Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa
File:                     0b59db18-9852-39c0-b31b-8a05a0f04091.roa (raw, json)
Hash identifier:          PWOuy3T0V9Y4u9naXdUSRT7H+ljRhiAtRJWAV0vPT1o=
Subject key identifier:   AE:04:B6:09:56:6F:2D:F1:4F:BD:E3:01:E0:F4:C8:30:91:3B:21:F7
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D5E1A868EDFDA63E4A2596D00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     62610
IP address blocks:        23.251.33.0/24 maxlen: 24
                          23.251.36.0/24 maxlen: 24
                          23.251.37.0/24 maxlen: 24
                          23.251.38.0/24 maxlen: 24
                          23.251.43.0/24 maxlen: 24
                          23.251.44.0/24 maxlen: 24
                          23.251.45.0/24 maxlen: 24
                          23.251.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:86:8e:df:da:63:e4:a2:59:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4d650cc2-2c82-4a4a-a6e9-7f81eb187777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:8c:d3:59:86:d4:e7:35:55:f4:0b:ea:9c:
                    50:47:d8:ae:32:a7:30:cb:a2:21:d0:11:9d:10:83:
                    e0:5a:5c:7e:53:50:db:4c:dd:03:14:98:18:2c:6d:
                    ec:5e:47:06:5f:c2:32:94:97:c1:bb:a2:51:cb:56:
                    98:cb:c6:7e:f1:41:77:b1:f1:ff:47:5a:d5:3b:d4:
                    be:45:4c:9a:2b:30:41:3b:13:e7:a9:6a:c8:32:a4:
                    32:5a:fc:b3:b7:25:d1:54:6c:59:28:5e:b8:f1:7c:
                    8e:b6:d7:8c:90:47:00:08:a3:50:6f:7c:1e:c0:24:
                    27:9b:20:5a:e1:40:06:6b:b9:30:19:d0:03:7b:65:
                    43:19:55:94:b1:2d:5f:fe:2f:1d:c8:b5:2d:6f:d0:
                    d5:a5:cf:f8:0e:85:89:11:16:4d:44:07:1d:72:a6:
                    66:35:4c:58:52:32:7b:74:2f:2c:31:33:57:0e:f9:
                    63:76:4c:9f:c5:a1:85:ca:fa:05:1c:a5:79:6b:b7:
                    40:dc:71:34:1b:92:11:fe:eb:65:67:97:a2:2e:34:
                    65:f8:94:de:d7:32:a2:09:3b:8b:7c:e2:3e:39:8a:
                    d7:db:40:65:b7:b5:a3:43:e4:f7:53:1f:bd:b8:d0:
                    35:c4:03:f0:b8:8b:2c:4f:2c:95:27:a2:41:bf:dd:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:B6:09:56:6F:2D:F1:4F:BD:E3:01:E0:F4:C8:30:91:3B:21:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0b59db18-9852-39c0-b31b-8a05a0f04091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.33.0/24
                  23.251.36.0-23.251.38.255
                  23.251.43.0-23.251.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:12:5d:6b:60:4e:fe:a4:37:83:55:43:f4:08:1e:b9:74:6f:
         e4:40:a4:0d:2b:e3:f9:73:b5:26:dc:a6:ba:f6:d9:78:cd:b2:
         5a:8c:8e:3f:5b:f1:2c:23:ed:c0:f2:bb:5c:00:e2:56:4a:1c:
         92:55:1c:a2:9c:85:41:ea:73:76:0e:57:7c:fb:a8:c3:07:fd:
         51:04:2a:0b:65:47:91:42:15:52:65:84:16:b5:68:5b:54:89:
         67:f9:cb:30:13:94:f2:5a:91:14:fe:b3:b6:86:ae:ef:80:e3:
         09:2e:b3:4c:52:5d:82:d3:95:c3:d3:57:ca:1e:43:f6:d2:81:
         1f:eb:6d:d1:62:ab:7f:3a:8f:da:1c:96:87:80:29:e3:d2:21:
         3d:14:39:34:22:06:54:b6:7a:63:7e:c3:9c:e4:4c:fe:99:3e:
         06:e4:ac:2a:53:82:e2:95:f4:e2:5b:c2:8b:3f:2b:4c:c5:cf:
         f7:0a:01:26:9f:65:30:61:39:d7:f0:8c:ed:15:1f:cb:bd:7a:
         20:cd:9a:2a:c0:ce:7f:1a:7b:a3:68:b8:bf:a6:3c:da:93:ee:
         78:75:df:8c:8a:c6:fe:da:1a:82:63:91:8f:73:98:7c:77:0e:
         44:f2:98:be:56:7b:05:0a:93:34:b3:ee:45:91:67:50:1e:8b:
         d8:b4:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:54 2026 by rpki-client