Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd0ed93d-b8ea-3c36-9915-ef84604f25af.roa
File:                     dd0ed93d-b8ea-3c36-9915-ef84604f25af.roa (raw, json)
Hash identifier:          NOBMJiQsslqUOytUKrT1tr1UZubU3wIZvaN0+h8yuSg=
Subject key identifier:   50:D6:07:21:1D:99:B9:1B:5E:16:B9:4E:60:35:AC:0B:A3:E2:E2:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD35B18DB75C0D5554C7FA500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd0ed93d-b8ea-3c36-9915-ef84604f25af.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.210.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:18:db:75:c0:d5:55:4c:7f:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=a1904494-7787-427f-a991-27fcc72d48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:5e:92:7d:f2:1a:8b:05:ca:ee:19:95:0f:
                    e3:63:bf:cf:82:ad:d1:f0:b6:5a:78:72:11:51:6f:
                    69:36:b9:67:8a:6a:cc:c4:8f:da:2b:fb:d8:9b:35:
                    65:11:e8:98:74:02:fa:9f:3e:e7:c2:10:06:1a:8b:
                    70:6e:d6:df:ab:09:48:6a:af:5e:d9:bf:42:ce:70:
                    74:7f:5a:c4:38:07:d1:06:41:56:84:60:fb:85:4b:
                    4f:1f:9c:4a:5c:c5:ef:42:fd:48:10:44:f8:76:fd:
                    53:66:a5:e4:7b:50:54:22:bf:18:90:81:ce:e9:d0:
                    16:2f:c8:e5:f2:d8:82:4b:11:d6:f3:10:87:4b:f6:
                    5b:c0:0e:cc:85:1b:81:a6:92:9c:1a:1b:e1:d6:76:
                    56:93:5b:39:47:0f:6c:66:89:6f:76:b0:c4:f4:14:
                    12:bb:7f:ee:65:4d:03:52:4b:26:9d:c1:6f:62:2f:
                    06:9a:86:5b:dc:1d:90:0d:0a:7d:3e:ae:14:d6:2f:
                    ce:f8:94:c6:6c:c5:ef:fd:81:2a:90:e1:69:65:71:
                    5f:15:1a:85:44:fb:5b:66:46:5f:cc:e3:29:12:69:
                    22:0c:08:db:fc:67:17:8d:0b:c0:e3:d4:ff:df:ed:
                    a7:83:dd:55:1a:18:93:d3:f5:d7:f7:ab:ca:21:e7:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:07:21:1D:99:B9:1B:5E:16:B9:4E:60:35:AC:0B:A3:E2:E2:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd0ed93d-b8ea-3c36-9915-ef84604f25af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:25:5a:69:59:c5:45:e1:7b:2a:f7:fd:ff:6d:9c:63:42:
         77:19:81:ce:83:32:e5:fb:c6:4b:26:bf:c2:fa:53:7c:fe:c8:
         4c:2e:3f:8e:22:d8:50:6b:00:6c:2a:c6:e1:9b:b7:54:64:2b:
         fe:9d:46:53:76:66:8e:bd:96:5d:03:21:4f:6c:8b:57:22:6c:
         f5:92:33:ef:ab:04:74:49:2d:51:f8:4b:26:2f:72:1e:85:db:
         9a:47:e5:0c:92:2f:5e:de:a7:ef:65:3d:04:73:c1:b3:48:a9:
         f9:7c:78:8d:c9:04:ac:d5:ea:6d:3f:0e:a6:b3:b9:a0:fb:f7:
         04:1a:d9:b2:7f:ab:46:69:66:25:e9:bc:7d:23:6c:56:98:5a:
         df:83:b8:e6:fa:c2:ed:a2:f9:96:34:e9:0d:fc:53:f6:b2:c3:
         1a:8f:30:99:ce:8b:36:f2:9c:02:12:58:27:82:7e:86:b8:ea:
         fd:f8:0c:62:0b:9d:cb:b2:58:0c:12:2a:9d:31:81:9c:84:58:
         28:0c:88:48:67:75:1b:8b:13:21:32:41:c7:f2:cb:a4:a0:88:
         dd:93:df:11:e2:cb:00:e6:44:eb:77:8d:78:14:ad:21:fe:98:
         0c:28:28:08:a5:a3:34:cb:4c:68:1d:88:24:f6:03:e9:af:f4:
         36:7b:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:08 2026 by rpki-client