Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa
File:                     2add9fe1-48d4-3387-8e97-eee33e138e28.roa (raw, json)
Hash identifier:          nyrQQ3BnnNkXmlEv0j8ZrPmzu9Qs7TQcJioWYrvvDnw=
Subject key identifier:   AC:52:24:80:95:42:6D:C3:E6:63:2F:47:12:0D:0B:0C:D9:77:CF:5B
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584D4D5A680A55226FA06A49B680
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     7794
IP address blocks:        23.248.0.0/17 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:68:0a:55:22:6f:a0:6a:49:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=5aaf891b-37ad-4529-a5f6-6df21a0bd4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:28:59:e4:74:be:27:e1:51:3c:bb:f5:1a:
                    8d:4b:a8:04:09:6d:65:f1:4a:4f:a9:fb:d6:f7:7e:
                    88:95:df:52:d9:83:48:ea:65:6d:78:a5:b0:15:be:
                    2e:f5:a6:33:f6:93:aa:f7:0e:cb:07:b8:b1:53:3c:
                    9a:22:5e:c3:cd:d3:5a:b2:04:7d:0d:a3:84:f4:61:
                    a7:ee:6a:03:64:b5:23:8d:1f:0d:03:a4:a3:e5:b7:
                    40:b8:6e:e5:c8:03:0b:cb:c1:87:3b:69:0e:cc:c2:
                    cc:b6:96:48:ac:ed:0c:97:64:97:be:a4:7d:df:51:
                    ce:ce:f9:4d:82:47:0d:22:32:3f:8f:55:c0:44:ac:
                    ce:ba:f2:b6:1d:48:95:a0:12:61:fc:fe:0e:90:91:
                    3a:93:fc:24:1c:73:42:54:56:ae:64:5d:11:3f:9d:
                    5e:eb:b9:56:04:08:a6:0b:fa:32:fb:48:e1:4e:4b:
                    4b:58:de:be:5b:c8:8b:13:3e:29:ad:9e:c7:9d:0c:
                    e8:67:c2:6a:ca:55:96:27:61:f4:30:61:bd:f2:ff:
                    e6:e6:fa:51:38:3c:7a:79:17:ae:11:04:85:af:dd:
                    31:26:de:90:01:5e:e7:4c:dc:cf:43:e9:3b:f1:b2:
                    2e:41:a1:b2:e8:74:33:db:5c:3f:60:fa:2c:ac:82:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:24:80:95:42:6D:C3:E6:63:2F:47:12:0D:0B:0C:D9:77:CF:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/2add9fe1-48d4-3387-8e97-eee33e138e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:97:1f:b6:f5:a5:63:c4:15:59:59:71:f6:b6:55:63:dc:1f:
         3e:d6:42:b6:9b:7b:c3:ff:7e:88:8a:4e:59:af:5d:9e:60:72:
         b4:08:2e:b2:64:ac:41:8d:bb:0e:da:a4:c2:f2:46:05:7a:de:
         82:f4:20:d7:47:a4:93:9d:3a:67:57:c8:f4:34:15:27:3c:9d:
         87:b3:96:1f:4c:76:76:80:ad:d5:ee:83:5a:d1:a4:e8:36:53:
         f3:e7:48:9e:6c:26:84:51:25:68:35:77:79:e2:28:c1:50:fc:
         9e:55:b3:f8:b7:0e:e4:b9:3d:b4:11:39:e4:4a:a4:1c:2c:ab:
         f2:02:e2:b0:ac:13:39:6e:9f:b6:e3:8d:17:71:8a:fd:13:d9:
         91:f1:15:9e:32:42:04:4c:8a:6d:4f:b0:3f:4b:e6:90:c0:c9:
         4e:59:d9:35:ed:df:c8:3a:ae:f1:58:ed:63:be:4b:1d:59:67:
         85:7a:26:88:a6:ca:7b:82:4a:d8:18:86:7f:ec:7c:ef:bb:25:
         17:30:cb:37:06:c7:ad:aa:81:37:12:79:90:4b:d7:ac:b9:56:
         f1:34:77:db:af:dc:00:e5:e9:f1:03:5c:16:34:68:3e:cd:23:
         b3:c7:e8:7b:67:7e:60:d4:17:22:2e:dc:05:d4:f9:74:47:ed:
         14:0f:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 23:26:56 2026 by rpki-client