Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa
File:                     e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa (raw, json)
Hash identifier:          F3S8DiM/OselUVvdVzjQWi4WdCGs6truF14xIQAiXdE=
Subject key identifier:   59:99:86:D3:ED:6A:86:FA:0D:F1:FC:6D:79:DC:76:C1:0F:C3:FD:01
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5B8D0CE57E2829B42C380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.59.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:b8:d0:ce:57:e2:82:9b:42:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=f1f35494-d319-4a63-a8ac-c5b49d96fa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:78:02:a8:8c:87:3e:8d:83:f9:d7:85:e6:
                    21:f8:a6:6c:0f:41:39:02:20:17:45:f7:e9:46:13:
                    66:04:77:e8:84:72:bf:9e:82:ac:89:c6:87:b2:8b:
                    05:a3:2b:53:bf:92:c8:91:f2:d2:d7:1a:cd:5d:69:
                    1d:85:00:28:c3:aa:fa:7e:60:41:4e:6c:55:b3:5a:
                    6f:a2:44:84:b3:61:69:78:43:9d:10:1e:bb:97:0d:
                    f6:82:17:4a:c2:46:a5:71:2d:64:f5:ea:77:c2:5e:
                    7a:b0:68:a3:f5:80:f0:de:af:b8:fb:57:bd:f8:bc:
                    be:91:f3:6d:5d:0d:1a:18:b6:5c:51:2e:de:42:8c:
                    4f:69:fb:3f:b8:b8:1f:6c:b8:64:94:5e:e1:e1:55:
                    f6:12:84:2d:f9:15:fa:3f:37:a2:cd:a5:19:ff:e6:
                    de:be:eb:bb:9f:69:70:47:e0:dd:7a:57:b9:e9:13:
                    c5:23:f5:d1:de:aa:f4:47:b7:ea:56:09:72:a0:29:
                    da:52:b5:67:b8:06:54:e5:3d:ea:de:25:b5:79:f4:
                    3c:97:af:f9:4e:6f:70:19:bd:82:9a:fd:ee:0a:53:
                    2d:e5:0c:65:83:d9:c7:ca:e3:bd:fb:65:6d:da:61:
                    fe:ed:24:8c:aa:3f:16:cc:a2:b8:01:b1:27:2a:0a:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:86:D3:ED:6A:86:FA:0D:F1:FC:6D:79:DC:76:C1:0F:C3:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e55a060d-7f02-305b-abc6-4fdfa88f6a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:a1:99:8f:a2:f7:77:7f:45:cc:b5:2f:a9:76:27:b4:01:
         34:7e:cf:7c:06:2c:52:6d:b9:52:43:f4:3a:19:48:ad:af:18:
         87:e4:63:37:8f:82:68:31:a6:9a:9f:c0:7a:fd:32:30:7c:15:
         6b:4e:fe:1f:cc:e6:46:88:9c:ef:c7:63:40:f8:08:53:87:4e:
         85:1b:ee:d1:50:d6:11:73:28:e1:b2:a4:b6:45:05:8a:c0:f1:
         a3:85:aa:0e:a9:3a:af:a7:8b:2c:12:d6:81:79:44:e6:21:25:
         cf:57:eb:19:20:1a:17:77:0d:3e:16:7d:22:a1:8b:b1:47:1a:
         cd:a6:64:f2:6d:86:65:8f:f7:84:01:f9:4c:52:e0:03:52:c6:
         98:2c:ff:89:96:af:e2:19:e5:e0:76:94:bb:b9:a6:0b:97:7c:
         cf:b5:dc:ef:bd:9f:fe:e1:f1:06:4c:7c:10:fb:25:53:03:00:
         fc:4d:e4:7b:29:91:8e:bc:c7:a2:f6:94:3f:5a:6d:30:57:a1:
         f2:18:f0:20:de:29:ae:32:a5:85:12:30:97:9d:7d:72:77:3a:
         4c:90:5e:0a:13:70:0f:e8:13:c6:6b:8b:f7:76:55:95:36:64:
         48:bc:7b:21:8a:31:cd:7f:4b:36:71:d8:0a:94:dd:d0:03:68:
         c3:66:e2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxbjQzlfigptCw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZjFmMzU0OTQtZDMxOS00YTYzLWE4YWMtYzViNDlkOTZmYTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7V4AqiMhz6Ng/nXheYh+KZsD0E5AiAXRffp
RhNmBHfohHK/noKsicaHsosFoytTv5LIkfLS1xrNXWkdhQAow6r6fmBBTmxVs1pv
okSEs2FpeEOdEB67lw32ghdKwkalcS1k9ep3wl56sGij9YDw3q+4+1e9+Ly+kfNt
XQ0aGLZcUS7eQoxPafs/uLgfbLhklF7h4VX2EoQt+RX6PzeizaUZ/+bevuu7n2lw
R+Ddele56RPFI/XR3qr0R7fqVglyoCnaUrVnuAZU5T3q3iW1efQ8l6/5Tm9wGb2C
mv3uClMt5Qxlg9nHyuO9+2Vt2mH+7SSMqj8WzKK4AbEnKgpHbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmZhtPtaob6DfH8bXncdsEPw/0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTU1YTA2MGQtN2YwMi0z
MDViLWFiYzYtNGZkZmE4OGY2YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzdoZmPovd3f0XMtS+pdie0ATR+z3wGLFJtuVJD9DoZSK2vGIfkYzeP
gmgxppqfwHr9MjB8FWtO/h/M5kaInO/HY0D4CFOHToUb7tFQ1hFzKOGypLZFBYrA
8aOFqg6pOq+niywS1oF5ROYhJc9X6xkgGhd3DT4WfSKhi7FHGs2mZPJthmWP94QB
+UxS4ANSxpgs/4mWr+IZ5eB2lLu5pguXfM+13O+9n/7h8QZMfBD7JVMDAPxN5Hsp
kY68x6L2lD9abTBXofIY8CDeKa4ypYUSMJedfXJ3OkyQXgoTcA/oE8Zri/d2VZU2
ZEi8eyGKMc1/SzZx2AqU3dADaMNm4u4=
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:47 2026 by rpki-client