Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa
File:                     22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa (raw, json)
Hash identifier:          d1EVOpkEdvL+dHUDAF5xCgL73B42Zi++W9JSP52tvvM=
Subject key identifier:   51:E1:19:BD:9C:50:54:25:59:80:1C:38:83:94:20:DE:82:28:F0:FF
Certificate issuer:       /CN=f1151c8e-10a0-40dc-b592-f275bf602484
Certificate serial:       010D0C9F4328584E4559E5F661EC2F05E0772400
Authority key identifier: FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     2914
IP address blocks:        23.135.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e5:f6:61:ec:2f:05:e0:77:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1151c8e-10a0-40dc-b592-f275bf602484
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=8fa9df83-a426-4da0-ace8-b49a712ebec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:bc:b6:95:86:d0:a6:9e:f5:aa:c3:21:43:
                    62:33:78:2e:93:08:79:6f:0b:eb:16:7e:65:b0:c3:
                    e2:4b:06:c5:b2:0d:2d:bc:7c:be:8c:75:83:fb:57:
                    f4:84:52:93:a9:3e:65:11:dd:34:2e:da:5f:1d:3d:
                    49:81:68:0d:3d:1b:b0:9e:07:3c:9b:f7:98:f3:0b:
                    46:51:ef:d0:14:67:8e:2e:5f:ff:ff:a3:59:e6:a2:
                    c6:dd:54:db:9f:eb:ac:b0:7d:3b:9d:24:4a:2c:39:
                    dc:4a:9b:fc:29:b3:7e:9f:46:3c:96:10:bc:4b:da:
                    af:b6:11:d5:0d:d0:d8:0a:f8:85:e1:ae:f4:6c:21:
                    96:cf:5a:b5:e7:a5:13:84:91:ca:a2:16:4e:cb:f6:
                    bc:3d:c5:0a:d0:28:8e:91:a6:47:6b:07:dd:de:57:
                    1e:f7:8c:db:b9:24:b6:de:40:a2:e5:fd:7e:e5:2e:
                    d4:11:f4:ff:84:e1:fc:13:be:7d:26:b7:c4:4c:1b:
                    3a:95:7c:c9:53:48:6e:85:fc:6e:1e:da:8b:84:b8:
                    e8:54:0f:dc:8b:5a:93:57:9b:3e:36:ec:2a:ed:ba:
                    a5:8d:04:ee:fa:27:aa:55:2c:9a:b6:f7:00:5e:d6:
                    7d:39:be:c5:1e:10:f0:0a:e8:cb:fd:46:27:a1:fd:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:19:BD:9C:50:54:25:59:80:1C:38:83:94:20:DE:82:28:F0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.crl

            X509v3 Authority Key Identifier:
                keyid:FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:32:a9:ed:9d:c5:a3:c3:14:b1:98:9f:36:ce:8b:3a:90:
         d8:62:e6:df:4d:12:1f:22:4d:0b:a6:ee:bb:8d:0c:4f:fb:a0:
         8b:fc:6e:e3:c3:31:d6:ec:17:a6:7c:9a:fd:7d:13:91:a1:d4:
         48:c8:c1:94:2d:be:f8:47:fd:76:12:63:2f:77:ef:d3:6f:5d:
         91:b3:87:48:2c:b1:d7:3d:04:2e:1f:2a:cb:9c:5a:05:d6:61:
         fe:fd:55:f0:3c:90:f2:4d:ab:4d:4e:89:53:dd:d4:36:8b:4f:
         71:25:e5:eb:a9:b7:a4:fd:db:51:bc:ee:1f:95:81:b8:6e:e7:
         5d:83:dc:bb:ce:a7:63:97:e1:1b:fb:35:0d:36:bb:e0:3c:41:
         a5:d4:0c:c5:34:9a:bb:c5:43:59:b9:94:c3:c6:5a:e2:e9:38:
         19:f4:77:e8:35:ef:10:26:ff:55:ed:05:87:2c:a9:df:be:c1:
         07:39:6e:d9:6b:61:8d:88:70:44:bd:43:40:75:f7:fc:3a:0a:
         5b:3a:0b:f8:81:b6:8c:bc:5e:f2:74:fc:72:26:58:f1:b4:a5:
         26:3f:d3:14:4e:e7:df:4d:22:c7:8f:22:56:44:60:ef:01:bc:
         c8:b2:9b:e9:be:9c:a6:d1:03:19:e9:35:b8:ea:63:a8:46:61:
         1c:cf:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:13:24 2026 by rpki-client