Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa
File:                     b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa (raw, json)
Hash identifier:          ROAOiZaGddA8AmZ59JN6nqMVeOxg4me+4W95deq+Bjw=
Subject key identifier:   C2:9D:75:E7:AA:F4:1E:54:8D:18:8B:C4:20:7A:BF:17:A1:6D:E8:F0
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584DCAFAFD9EC7784B260A0FDC80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     210574
IP address blocks:        45.59.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fd:9e:c7:78:4b:26:0a:0f:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=3a8fcf35-beb4-4f5f-b6dd-8f86906fe65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:d7:df:6c:55:32:ae:4e:84:df:77:13:b3:
                    6d:1c:17:c2:2f:74:dc:69:87:da:73:78:e9:36:31:
                    d9:f4:11:b9:cc:fe:32:a2:cf:bf:22:4d:9b:ea:73:
                    93:a8:d1:34:68:0c:75:dc:93:15:54:c2:49:16:00:
                    40:63:9d:44:0c:b6:fc:4c:1c:f8:8b:36:3d:a6:88:
                    e5:6f:ab:52:37:3a:ef:5f:e7:02:b5:44:1f:00:4c:
                    75:da:7d:bc:4b:ba:a3:f8:d3:b9:70:b1:a3:c0:a2:
                    ae:6a:9b:19:51:c5:ca:de:55:84:c3:ec:2b:9a:da:
                    db:b4:ef:5d:d7:2e:41:e3:70:26:6d:b6:36:e5:6e:
                    85:1f:db:7a:0d:95:33:c9:5c:8f:fc:9b:08:f0:2c:
                    d8:9e:9f:b5:58:53:9e:42:52:92:4f:f1:1c:65:83:
                    b1:bc:cd:a1:5a:bd:43:7f:a0:fe:f6:ae:37:86:59:
                    7c:52:d6:61:70:01:21:c0:e9:a9:a2:3e:03:51:ce:
                    e2:f2:d6:3b:85:65:79:23:f6:ee:0a:e0:3d:41:de:
                    25:a3:a0:c7:58:b0:9e:b2:2c:6d:9a:d1:e3:c0:ee:
                    7e:74:0b:53:7e:84:e8:2c:80:f6:d5:5e:37:88:5c:
                    4e:80:fe:a8:4e:68:a8:44:6a:cf:f6:ab:88:8a:0d:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:75:E7:AA:F4:1E:54:8D:18:8B:C4:20:7A:BF:17:A1:6D:E8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/b507a2f4-97b6-3189-870b-7c63fd3a23f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:67:d1:3f:18:fb:f5:81:93:0e:fb:29:db:04:49:b9:0d:ab:
         59:56:34:4b:05:6a:79:08:88:78:fe:9d:b6:64:4e:75:fd:55:
         19:8c:70:cc:a0:49:3a:26:5d:a3:ec:76:9d:a7:30:d7:e3:20:
         a9:00:4f:53:d8:56:48:75:27:c7:9e:32:9b:9b:ac:32:bf:9b:
         7f:e1:70:4b:05:db:e2:87:a7:8a:ff:91:5b:b1:a3:59:6f:20:
         91:84:47:93:10:d9:b4:99:48:76:7c:93:d7:c4:8a:8c:53:7d:
         5b:05:cd:b2:ee:5f:f4:e0:86:8b:68:16:ef:da:ac:1f:07:05:
         aa:c1:1a:48:f6:9b:62:29:69:ff:4a:91:e2:66:2d:02:03:d2:
         13:00:70:b1:cc:54:c0:4e:74:f1:f6:47:a7:45:2a:ef:a9:4e:
         b1:8f:c0:c7:c7:a7:6a:95:52:6d:41:6d:aa:ce:39:3d:da:72:
         07:4f:dc:92:92:df:6e:32:c6:64:15:a5:ea:64:9a:5a:20:b1:
         6e:a9:3f:ad:c2:b2:51:17:90:67:1d:9f:b1:26:6a:01:19:d6:
         a8:4e:14:fc:77:60:24:81:18:9c:c4:6d:37:fc:08:e9:e0:2f:
         98:ea:15:03:06:7a:a4:d4:ef:ed:02:6f:d3:27:8d:59:56:33:
         08:59:be:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+v2ex3hLJgoP3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
M2E4ZmNmMzUtYmViNC00ZjVmLWI2ZGQtOGY4NjkwNmZlNjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vfX32xVMq5OhN93E7NtHBfCL3TcaYfac3jp
NjHZ9BG5zP4yos+/Ik2b6nOTqNE0aAx13JMVVMJJFgBAY51EDLb8TBz4izY9pojl
b6tSNzrvX+cCtUQfAEx12n28S7qj+NO5cLGjwKKuapsZUcXK3lWEw+wrmtrbtO9d
1y5B43AmbbY25W6FH9t6DZUzyVyP/JsI8CzYnp+1WFOeQlKST/EcZYOxvM2hWr1D
f6D+9q43hll8UtZhcAEhwOmpoj4DUc7i8tY7hWV5I/buCuA9Qd4lo6DHWLCesixt
mtHjwO5+dAtTfoToLID21V43iFxOgP6oTmioRGrP9quIig09qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKddeeq9B5UjRiLxCB6vxehbejwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYjUwN2EyZjQtOTdiNi0z
MTg5LTg3MGItN2M2M2ZkM2EyM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdn0T8Y+/WBkw77KdsESbkNq1lWNEsFankIiHj+nbZkTnX9VRmMcMyg
STomXaPsdp2nMNfjIKkAT1PYVkh1J8eeMpubrDK/m3/hcEsF2+KHp4r/kVuxo1lv
IJGER5MQ2bSZSHZ8k9fEioxTfVsFzbLuX/TghotoFu/arB8HBarBGkj2m2Ipaf9K
keJmLQID0hMAcLHMVMBOdPH2R6dFKu+pTrGPwMfHp2qVUm1BbarOOT3acgdP3JKS
324yxmQVpepkmlogsW6pP63CslEXkGcdn7EmagEZ1qhOFPx3YCSBGJzEbTf8COng
L5jqFQMGeqTU7+0Cb9MnjVlWMwhZvjA=
-----END CERTIFICATE-----
Generated at Wed May 13 15:04:47 2026 by rpki-client