Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa
File:                     59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa (raw, json)
Hash identifier:          8R7YLWxNG8lqr69DNu4hNq6W6eoGMAHKckJZvcIzAj0=
Subject key identifier:   F1:19:54:EE:87:3E:0F:71:96:5E:38:B5:36:36:FC:91:A5:72:09:02
Certificate issuer:       /CN=e44dc926-726a-4ad2-976b-e9b829bd0554
Certificate serial:       010D0C9F4328584DA476605A193109C46DA3CFC0
Authority key identifier: 43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa
Signing time:             Mon 27 Apr 2026 05:52:39 +0000
ROA not before:           Mon 27 Apr 2026 05:52:39 +0000
ROA not after:            Sun 26 Jul 2026 05:52:39 +0000
asID:                     215748
IP address blocks:        23.157.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a4:76:60:5a:19:31:09:c4:6d:a3:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44dc926-726a-4ad2-976b-e9b829bd0554
        Validity
            Not Before: Apr 27 05:52:39 2026 GMT
            Not After : Jul 26 05:52:39 2026 GMT
        Subject: CN=58436ccb-a782-4865-bc2e-e24e7b7d8f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:1b:d8:bc:c3:b7:51:79:60:e7:2f:51:76:
                    8f:73:b4:62:a6:e6:5e:4a:6b:5a:e1:ae:81:c8:cc:
                    f1:df:41:19:75:7d:c3:8b:c9:f1:04:81:69:95:98:
                    5e:fa:74:ce:5c:de:e4:35:84:3e:02:fa:b2:03:25:
                    67:85:a2:86:b7:48:0d:34:c6:66:ff:b8:db:3b:e8:
                    1b:cd:b0:4d:70:1e:ec:06:51:89:75:c1:bd:0c:c4:
                    5a:a6:9e:86:d6:98:b0:56:44:74:a6:07:d0:2b:90:
                    d0:f4:d4:87:78:09:0d:62:02:45:9e:26:f0:8d:80:
                    e4:20:a2:fd:a4:77:c3:ea:ef:3b:2f:a2:fe:0c:76:
                    a7:7f:76:b0:9e:dd:c6:41:dc:d4:47:c9:34:06:a2:
                    b9:18:72:9c:48:b1:b9:73:3e:9b:fb:97:6b:2d:db:
                    76:7a:05:d5:10:e1:30:e8:29:90:7e:77:c4:17:75:
                    43:ac:98:74:f2:a8:76:a1:0e:7c:d4:a3:b2:cd:97:
                    bb:d1:a3:8d:eb:47:72:09:b2:4c:09:a4:16:48:ff:
                    ac:4f:d1:0f:ef:95:b4:3a:23:3c:02:a0:bd:97:f7:
                    6b:8c:97:34:63:d2:5f:09:17:48:8c:e0:11:0b:b3:
                    5f:5c:20:16:4e:91:3f:80:b5:60:22:69:19:a9:57:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:19:54:EE:87:3E:0F:71:96:5E:38:B5:36:36:FC:91:A5:72:09:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl

            X509v3 Authority Key Identifier:
                keyid:43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:2e:c6:1e:29:be:be:0c:5f:4b:f9:33:0b:2d:a5:4d:e7:
         b8:e8:2c:1a:02:a0:40:2b:c9:5c:6b:dd:1a:b5:7c:1e:c6:2d:
         c3:13:31:47:b0:6b:f9:4e:cc:da:12:13:cf:89:60:05:40:97:
         42:32:a7:bf:45:1a:ef:55:f1:30:ad:36:54:38:ef:ee:14:5f:
         1b:40:ab:07:9d:ad:e6:0f:bb:a5:af:78:8f:5f:3c:2b:c9:c0:
         bf:04:47:ae:09:b1:aa:a8:0c:e8:5a:f7:23:6a:ed:3b:0b:d7:
         12:ec:e3:ac:2e:8f:71:ee:78:1d:20:96:88:14:1a:34:9b:cf:
         5a:76:cc:e5:6b:cf:40:9c:b7:2d:cb:3a:7b:84:69:89:62:7e:
         94:2e:c7:2b:8b:6a:cd:e2:e0:98:82:4d:8a:db:f0:1b:86:ec:
         eb:69:f0:09:81:21:5c:26:0c:03:a5:f2:cd:75:f3:a1:0c:d8:
         a5:b6:5b:22:40:bf:ea:27:90:4c:ba:ae:40:af:23:57:b7:e2:
         f6:dd:a3:21:fe:bd:de:89:f2:f1:37:b5:9a:f3:41:18:55:5b:
         db:53:38:0f:52:91:8c:8c:76:34:d6:15:99:96:f2:ca:f1:f3:
         1f:ce:b0:80:ea:e1:0b:fa:45:0c:04:ac:34:8c:c4:ca:42:78:
         61:48:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:00 2026 by rpki-client