Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa
File:                     23b0f253-78fd-3459-8b84-36256f0f5228.roa (raw, json)
Hash identifier:          MtNEd+FOupavXrl0a+mR97eCoINukZVLadX8euJvpy4=
Subject key identifier:   4F:B8:24:C2:19:5A:2F:FB:56:12:02:54:14:67:CD:41:FF:6F:BD:9C
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584ECE9C7487598A170DCD94A080
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     394352
IP address blocks:        64.234.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:74:87:59:8a:17:0d:cd:94:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=0f584a77-ca36-4c90-9847-30bf6f71129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:91:34:79:75:68:8c:d5:86:62:ef:48:b6:
                    17:0d:58:68:35:93:7a:86:b3:ac:15:62:43:52:34:
                    62:2b:48:7c:8c:f9:84:1d:42:09:21:2b:d9:7c:30:
                    90:07:bb:97:c1:5e:de:fc:18:64:be:c6:42:b0:9f:
                    8f:ed:b3:a4:2a:29:3a:b3:e1:94:dc:90:be:e2:5f:
                    0c:6c:32:46:72:7a:38:30:c0:20:e1:1a:af:2b:3d:
                    0e:ce:ef:c7:4c:70:d1:96:57:51:92:e5:4b:19:25:
                    b7:71:a5:66:eb:b9:41:96:3d:04:8b:72:1f:71:21:
                    fe:2a:09:13:8e:dc:dc:29:16:57:a0:5c:9b:97:20:
                    5e:b5:cc:fb:b3:c0:3f:f3:95:39:54:ee:60:f2:b0:
                    ba:e6:a4:6c:74:b0:65:c0:2c:43:ab:39:44:e8:c9:
                    4e:21:7e:8a:bd:80:a6:42:9a:31:17:07:13:89:0b:
                    81:47:21:f8:ef:4a:8e:e0:3a:2f:eb:96:f9:87:0c:
                    19:dd:64:1f:d8:1b:02:46:76:f7:d1:d3:44:3b:e5:
                    1e:40:77:fa:7b:d4:25:b3:bc:7e:e7:ee:ae:d0:c2:
                    44:75:52:c7:ac:4b:c5:52:27:ba:d4:d1:b9:c4:4b:
                    ea:2c:73:83:1a:7f:9c:b7:8c:15:ae:8d:8f:99:86:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B8:24:C2:19:5A:2F:FB:56:12:02:54:14:67:CD:41:FF:6F:BD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/23b0f253-78fd-3459-8b84-36256f0f5228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:35:3e:48:0e:43:45:20:79:5d:28:90:87:65:e5:61:16:e7:
         ca:68:21:d6:40:25:2c:fc:20:86:58:ca:03:45:12:73:fa:bb:
         dd:ab:90:21:64:99:08:4e:fb:56:c7:3f:7f:31:1b:b7:4c:53:
         4b:1e:6e:e6:47:f0:b2:5d:bd:d4:d5:4b:25:c2:e6:aa:4f:0c:
         57:d0:be:80:29:3b:1b:7e:da:e5:9a:38:1f:8a:6e:6e:f6:17:
         58:9a:5e:92:a7:6b:84:09:a6:51:bf:b2:83:a3:6c:59:c8:8a:
         4b:88:a0:00:94:a1:2e:b8:f0:61:98:fb:b6:94:1a:03:48:2f:
         f4:73:43:33:eb:29:7e:55:f4:f5:8e:3d:af:55:b6:5d:c2:3f:
         81:6d:50:7e:12:c2:0a:78:21:b6:e7:e4:7d:88:e1:da:2b:22:
         a7:05:6a:fa:c1:ca:89:24:07:d4:db:00:99:80:56:49:00:83:
         02:dd:15:9c:8a:01:8d:98:6d:e1:93:d3:b3:b1:a5:19:ea:1d:
         56:fd:a1:79:61:1c:a1:c0:f5:75:9e:8a:ed:41:b1:d0:f9:ca:
         d7:44:c5:6c:1a:a7:75:2f:96:6b:d6:7c:7b:60:43:5f:eb:d2:
         d1:64:54:27:8b:48:5f:b2:f7:7a:55:c1:96:cc:92:16:94:3c:
         f8:9b:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:26:01 2026 by rpki-client