Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa
File:                     e4ed5f04-d7cb-364e-8090-9a0f23158775.roa (raw, json)
Hash identifier:          MyluOFaDRDNblJhEdT7ZGKM6Whdb8CLCrneqDn7njTk=
Subject key identifier:   C6:A9:6A:97:86:14:C8:A0:B7:A9:6E:72:7A:7D:FF:69:44:50:E1:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F6F2303D600B96ED1410E5400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     21342
IP address blocks:        23.59.248.0/24 maxlen: 24
                          23.59.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:03:d6:00:b9:6e:d1:41:0e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=0441a6ce-4c5f-4afe-8e3d-b80a9f728a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:e7:58:41:c6:96:61:6b:ac:f9:23:08:55:
                    b6:1a:81:49:91:f1:cb:b9:15:11:90:39:88:73:a2:
                    d2:a8:10:fe:34:77:ed:74:88:14:08:12:fb:e1:77:
                    91:45:00:47:a2:8c:c4:3e:67:70:3a:1d:aa:b8:4b:
                    44:0e:78:d2:f0:f0:65:b3:62:7c:e9:22:1e:a4:eb:
                    c1:73:a8:d7:6c:7b:04:9c:f0:d2:95:63:dd:03:7c:
                    f6:1f:8e:5a:04:35:94:64:4a:45:75:4f:0b:d0:e1:
                    50:39:61:b6:06:63:33:26:af:7d:74:cb:cc:95:ec:
                    3c:f4:35:bc:d6:f4:0f:89:ff:3c:fa:58:56:21:84:
                    09:8c:8f:6d:1a:af:3a:dd:1d:1a:6b:a3:b9:90:ce:
                    c6:4d:2f:47:f6:92:e5:d5:c4:c0:e7:a7:4b:a4:d8:
                    e4:4b:38:4d:b6:b1:30:db:05:db:74:2c:c6:46:76:
                    85:83:b7:d6:ca:d7:d1:89:31:30:0e:a4:b1:f1:6a:
                    21:22:3b:bc:3b:98:80:54:c0:fd:ee:cf:c4:32:a6:
                    1f:79:ea:41:5b:56:df:a1:ad:8e:c6:c5:cf:90:74:
                    80:ba:1b:36:cd:02:bc:e9:e1:57:65:42:9c:58:67:
                    8b:19:da:ad:6d:2c:dd:80:e6:5a:33:da:67:7b:dd:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A9:6A:97:86:14:C8:A0:B7:A9:6E:72:7A:7D:FF:69:44:50:E1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ed5f04-d7cb-364e-8090-9a0f23158775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:58:9e:87:76:c1:b9:26:0a:0e:22:f8:5e:a2:92:30:73:1f:
         15:ed:04:41:6a:60:26:ee:4e:f6:e6:10:ee:08:3f:a4:23:2e:
         9e:ec:6d:34:87:ec:ea:50:17:9a:fa:97:92:3a:c2:a8:ac:32:
         9b:2c:79:6e:37:f1:04:67:a8:a3:01:8b:61:43:66:6a:22:05:
         da:7f:cb:85:a2:df:28:a6:1a:a0:ab:cc:cd:c0:47:c7:5b:d5:
         b7:c4:62:1f:fa:93:79:9d:15:7c:89:9f:38:50:62:39:0d:c5:
         20:5b:3b:54:7b:97:98:47:ad:5a:f3:a1:9f:34:c6:ae:00:e4:
         a1:76:fc:e8:dd:71:6d:fc:e9:3d:dc:12:7d:ae:9b:9d:55:77:
         66:02:4e:a9:22:59:17:e1:48:73:bc:33:d9:ad:8d:54:38:e9:
         d2:9e:22:b7:db:b5:f3:ff:c7:27:59:12:5f:2e:50:70:d2:e0:
         96:90:76:1c:09:70:f8:7c:27:8a:8a:f6:33:72:33:de:09:99:
         44:d8:38:26:c0:4c:8d:85:0e:9e:c1:ef:ed:a3:11:0f:4e:ff:
         db:ca:a9:07:53:6e:1b:a5:84:97:4b:e5:1e:2a:82:c2:db:8b:
         8f:63:09:5d:7f:2b:83:60:7c:13:6c:04:76:fd:89:d9:3c:78:
         a6:f6:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:08:50 2026 by rpki-client