eb40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:57:0a:1f:08:21:a0:f6:73:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04723749-feb1-4da5-ac21-ba89ad1d057e
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=6adb8bcc-d273-43f5-994b-301445df61f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:2d:81:fa:95:28:6d:cf:ba:41:4a:75:94:
                    a3:a2:5c:c5:3c:06:b5:c7:76:76:62:fa:2a:b7:e8:
                    cb:49:f9:54:70:44:ee:ea:bf:4a:df:e7:06:a1:79:
                    ba:e1:1d:8d:8c:e6:ee:e3:77:2f:2f:1f:d1:f7:5f:
                    55:80:23:e1:29:90:36:82:40:9f:0a:f0:11:79:f7:
                    56:c6:63:7c:de:7b:47:2a:b2:5c:99:5b:5f:77:9c:
                    5d:8f:65:38:5e:9c:58:f4:5d:d3:6f:0b:9e:89:17:
                    6e:3c:91:b5:3e:1f:b5:da:2c:48:da:c6:b2:9e:2c:
                    8c:18:ae:53:5d:f4:b2:d9:5c:7e:59:69:52:57:f9:
                    ed:fa:18:44:2e:87:8d:70:24:8c:5b:b1:c5:24:8d:
                    50:dd:72:0d:32:d4:f2:e7:67:00:87:fc:94:bc:2b:
                    5e:ed:a1:a6:c1:ff:4b:20:af:8a:70:c6:fa:8e:78:
                    ca:e0:86:32:ac:de:45:ce:66:8e:02:e2:02:9f:67:
                    e8:80:21:23:13:7e:30:4f:59:ad:14:cc:e4:6b:88:
                    8e:71:e3:45:00:07:11:67:7b:73:45:bd:da:53:9b:
                    99:3c:cf:79:31:ad:49:df:ee:07:0d:43:2e:4a:96:
                    8e:d1:fe:44:c4:d4:3f:00:65:b2:56:bb:48:1b:fc:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:90:D4:76:DF:BC:94:95:B5:BC:AC:7C:6D:AC:A9:AD:17:9C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/53b0015c-a0ec-3ab9-a799-bfa8ff1e26ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.crl

            X509v3 Authority Key Identifier:
                keyid:60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.16.0/20
                  124.198.160.0/19
                  162.118.96.0/19
                IPv6:
                  2605:eb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:05:46:4c:f5:a6:08:d1:3f:3c:cb:a0:0f:73:62:b1:7a:ca:
         5f:94:32:77:5b:25:80:57:ca:cd:f4:2e:b6:50:1a:66:48:45:
         f2:ab:8c:d8:1b:d0:df:e2:58:71:e0:f2:fd:df:df:9b:d0:96:
         dc:85:c3:de:14:f1:ce:a7:7e:58:0f:fa:3f:d6:5e:91:f3:9a:
         f4:5d:7d:29:a6:00:4c:7b:20:8d:a6:c0:69:be:04:03:cf:a7:
         e6:a0:e1:c7:74:83:23:6a:81:1e:50:5a:86:86:0b:2c:20:fa:
         32:2d:1b:c2:59:87:8c:fb:95:37:cf:bb:ea:b9:ab:c3:ec:41:
         3c:ba:74:7f:0a:c4:aa:ef:86:b1:3f:23:21:53:77:cd:ab:aa:
         c0:21:43:22:39:ee:43:b4:1c:7c:c2:5d:b3:f3:fe:0a:f3:de:
         b1:6d:4e:1c:3f:cf:90:79:4a:5c:bc:29:6e:47:56:1f:82:b0:
         13:e3:bd:5b:d1:ec:63:2d:15:d7:42:fd:2c:3e:0d:1d:df:4e:
         a9:cb:fa:34:ac:b4:b8:e2:ee:bc:a3:51:3a:f4:65:e2:93:b0:
         6e:52:99:6e:fb:78:ea:25:17:a5:2c:aa:8c:2c:9b:18:a5:30:
         17:37:c0:9f:11:67:d6:1a:3d:67:d2:eb:e5:2e:03:18:f4:64:
         17:06:c1:38
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE1eGlcKHwghoPZz6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ3MjM3NDktZmViMS00ZGE1LWFjMjEtYmE4OWFkMWQw
NTdlMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NmFkYjhiY2MtZDI3My00M2Y1LTk5NGItMzAxNDQ1ZGY2MWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsktgfqVKG3PukFKdZSjolzFPAa1x3Z2Yvoq
t+jLSflUcETu6r9K3+cGoXm64R2NjObu43cvLx/R919VgCPhKZA2gkCfCvARefdW
xmN83ntHKrJcmVtfd5xdj2U4XpxY9F3TbwueiRduPJG1Ph+12ixI2sayniyMGK5T
XfSy2Vx+WWlSV/nt+hhELoeNcCSMW7HFJI1Q3XINMtTy52cAh/yUvCte7aGmwf9L
IK+KcMb6jnjK4IYyrN5FzmaOAuICn2fogCEjE34wT1mtFMzka4iOceNFAAcRZ3tz
Rb3aU5uZPM95Ma1J3+4HDUMuSpaO0f5ExNQ/AGWyVrtIG/xheQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFC3NkNR237yUlbW8rHxtrKmtF5yOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDcy
Mzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQxZDA1N2UvNTNiMDAxNWMtYTBlYy0z
YWI5LWE3OTktYmZhOGZmMWUyNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQ3MjM3NDktZmViMS00ZGE1LWFj
MjEtYmE4OWFkMWQwNTdlLzA0NzIzNzQ5LWZlYjEtNGRhNS1hYzIxLWJhODlhZDFk
MDU3ZS5jcmwwHwYDVR0jBBgwFoAUYCgys349DM6p+VFIw46950dX7EswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5
YWQxZDA1N2UuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEF/wQAwQF
fMagAwQFonZgMA0EAgACMAcDBQAmBetAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAYFRkz1pgjRPzzLoA9z
YrF6yl+UMndbJYBXys30LrZQGmZIRfKrjNgb0N/iWHHg8v3f35vQltyFw94U8c6n
flgP+j/WXpHzmvRdfSmmAEx7II2mwGm+BAPPp+ag4cd0gyNqgR5QWoaGCywg+jIt
G8JZh4z7lTfPu+q5q8PsQTy6dH8KxKrvhrE/IyFTd82rqsAhQyI57kO0HHzCXbPz
/grz3rFtThw/z5B5Sly8KW5HVh+CsBPjvVvR7GMtFddC/Sw+DR3fTqnL+jSstLji
7ryjUTr0ZeKTsG5SmW77eOolF6UsqowsmxilMBc3wJ8RZ9YaPWfS6+UuAxj0ZBcG
wTg=
-----END CERTIFICATE-----
Generated at Wed Apr 15 20:10:16 2026 by rpki-client