Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa
File:                     c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa (raw, json)
Hash identifier:          uA57agcdcyJ/hcbXWBxpnsIusoth+xF3dqQ1RVeAjwQ=
Subject key identifier:   05:AD:C7:1F:E6:8B:0D:B6:E4:20:8A:15:99:15:16:EA:99:6D:36:34
Certificate issuer:       /CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Certificate serial:       010D0C9F4328584DAC457FC2E165869F6439B884
Authority key identifier: CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     0
IP address blocks:        69.58.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7f:c2:e1:65:86:9f:64:39:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=5125f802-700f-4ff8-9538-a8dd89e55cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:76:42:6f:ba:55:66:57:f0:65:3a:81:49:
                    21:6f:de:7e:cd:64:98:ae:92:90:ae:18:d2:d8:19:
                    72:d5:57:ee:15:b7:21:ab:8a:96:dd:6b:be:3d:b9:
                    25:d8:76:0a:22:17:24:59:10:26:39:1d:9a:88:0c:
                    99:a9:0f:7d:0d:42:df:5c:6f:7c:3c:9f:50:8b:bd:
                    82:35:52:13:93:4b:22:7e:bf:08:d3:59:8e:12:6b:
                    8a:55:25:0c:b4:1a:2d:73:95:9f:03:b9:78:6b:e0:
                    ab:ef:13:e3:69:09:a9:8a:5f:f2:f1:5c:4c:cf:39:
                    6a:1b:8f:25:35:f8:b2:ef:7b:bf:06:39:a4:92:ad:
                    0e:2b:79:1c:5a:65:71:74:62:cc:82:8f:a4:88:c9:
                    d4:d3:1a:95:7e:08:06:78:90:d0:1d:a9:56:d8:23:
                    b7:f3:db:a0:1b:e7:7e:fa:d9:b8:f6:0a:18:cc:17:
                    03:6b:ff:8a:cd:60:ec:d3:2f:8a:c9:c9:ca:20:1b:
                    cf:69:fc:c6:c9:07:17:ae:98:3b:e2:04:92:eb:d6:
                    a5:2a:b9:95:fe:be:10:d6:cd:5f:38:b0:55:d9:5d:
                    63:00:80:a4:16:62:3f:68:d3:e9:f2:8e:47:5a:34:
                    6f:6d:bf:73:99:13:54:5b:03:a8:a3:6b:f2:e4:ea:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:C7:1F:E6:8B:0D:B6:E4:20:8A:15:99:15:16:EA:99:6D:36:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/c2f05c51-d0a5-3532-af78-fa537d2c3f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl

            X509v3 Authority Key Identifier:
                keyid:CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:14:f9:c9:cf:1d:a4:06:bb:5c:1c:e4:60:fb:3a:90:58:57:
         32:09:72:f8:fd:e5:73:c9:7a:a9:b6:8b:93:b5:2e:d2:29:68:
         bc:bd:80:36:58:c5:75:d2:5c:29:be:03:b1:14:a2:9f:d1:54:
         07:bb:7d:20:cb:7e:83:3c:d3:c8:2f:46:89:27:fe:6c:75:d9:
         88:ca:d4:98:7b:3f:d0:1f:50:71:63:94:e3:d0:82:5c:38:91:
         e9:0f:9a:c9:65:9e:e0:9e:57:d1:86:b5:ff:15:4b:78:bd:44:
         c4:f4:e0:f9:f4:7c:dd:c5:2e:91:cd:12:2f:46:7a:74:e1:c5:
         be:d6:ce:63:b1:29:c9:9b:63:c0:46:ba:35:02:aa:67:b7:b0:
         03:97:dd:9e:76:00:5d:bd:e0:69:b7:22:5b:f9:af:68:ad:d2:
         b8:10:f2:c7:ae:e9:17:cb:b8:5d:3c:c2:fe:84:5a:7d:b0:9a:
         9f:cc:24:39:f9:8b:a6:f3:e6:89:d9:c5:cb:58:06:5f:39:f8:
         5f:79:d1:59:fa:a9:2a:cb:e8:bf:c1:51:de:35:e4:8a:c8:6c:
         0f:be:0e:80:ca:d0:6a:a4:7a:dd:1f:31:d3:60:9d:b3:60:20:
         61:b1:e4:d6:bc:21:4d:51:fb:0d:0c:82:9f:c2:5d:7c:63:dc:
         8d:50:83:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRX/C4WWGn2Q5uIQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU4N2JjMGQtNzc1Zi00YjQ5LTg5YzAtMGQxMmQ4YmRk
YzA1MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NTEyNWY4MDItNzAwZi00ZmY4LTk1MzgtYThkZDg5ZTU1Y2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0x2Qm+6VWZX8GU6gUkhb95+zWSYrpKQrhjS
2Bly1VfuFbchq4qW3Wu+Pbkl2HYKIhckWRAmOR2aiAyZqQ99DULfXG98PJ9Qi72C
NVITk0sifr8I01mOEmuKVSUMtBotc5WfA7l4a+Cr7xPjaQmpil/y8VxMzzlqG48l
Nfiy73u/Bjmkkq0OK3kcWmVxdGLMgo+kiMnU0xqVfggGeJDQHalW2CO389ugG+d+
+tm49goYzBcDa/+KzWDs0y+KycnKIBvPafzGyQcXrpg74gSS69alKrmV/r4Q1s1f
OLBV2V1jAICkFmI/aNPp8o5HWjRvbb9zmRNUWwOoo2vy5Or8iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWtxx/miw225CCKFZkVFuqZbTY0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NTg3
YmMwZC03NzVmLTRiNDktODljMC0wZDEyZDhiZGRjMDUvYzJmMDVjNTEtZDBhNS0z
NTMyLWFmNzgtZmE1MzdkMmMzZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTU4N2JjMGQtNzc1Zi00YjQ5LTg5
YzAtMGQxMmQ4YmRkYzA1LzU1ODdiYzBkLTc3NWYtNGI0OS04OWMwLTBkMTJkOGJk
ZGMwNS5jcmwwHwYDVR0jBBgwFoAUyvBvluJrHYfG+l+9QVgJExhPPsIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81NTg3YmMwZC03NzVmLTRiNDktODljMC0wZDEy
ZDhiZGRjMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTq6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEU+cnPHaQGu1wc5GD7OpBYVzIJcvj95XPJeqm2i5O1LtIpaLy9gDZY
xXXSXCm+A7EUop/RVAe7fSDLfoM808gvRokn/mx12YjK1Jh7P9AfUHFjlOPQglw4
kekPmsllnuCeV9GGtf8VS3i9RMT04Pn0fN3FLpHNEi9GenThxb7WzmOxKcmbY8BG
ujUCqme3sAOX3Z52AF294Gm3Ilv5r2it0rgQ8seu6RfLuF08wv6EWn2wmp/MJDn5
i6bz5onZxctYBl85+F950Vn6qSrL6L/BUd415IrIbA++DoDK0Gqket0fMdNgnbNg
IGGx5Na8IU1R+w0Mgp/CXXxj3I1Qg4M=
-----END CERTIFICATE-----
Generated at Wed May 13 06:46:16 2026 by rpki-client