Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa
File:                     59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa (raw, json)
Hash identifier:          T5mStuUNNUP5f2C5MgZZVm99SYAUsxqQX87z1GnzJ7s=
Subject key identifier:   5C:2B:18:70:68:4F:77:6F:C9:8B:37:76:14:8B:B1:2B:26:BD:B9:63
Certificate issuer:       /CN=e44dc926-726a-4ad2-976b-e9b829bd0554
Certificate serial:       010D0C9F4328584E842A4132480F16A5EE361A60
Authority key identifier: 43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     215748
IP address blocks:        23.157.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:41:32:48:0f:16:a5:ee:36:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44dc926-726a-4ad2-976b-e9b829bd0554
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=32d866d0-ae9a-485c-8fd0-5e74eef95e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:22:f5:31:ea:a8:b4:a7:42:80:0a:e6:61:
                    23:c6:7d:e3:50:38:45:22:9d:3c:21:3a:27:99:a4:
                    23:31:0c:34:66:3a:3a:71:e0:28:92:16:1e:b7:75:
                    5d:92:2d:5f:03:c7:13:22:78:de:33:1f:18:2f:e5:
                    f5:e1:cc:29:da:f0:dc:51:bd:37:36:51:d9:71:96:
                    5f:11:23:80:b0:97:3e:7e:b6:5b:d4:c0:ff:36:23:
                    a0:b7:2d:c2:cb:aa:41:31:00:ef:d0:9f:1b:67:ef:
                    53:52:26:57:b0:86:30:39:35:22:be:9f:65:dd:50:
                    5b:f9:1a:d3:eb:12:60:0f:19:6d:ab:20:22:21:1b:
                    55:71:7f:65:af:8f:a1:c2:f9:5e:e8:62:cc:69:a6:
                    f5:c1:6c:4c:59:71:88:92:66:27:1f:75:a9:6c:0b:
                    9f:d0:fe:67:46:3f:4c:28:8d:77:7d:e8:1d:2d:fe:
                    5e:42:8b:a1:de:3a:81:12:0a:ac:17:ea:12:ce:92:
                    e4:bc:7a:6a:7c:5a:ac:56:79:56:e7:b8:87:ea:50:
                    f5:dc:1d:f3:82:11:0e:32:70:b9:96:83:8a:f9:da:
                    34:39:08:4f:af:8b:f2:04:5b:64:18:ac:bc:cf:82:
                    1b:99:17:c0:d1:a1:e7:ac:b5:74:77:6b:70:f8:30:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2B:18:70:68:4F:77:6F:C9:8B:37:76:14:8B:B1:2B:26:BD:B9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl

            X509v3 Authority Key Identifier:
                keyid:43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:de:16:56:aa:cf:99:4f:6b:63:4e:67:48:ce:dc:dc:25:23:
         1c:7d:4f:8c:c9:9f:a4:23:ba:f5:91:d5:72:eb:05:86:fa:49:
         bc:8d:53:79:27:b6:f5:e7:29:e3:a8:15:49:c2:a5:18:f3:31:
         41:43:10:e1:8c:cc:c4:c6:a7:39:3c:a4:f3:47:71:e9:c8:7a:
         b1:17:5b:0f:c9:0a:85:4b:8a:62:ed:3d:bb:f8:df:2d:b9:d5:
         33:ea:9e:9e:20:6c:de:bd:6f:c2:35:6a:71:fb:6d:7b:71:c3:
         1f:0a:c0:df:0d:49:0a:00:5e:f6:af:42:d6:7c:bd:91:d0:e3:
         9f:3d:ad:cb:bd:90:2b:a3:f8:68:8f:91:1f:83:b8:94:f9:ff:
         c4:4c:1e:d4:50:0f:86:a6:82:59:f8:8b:f4:a5:60:77:a9:39:
         1e:6d:ef:59:7b:e7:a7:f1:45:52:05:d6:b8:78:1f:5a:c7:99:
         7d:b1:60:5f:5b:8c:1b:11:f8:a2:e6:22:6b:7c:67:fa:67:9d:
         ef:70:48:7a:9b:5a:3b:b6:f3:49:fc:20:24:8b:eb:40:15:94:
         d8:1e:6a:6e:19:36:ec:00:4c:39:8d:cb:57:b6:91:76:65:cc:
         8b:de:fb:17:ec:33:8f:ba:05:13:19:f0:cc:fc:1a:45:d7:43:
         94:69:f9:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKkEySA8Wpe42GmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ0ZGM5MjYtNzI2YS00YWQyLTk3NmItZTliODI5YmQw
NTU0MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
MzJkODY2ZDAtYWU5YS00ODVjLThmZDAtNWU3NGVlZjk1ZTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEwi9THqqLSnQoAK5mEjxn3jUDhFIp08ITon
maQjMQw0Zjo6ceAokhYet3Vdki1fA8cTInjeMx8YL+X14cwp2vDcUb03NlHZcZZf
ESOAsJc+frZb1MD/NiOgty3Cy6pBMQDv0J8bZ+9TUiZXsIYwOTUivp9l3VBb+RrT
6xJgDxltqyAiIRtVcX9lr4+hwvle6GLMaab1wWxMWXGIkmYnH3WpbAuf0P5nRj9M
KI13fegdLf5eQouh3jqBEgqsF+oSzpLkvHpqfFqsVnlW57iH6lD13B3zghEOMnC5
loOK+do0OQhPr4vyBFtkGKy8z4IbmRfA0aHnrLV0d2tw+DBvZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwrGHBoT3dvyYs3dhSLsSsmvbljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lNDRk
YzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4MjliZDA1NTQvNTlkMTEzZDQtYjFhZC0z
ZTYzLTgzZDgtNmU3NjA4ZTEyMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTQ0ZGM5MjYtNzI2YS00YWQyLTk3
NmItZTliODI5YmQwNTU0L2U0NGRjOTI2LTcyNmEtNGFkMi05NzZiLWU5YjgyOWJk
MDU1NC5jcmwwHwYDVR0jBBgwFoAUQzpKkeBo5T19qr4+hFxPpk+sPA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lNDRkYzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4
MjliZDA1NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDeFlaqz5lPa2NOZ0jO3NwlIxx9T4zJn6QjuvWR1XLrBYb6SbyNU3kn
tvXnKeOoFUnCpRjzMUFDEOGMzMTGpzk8pPNHcenIerEXWw/JCoVLimLtPbv43y25
1TPqnp4gbN69b8I1anH7bXtxwx8KwN8NSQoAXvavQtZ8vZHQ4589rcu9kCuj+GiP
kR+DuJT5/8RMHtRQD4amgln4i/SlYHepOR5t71l756fxRVIF1rh4H1rHmX2xYF9b
jBsR+KLmImt8Z/pnne9wSHqbWju280n8ICSL60AVlNgeam4ZNuwATDmNy1e2kXZl
zIve+xfsM4+6BRMZ8Mz8GkXXQ5Rp+Z4=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:05:14 2026 by rpki-client