Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
File:                     a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa (raw, json)
Hash identifier:          igSGcObt+yLgeyiWUxIj6MKFydMvEDqcbxHDMRD1NZM=
Subject key identifier:   7F:51:63:79:A8:10:20:6D:C6:AE:40:FF:63:4D:C3:EE:23:5E:B6:2E
Certificate issuer:       /CN=63991382-256c-41c7-9e97-783d23a22bf2
Certificate serial:       010D0C9F4328584AE95B2F1303A82202EC056A80
Authority key identifier: 77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa
Signing time:             Tue 19 Aug 2025 19:47:50 +0000
ROA not before:           Tue 19 Aug 2025 19:47:50 +0000
ROA not after:            Mon 17 Nov 2025 20:47:50 +0000
asID:                     398898
IP address blocks:        23.140.120.0/24 maxlen: 24
                          2620:ae:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:5b:2f:13:03:a8:22:02:ec:05:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63991382-256c-41c7-9e97-783d23a22bf2
        Validity
            Not Before: Aug 19 19:47:50 2025 GMT
            Not After : Nov 17 20:47:50 2025 GMT
        Subject: CN=f2f36131-eb0f-4f53-ad92-853a5a2dd39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:d5:a4:5c:5c:85:de:d9:6b:54:52:6e:fb:
                    1d:f7:f1:0a:18:09:42:d5:da:eb:5f:06:a8:7f:09:
                    d6:ce:6e:7c:87:62:af:07:50:68:84:46:98:11:7e:
                    1d:3f:67:f6:10:da:07:84:be:7a:fc:99:c8:71:9d:
                    2b:9f:9b:9c:c6:2a:73:b1:7f:7c:97:2a:4a:fd:c1:
                    23:13:c4:d7:ee:2a:1a:d8:d0:16:5e:70:e1:f9:cd:
                    e3:95:be:60:79:09:e9:1f:59:f1:07:46:aa:84:a9:
                    63:13:1d:1f:42:15:58:0c:27:f6:d9:02:a0:81:b0:
                    be:65:c2:e7:26:7c:5b:be:36:90:60:45:72:17:8c:
                    6a:24:e0:82:3f:52:c4:5f:25:b3:0d:71:d6:03:c8:
                    2c:0f:f8:7e:0d:0b:69:43:8f:e6:9c:c2:19:77:71:
                    32:54:75:1b:86:86:1b:36:cc:cf:f5:e7:28:6b:b1:
                    8d:44:81:58:dc:97:81:fe:db:f0:bf:e5:e3:21:08:
                    10:f5:5f:3e:e0:c9:c9:b1:22:df:47:fe:66:85:2c:
                    08:3b:86:8e:17:ed:5d:5b:ce:45:50:21:87:80:c5:
                    35:8c:b3:ba:de:f5:7b:05:6e:59:1e:19:3b:f5:9d:
                    00:fc:40:b1:c9:59:3b:1b:c2:32:ba:85:a9:87:c4:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:51:63:79:A8:10:20:6D:C6:AE:40:FF:63:4D:C3:EE:23:5E:B6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/a70bbe8f-0b66-3138-b271-e7f6f8baa334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2/63991382-256c-41c7-9e97-783d23a22bf2.crl

            X509v3 Authority Key Identifier:
                keyid:77:D8:3B:12:D8:CD:DD:F5:DD:A4:11:42:A3:C8:E7:64:F4:21:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/63991382-256c-41c7-9e97-783d23a22bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.120.0/24
                IPv6:
                  2620:ae:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:07:96:54:85:21:c1:67:6c:bf:ec:db:94:be:db:28:a3:
         92:e0:8a:21:a8:c9:28:aa:d3:7f:e4:d2:a7:c3:c2:02:fb:11:
         62:6b:1f:ba:04:c1:0f:a1:81:9d:6e:c1:1c:5d:48:d0:cb:df:
         6d:a5:75:0c:c9:13:fa:ad:d9:a9:ac:92:5b:a4:a2:55:8f:02:
         1d:64:a2:b5:11:73:83:e8:31:1d:6a:86:b2:a3:f9:42:e0:54:
         56:fb:a6:74:96:7d:1b:49:f0:44:19:e5:d8:ad:72:28:28:5a:
         7e:66:2a:43:34:22:9e:6d:56:d4:11:fe:be:81:cc:06:97:c1:
         ea:f4:ca:35:51:e4:72:73:f5:4a:a6:5d:dc:2f:e2:a8:4d:26:
         64:cf:96:31:c8:ab:09:42:4c:5d:06:49:3b:be:b3:11:dc:9a:
         32:44:10:62:ce:f8:f5:43:e6:66:48:1d:ee:c7:6a:1d:b3:b3:
         86:a6:b2:4c:75:73:a0:c0:74:3b:d6:ae:59:90:93:ff:0e:9d:
         2c:6a:fc:cf:eb:46:c5:7f:5f:78:71:9a:01:2a:3c:4b:80:9a:
         42:79:91:ab:a1:c5:bf:a7:15:39:7e:0f:40:f3:22:83:9a:f3:
         72:ca:2f:a8:dd:0c:33:8b:54:9d:9e:47:f7:d3:2f:96:ab:33:
         f6:ea:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 21:23:02 2025 by rpki-client