Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
File:                     3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa (raw, json)
Hash identifier:          S/F/7NTpSacw1ECkKxyjtBi00FKwY3XBNQXssoEwhFI=
Subject key identifier:   B8:0C:90:87:21:D0:07:78:54:FC:57:64:4C:7A:4F:A2:C0:88:58:BF
Certificate issuer:       /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial:       010D0C9F4328584E9D4A703B5486A7803427CAB0
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     53610
IP address blocks:        23.159.24.0/24 maxlen: 24
                          2602:fa53::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:70:3b:54:86:a7:80:34:27:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=bc21f75c-91c3-43f7-a8e4-9f21e7819647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:e2:c7:28:19:a9:c9:f5:51:18:21:42:c7:
                    b6:38:63:c3:46:3c:8c:0c:b1:11:9c:13:26:56:15:
                    e0:f6:51:86:56:21:c3:d7:41:4f:24:ca:60:eb:cb:
                    a5:fb:86:97:92:2f:9f:ce:ea:1e:f9:03:6b:97:b3:
                    6d:ac:45:f2:10:dc:ce:aa:88:88:cf:96:81:d3:44:
                    1a:d7:2e:cc:33:99:a4:e6:1c:9a:55:f0:58:11:60:
                    5e:52:c9:4e:0c:82:2b:5d:19:46:61:3b:a1:bd:84:
                    fb:81:b6:fa:d6:6d:8e:09:ac:49:bc:d7:33:f6:b1:
                    5c:3d:1d:7d:3b:44:f1:ad:ef:78:54:4b:37:50:7a:
                    8b:fe:44:0c:89:50:9e:64:59:ed:41:66:96:eb:d9:
                    77:a6:87:7b:60:45:3c:6d:a2:61:f9:dd:6b:d1:93:
                    da:55:b6:5f:35:ae:dc:f0:c8:59:1a:4f:b9:e4:fc:
                    fd:3f:76:f6:f4:c5:38:95:ab:67:de:86:f5:6e:fb:
                    38:cd:51:d9:bb:03:36:1a:92:32:54:ee:e2:29:01:
                    40:08:b4:bd:0f:67:89:87:fa:98:7f:0d:79:4c:77:
                    98:d2:c3:5c:69:32:cc:fe:38:8b:da:1a:07:68:4b:
                    f7:66:c0:24:26:7b:2f:06:9d:3c:07:5b:59:09:46:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0C:90:87:21:D0:07:78:54:FC:57:64:4C:7A:4F:A2:C0:88:58:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/3a9db1a0-6721-3d8d-85d4-6477c9be6f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl

            X509v3 Authority Key Identifier:
                keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.24.0/24
                IPv6:
                  2602:fa53::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:e5:d5:0a:5e:75:87:16:35:f6:3d:8c:92:43:e6:2b:05:
         00:35:ef:7b:58:b1:c8:b7:86:d3:e3:6b:98:61:c7:f9:8c:63:
         7c:b9:69:c4:e9:6b:8a:c3:51:83:ef:9d:f4:f2:95:88:0b:d9:
         d4:8d:e4:48:59:d4:04:c0:5a:4a:fb:ac:b1:d2:5f:b7:cf:24:
         0c:f6:75:b5:da:ef:46:47:0e:39:a3:0c:76:8b:64:35:b2:fc:
         4c:a9:22:8f:86:00:f4:0f:7c:07:04:9b:f2:e1:46:c3:c2:56:
         e2:56:8d:22:42:b1:53:83:66:3e:65:f1:ce:f3:d4:52:41:66:
         3d:1f:30:53:e0:d2:61:7c:d6:07:b8:12:de:fd:6b:63:27:3d:
         30:b9:21:24:78:25:1d:49:77:9d:d0:f5:c9:38:8d:77:9e:1d:
         bc:c5:11:4e:b5:15:de:95:8b:b6:b0:63:2d:fc:10:9b:4c:37:
         3b:1f:a3:41:18:5f:cb:4e:8c:db:4e:51:f2:3f:5a:39:b9:bb:
         7d:e9:81:45:34:0e:ab:bb:cb:2b:43:3c:ef:44:f7:6c:e5:c8:
         d9:e7:d5:e7:81:52:f4:2b:f1:4c:00:22:7f:dc:49:34:e6:02:
         42:1e:6a:04:ea:a1:69:14:84:1f:b4:0f:40:37:c9:65:39:58:
         9d:64:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:07:17 2026 by rpki-client