Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
File:                     3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa (raw, json)
Hash identifier:          EfAdh7x1wMPiQdNzvyG5FBOqUjfHnszncGMZiHvVo+s=
Subject key identifier:   30:CA:37:25:60:6D:81:AD:B4:88:9C:42:00:2A:B4:B2:33:01:BC:B7
Certificate issuer:       /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial:       010D0C9F4328584DBD059BC02DB2E5A6C4C1D100
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     53610
IP address blocks:        23.159.24.0/24 maxlen: 24
                          2602:fa53::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9b:c0:2d:b2:e5:a6:c4:c1:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=29d47c9d-ee51-4b7d-aaec-9cd92d26a610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:46:5e:72:01:4c:4c:08:c9:eb:29:b1:7c:
                    7e:79:4c:06:e8:aa:6e:be:f9:f9:d1:1e:ee:3c:c0:
                    80:10:2e:52:76:c3:a9:3b:7a:bf:df:7f:d7:38:f9:
                    71:89:33:9d:c4:8a:4e:7f:98:73:76:43:d9:4a:ba:
                    76:73:74:cf:72:ad:75:34:54:52:96:ce:9c:bf:aa:
                    ff:5d:eb:70:47:79:5a:92:bd:e5:97:7d:0f:e8:1c:
                    e1:8f:6e:09:55:0b:51:ff:64:b0:88:c7:f1:e1:15:
                    e1:32:52:bc:13:76:b9:d9:ee:dc:0e:36:ef:92:53:
                    62:9a:0c:d5:61:18:b0:8e:10:ca:b7:be:ea:8d:3c:
                    a6:dc:19:e6:f5:4a:7b:a1:13:39:a5:53:01:06:d7:
                    13:f6:e2:fd:da:22:be:35:eb:6c:a7:40:1e:6c:0e:
                    26:97:be:67:67:99:bd:dd:91:3f:f9:4e:55:09:06:
                    ad:a6:eb:87:0d:70:bf:96:4d:4c:96:dc:12:8d:07:
                    86:4e:58:04:08:54:53:e4:61:b4:b6:5b:bb:ed:5b:
                    5e:d2:06:d6:83:47:f6:13:f0:9b:f8:d6:43:96:4d:
                    d6:1f:d1:ee:23:cf:ad:50:39:a0:2b:ba:e2:be:70:
                    e3:9e:e6:17:5d:f8:09:1b:66:dc:68:72:01:ec:f6:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CA:37:25:60:6D:81:AD:B4:88:9C:42:00:2A:B4:B2:33:01:BC:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.24.0/24
                IPv6:
                  2602:fa53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:65:cb:0d:15:f6:54:7a:94:4b:a7:38:47:e9:0f:36:4a:14:
         ca:fc:95:1f:11:7a:6d:99:0d:cb:13:eb:70:cc:20:61:2e:87:
         bb:82:3b:68:e4:dc:76:f2:a7:bf:83:ba:5d:2e:4d:02:12:8c:
         a5:d3:fb:63:fb:3f:50:bc:93:85:ff:28:69:e4:ba:fe:ea:73:
         11:01:a0:13:4f:90:a4:03:7e:94:b0:0f:33:e5:cf:c1:02:0f:
         60:2e:7f:40:ca:7a:76:c8:8c:62:01:ee:1e:a6:6b:04:29:f3:
         a3:b4:20:27:21:36:82:17:3d:4b:79:0f:12:42:fd:12:0c:9b:
         a6:e7:e3:e3:86:a0:18:34:7e:d3:b5:33:d1:e4:1a:96:a5:e1:
         42:dd:e7:60:a9:c1:a4:02:8d:4c:6a:09:6d:7a:25:59:bf:cc:
         27:0c:ec:e8:40:89:2b:19:79:41:e6:67:89:4c:bd:e9:cc:f4:
         b3:51:3d:61:d6:96:e4:1f:b3:57:43:fe:ca:89:78:7e:2e:cf:
         a8:bf:92:a2:88:62:50:76:95:5f:cf:93:08:c9:94:fc:c0:f4:
         31:7c:83:3a:04:7d:3c:e8:76:c8:27:8c:a1:98:b5:5b:28:92:
         8a:31:97:0a:62:7c:f5:d9:46:df:38:fa:d6:11:04:5e:49:f6:
         6a:23:8e:8c
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE29BZvALbLlpsTB0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0
Yzk4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
MjlkNDdjOWQtZWU1MS00YjdkLWFhZWMtOWNkOTJkMjZhNjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNlGXnIBTEwIyespsXx+eUwG6Kpuvvn50R7u
PMCAEC5SdsOpO3q/33/XOPlxiTOdxIpOf5hzdkPZSrp2c3TPcq11NFRSls6cv6r/
XetwR3lakr3ll30P6Bzhj24JVQtR/2SwiMfx4RXhMlK8E3a52e7cDjbvklNimgzV
YRiwjhDKt77qjTym3Bnm9Up7oRM5pVMBBtcT9uL92iK+Netsp0AebA4ml75nZ5m9
3ZE/+U5VCQatpuuHDXC/lk1MltwSjQeGTlgECFRT5GG0tlu77Vte0gbWg0f2E/Cb
+NZDlk3WH9HuI8+tUDmgK7rivnDjnuYXXfgJG2bcaHIB7PYnOQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFDDKNyVgbYGttIicQgAqtLIzAby3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5
ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvM2E5ZGIxYTAtNjcyMS0z
ZDhkLTg1ZDQtNjQ3N2M5YmU2ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk
ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1
NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1
ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E
AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDLZcsNFfZUepRLpzhH6Q82ShTK/JUfEXpt
mQ3LE+twzCBhLoe7gjto5Nx28qe/g7pdLk0CEoyl0/tj+z9QvJOF/yhp5Lr+6nMR
AaATT5CkA36UsA8z5c/BAg9gLn9Aynp2yIxiAe4epmsEKfOjtCAnITaCFz1LeQ8S
Qv0SDJum5+PjhqAYNH7TtTPR5BqWpeFC3edgqcGkAo1MaglteiVZv8wnDOzoQIkr
GXlB5meJTL3pzPSzUT1h1pbkH7NXQ/7KiXh+Ls+ov5KiiGJQdpVfz5MIyZT8wPQx
fIM6BH086HbIJ4yhmLVbKJKKMZcKYnz12UbfOPrWEQReSfZqI46M
-----END CERTIFICATE-----
Generated at Wed May 13 08:58:08 2026 by rpki-client