Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa
File:                     a37593aa-4999-3250-9d18-4320c2f39adb.roa (raw, json)
Hash identifier:          zuu1LM6hPcLzcB5VA3/jIo7xBEAiOTwEO6nGXZ3MUdk=
Subject key identifier:   A8:EB:76:05:04:C3:9A:83:65:E9:83:CA:9C:9F:6C:94:12:BE:9F:40
Certificate issuer:       /CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff
Certificate serial:       010D0C9F4328584E46BF230349696B86AE269500
Authority key identifier: B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        23.133.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:23:03:49:69:6b:86:ae:26:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f6e545-1944-4ca0-a155-69ded2cdb1ff
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=e275412c-17e6-45da-88be-dcb572cc6a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:4c:88:a7:74:5c:82:8f:13:fb:4d:16:99:
                    56:5d:ed:90:88:cf:34:f4:92:eb:93:3f:26:db:68:
                    96:4b:28:ef:ba:de:0d:2d:ef:a8:65:59:b4:0b:d6:
                    03:5d:3e:a6:d3:6e:b5:a7:a2:6b:56:66:e7:6b:2a:
                    45:81:e3:1f:d1:d5:a3:33:4a:fa:39:19:d5:1f:21:
                    f3:18:ce:9b:c1:2b:15:03:1e:db:31:81:9b:ca:2e:
                    9b:23:84:bb:b3:34:32:ee:a5:6b:29:aa:40:57:d0:
                    5e:bd:b5:dd:09:41:b3:bb:77:be:44:2c:ed:c3:a4:
                    d8:10:08:96:a3:b7:0a:0b:fb:7c:74:0c:c6:f0:a9:
                    dd:b3:45:1c:98:ae:5d:89:c2:4c:ba:c0:b9:25:78:
                    a5:78:b7:c7:52:1a:f3:81:3f:97:81:aa:1c:94:2c:
                    96:02:af:68:d5:af:25:c4:cf:77:03:c5:2d:f9:fc:
                    42:18:72:f6:8f:05:4c:bf:22:09:98:26:73:80:7f:
                    77:41:53:92:cc:2b:9a:94:6f:42:7a:48:bd:70:ca:
                    9c:6c:e3:ca:f8:98:15:56:f7:b9:15:c2:1c:78:c7:
                    33:79:ed:00:09:67:39:1f:52:a0:ad:77:6a:93:d9:
                    fe:77:63:25:a5:15:22:3c:70:64:37:27:8f:83:c5:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:76:05:04:C3:9A:83:65:E9:83:CA:9C:9F:6C:94:12:BE:9F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/a37593aa-4999-3250-9d18-4320c2f39adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff/59f6e545-1944-4ca0-a155-69ded2cdb1ff.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BF:AF:3E:1D:EA:CE:3C:8C:79:E1:3C:75:42:1B:FF:C3:64:37:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/59f6e545-1944-4ca0-a155-69ded2cdb1ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:29:7e:94:1c:48:42:85:cd:6e:41:4d:f6:ad:3d:15:2d:
         d4:1c:eb:84:6e:44:27:da:ca:37:3f:62:91:42:45:20:08:b1:
         53:c9:4f:23:30:d2:b3:1f:bb:8e:5b:aa:ef:6a:ee:54:89:17:
         59:27:fe:6f:03:bb:62:47:da:2b:40:4b:be:a7:c0:6b:f1:a6:
         dd:bb:e6:9f:41:7d:3d:60:59:1a:91:6f:5f:76:dd:83:70:e3:
         27:ff:6e:cc:65:a3:01:dc:91:fd:8a:e7:d8:36:c5:c8:43:52:
         a5:d9:d6:13:d6:1e:70:0d:f0:3a:97:35:25:c2:dc:62:de:3c:
         93:1b:c3:ca:37:0a:ad:41:30:dd:53:b7:d7:b9:13:97:af:a7:
         79:92:f4:de:1f:4b:29:e1:40:ac:5d:37:97:98:cd:3e:a5:99:
         e4:9c:74:0a:96:3f:ed:b1:fc:0f:3a:f9:a4:cf:28:12:b6:dd:
         ab:5e:98:f0:2b:ab:c3:aa:17:03:90:1e:6e:ba:57:db:ad:1e:
         6e:fa:f0:39:19:fb:c6:1c:fa:02:b7:b6:ac:08:5a:b0:86:89:
         1f:66:f6:69:99:8f:7d:70:65:3d:6a:25:d9:ec:37:75:a9:e1:
         9d:8b:3f:c8:14:48:83:47:ff:1e:d0:01:5f:32:70:0c:d4:65:
         82:dc:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:13:43 2026 by rpki-client