Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa
File:                     23b0f253-78fd-3459-8b84-36256f0f5228.roa (raw, json)
Hash identifier:          4rD5testUDmHuvqhalSBTq4kneA3ahUSiM96tk8ZyFU=
Subject key identifier:   84:7E:72:1B:57:B5:8C:2B:6E:C5:90:95:43:E2:33:E3:D7:C0:FA:C5
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584E2C39AF03858C58231B73E500
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     394352
IP address blocks:        64.234.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:af:03:85:8c:58:23:1b:73:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=24a2cb4b-beda-44f5-885b-a87ceb98b56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:7e:a9:ed:7e:32:9e:40:d3:15:e1:18:66:
                    1f:05:f0:ca:44:cd:ca:d6:78:a2:5f:45:35:ea:dc:
                    9a:b4:65:e4:f7:c1:fd:48:0a:9c:5c:41:74:fc:69:
                    36:53:0f:26:c9:9b:d9:7b:9d:ff:51:bc:f5:43:5b:
                    94:e7:f8:42:6d:3c:9b:5a:ca:f1:50:5d:be:dd:ed:
                    a5:c4:63:36:5d:39:81:f6:32:40:34:a5:fb:b5:89:
                    7a:66:25:29:d3:e6:0f:c0:7c:d6:33:57:a0:8f:4b:
                    5e:dd:ba:b6:a2:76:d8:22:3e:73:3f:20:52:0a:bd:
                    c7:4e:07:73:73:e4:26:4f:ec:03:8d:dc:5a:ec:13:
                    4a:cf:a1:75:2a:9f:be:15:af:b0:3d:9e:98:92:a7:
                    96:d7:76:47:38:47:05:41:9a:ab:c0:3f:4d:1f:08:
                    40:71:31:f1:bf:de:a1:cc:b5:55:ca:b5:9d:f2:08:
                    a9:4a:61:d7:36:09:66:1f:9f:cb:1c:62:a8:26:64:
                    b3:7b:72:fc:11:6c:a5:f6:29:f0:7c:77:8d:77:dd:
                    ac:2d:11:80:52:31:60:d7:00:2f:11:5c:7d:36:ba:
                    01:c4:a1:c1:76:5d:65:ef:0c:e5:81:5d:ec:61:2b:
                    bb:74:ff:11:84:8a:c4:dd:00:73:e1:c6:41:00:5b:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:72:1B:57:B5:8C:2B:6E:C5:90:95:43:E2:33:E3:D7:C0:FA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:77:db:0d:56:31:02:a5:5e:f7:83:97:7c:02:ac:85:5f:67:
         ce:9b:bd:70:e4:0c:f6:c0:1f:76:b5:a9:a7:2b:2b:2b:1f:4d:
         79:1a:1a:39:7a:98:c7:68:65:ff:12:4b:01:37:fa:93:de:aa:
         c5:2c:ef:a5:ef:22:a6:5e:b4:a6:cc:5e:94:a7:ef:40:a0:2c:
         1f:6b:ce:2d:90:75:8a:48:f1:bf:34:f0:15:ae:b9:0a:49:c3:
         b5:af:c2:02:03:bb:2d:2c:7e:47:fa:af:35:9a:07:cc:35:68:
         f2:1d:8f:46:0c:35:bb:e6:8f:c7:81:08:27:d5:7e:c2:a7:52:
         a9:29:af:18:f6:cb:74:85:cd:38:5c:9b:c8:9b:ff:fb:1a:b9:
         ed:23:6e:1b:43:5b:ff:22:22:13:23:ec:80:e0:f3:c0:fb:b7:
         b7:6e:67:e6:1d:4f:5b:99:73:b1:cd:8b:f5:26:0b:e2:c9:3d:
         13:ca:ab:b9:16:f1:ba:c3:f6:7b:d7:1b:7a:2d:3a:00:bf:2b:
         b0:69:1b:6b:a0:8a:31:2a:34:89:86:97:2d:e5:1d:2e:bc:80:
         6c:ea:45:48:7e:b8:a3:68:46:0a:bc:9c:fc:af:9b:09:3e:26:
         06:f7:24:b2:eb:94:db:59:df:54:b0:33:16:f8:cd:3e:e2:65:
         17:7b:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:03 2026 by rpki-client