Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa
File:                     45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa (raw, json)
Hash identifier:          XdfX5Jyn3nIKxu+mqUbbcjxPDMczZlM1qkheZaLJZo0=
Subject key identifier:   58:21:1E:74:19:88:BD:7C:CE:05:82:C7:06:23:B2:EC:B5:AE:19:06
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED27B0C6EBA20AFF99113A30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     24319
IP address blocks:        23.59.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:b0:c6:eb:a2:0a:ff:99:11:3a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=a124d8a2-ab44-4a48-825b-2331128b092a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:6c:00:c4:2a:cc:08:b4:3e:f1:02:7f:e6:
                    8b:c4:74:c9:13:c9:64:40:fd:7d:29:96:ad:2b:66:
                    d8:bc:e2:57:ab:53:8a:b5:c2:0c:80:7f:5c:00:c8:
                    f0:f6:11:dc:7a:57:8f:9a:d3:31:42:54:f8:7a:7e:
                    51:f6:c5:10:a6:78:77:04:b7:3e:72:63:22:9c:76:
                    41:66:f7:4b:a9:96:07:b5:06:4f:d8:4a:1d:47:68:
                    b0:c6:ea:d4:ce:16:16:68:87:00:ec:67:bf:bc:d6:
                    73:d9:5d:10:c8:99:5b:ef:97:ba:be:f0:8a:f3:75:
                    13:db:36:53:fe:a8:75:1a:0f:51:f5:0d:4e:70:04:
                    a4:2b:16:f3:06:cb:ff:94:24:8c:7c:05:e6:44:e7:
                    b5:b9:bb:c7:f9:10:9b:56:4f:1c:c1:3e:d1:88:37:
                    0f:13:97:4d:fb:c2:b5:7a:70:b7:9c:66:df:e1:e6:
                    a4:fc:4d:b6:6f:28:b8:dc:4e:0b:d5:38:15:98:ad:
                    a2:36:e3:ea:89:c0:a5:8e:14:0f:25:b5:bf:25:e4:
                    2f:3d:2d:55:2e:09:d5:13:f2:19:61:b9:88:72:fd:
                    f2:b9:0c:bf:e4:d0:a9:88:5e:7d:cd:9e:fd:e6:5b:
                    73:c3:71:a7:29:2e:bb:21:09:d1:a9:40:02:1b:b0:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:1E:74:19:88:BD:7C:CE:05:82:C7:06:23:B2:EC:B5:AE:19:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:25:a3:7f:bd:41:7e:ae:06:27:b1:16:90:f1:6a:9c:fa:c9:
         42:4f:44:83:1d:5c:d2:7f:0e:c0:77:7c:fa:df:7e:ea:2c:49:
         d0:71:87:f2:c5:d6:c9:7a:a8:ae:fe:e3:e3:95:dd:28:d4:d1:
         43:5a:af:5e:38:0d:0f:5d:64:20:1b:84:dd:91:93:3f:91:75:
         29:8b:34:78:fc:09:8d:09:5d:2b:b8:78:fd:2f:50:12:fe:3e:
         c9:b9:d6:b7:b5:96:71:f5:98:78:7b:27:01:e9:57:2a:e4:0b:
         12:c1:a7:77:e8:3e:8f:e1:12:38:22:9c:94:7e:0c:3f:ce:97:
         75:98:36:17:ac:91:cb:31:04:90:00:92:b6:1e:e9:b4:25:69:
         3e:4e:3a:91:a3:db:05:89:52:89:95:ae:a1:b4:05:7f:d2:5f:
         5d:5d:7b:e0:f9:dc:7b:44:d3:34:e6:e6:54:a4:ea:0c:e1:e2:
         04:f8:60:a3:63:59:32:f8:1d:40:72:97:bb:e5:77:11:39:b4:
         07:d0:48:b2:45:23:df:49:01:c0:8e:de:14:41:69:45:fe:e2:
         82:da:22:fb:49:00:c8:f8:1a:85:83:d0:1e:01:88:44:79:05:
         90:cf:52:28:2f:d4:18:95:73:bf:a1:e5:99:6b:e7:e2:23:19:
         74:9c:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:17 2026 by rpki-client