Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11291ab7-8515-3c80-a493-826db902f1b4.roa
File:                     11291ab7-8515-3c80-a493-826db902f1b4.roa (raw, json)
Hash identifier:          TEALJ89jI6zCELu3/idNPoEZX0O4QgmYb288a14sg64=
Subject key identifier:   AC:24:1C:BE:8A:10:CC:9C:32:45:6D:41:15:BC:A5:03:39:27:C7:1C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F00DCCD261E719C327B78C000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11291ab7-8515-3c80-a493-826db902f1b4.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        45.59.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cd:26:1e:71:9c:32:7b:78:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=0f290286-3915-48ca-b6d2-c516aa4c24b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:4e:26:10:ee:10:4a:b5:e5:4f:5e:25:a2:
                    b3:29:71:99:74:3e:7d:65:85:53:4d:a2:fa:27:61:
                    a8:14:e6:45:3e:6a:7e:36:3e:41:e9:f0:40:7c:2e:
                    1a:8a:38:a4:61:21:18:c3:ed:8a:70:9d:c6:b5:b0:
                    1f:fb:71:f8:e1:cb:8b:6c:1b:86:72:f3:9a:52:ee:
                    ea:b7:3a:4a:fa:73:90:4d:5b:c5:6b:57:bb:d4:a4:
                    8d:fa:8f:da:72:1c:55:cd:0a:5a:2c:08:8e:12:c2:
                    c5:2a:8f:a4:9c:1c:ef:61:ab:18:b1:9b:1e:80:e6:
                    81:92:f4:d3:8a:c5:d1:d6:17:8e:45:f2:b0:4a:a6:
                    eb:b9:ee:32:c8:9c:c5:84:e7:e0:86:9c:35:db:4b:
                    1b:81:8d:5a:44:ff:04:54:0d:6d:1f:a2:b4:1b:3d:
                    08:1e:18:b4:c3:c1:6c:91:b6:e4:81:a0:b2:df:2c:
                    2b:b1:7c:c9:df:15:86:c4:80:70:51:6b:4a:fe:5b:
                    ae:14:14:2c:69:31:48:cd:e3:95:ab:1f:08:7b:ef:
                    8e:3d:4d:29:79:10:ad:9b:1f:fc:be:53:61:a7:99:
                    60:2b:89:cc:02:5d:7f:16:cc:8e:b5:44:f7:5c:12:
                    a6:93:46:08:3a:7f:cf:ef:08:69:7e:27:25:b0:e6:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:24:1C:BE:8A:10:CC:9C:32:45:6D:41:15:BC:A5:03:39:27:C7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/11291ab7-8515-3c80-a493-826db902f1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:cf:66:3a:5a:8b:28:6e:3b:d9:97:d5:79:4d:92:9c:f9:
         b5:fe:3f:7d:25:88:72:8e:8b:a2:9d:b3:fc:6b:33:2f:8b:66:
         78:09:e3:74:df:ba:16:e3:46:66:17:f1:5c:bb:91:d3:ad:88:
         1a:f7:5d:88:6f:80:d3:43:66:83:e1:f5:81:89:38:4a:8f:94:
         93:fa:cd:81:bc:61:7a:71:79:5a:81:66:bc:f5:47:3a:99:f9:
         93:a6:3b:d0:fc:d6:35:34:48:eb:6c:59:e2:67:ee:0b:cb:56:
         30:fd:96:09:24:2a:bc:88:99:cd:20:1f:a8:14:97:f2:13:32:
         b5:d0:66:cc:4c:d5:a1:f8:e1:73:77:b7:b9:63:e6:e4:ea:c6:
         c4:1f:e1:9c:e4:d7:fb:bc:4e:da:a4:84:a0:42:5e:fc:83:02:
         7c:f1:44:3b:66:d9:e2:77:3a:ad:ac:0d:8e:04:85:9a:be:46:
         e2:8c:c0:52:b6:a7:96:4d:c0:8f:6f:26:36:fa:8d:13:1c:e1:
         eb:32:0d:8f:17:ea:c9:28:34:a7:04:df:55:76:56:de:a2:9b:
         66:90:96:e3:c7:ed:47:02:e4:6a:2f:e4:93:04:24:27:db:58:
         a8:3e:c3:17:f9:f4:1a:c3:78:9a:d8:70:26:3e:01:5c:d9:39:
         b0:bf:5e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3M0mHnGcMnt4wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
MGYyOTAyODYtMzkxNS00OGNhLWI2ZDItYzUxNmFhNGMyNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcpOJhDuEEq15U9eJaKzKXGZdD59ZYVTTaL6
J2GoFOZFPmp+Nj5B6fBAfC4aijikYSEYw+2KcJ3GtbAf+3H44cuLbBuGcvOaUu7q
tzpK+nOQTVvFa1e71KSN+o/achxVzQpaLAiOEsLFKo+knBzvYasYsZsegOaBkvTT
isXR1heORfKwSqbrue4yyJzFhOfghpw120sbgY1aRP8EVA1tH6K0Gz0IHhi0w8Fs
kbbkgaCy3ywrsXzJ3xWGxIBwUWtK/luuFBQsaTFIzeOVqx8Ie++OPU0peRCtmx/8
vlNhp5lgK4nMAl1/FsyOtUT3XBKmk0YIOn/P7whpficlsOY3tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwkHL6KEMycMkVtQRW8pQM5J8ccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTEyOTFhYjctODUxNS0z
YzgwLWE0OTMtODI2ZGI5MDJmMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4az2Y6WosobjvZl9V5TZKc+bX+P30liHKOi6Kds/xrMy+LZngJ43Tf
uhbjRmYX8Vy7kdOtiBr3XYhvgNNDZoPh9YGJOEqPlJP6zYG8YXpxeVqBZrz1RzqZ
+ZOmO9D81jU0SOtsWeJn7gvLVjD9lgkkKryImc0gH6gUl/ITMrXQZsxM1aH44XN3
t7lj5uTqxsQf4Zzk1/u8TtqkhKBCXvyDAnzxRDtm2eJ3Oq2sDY4EhZq+RuKMwFK2
p5ZNwI9vJjb6jRMc4esyDY8X6skoNKcE31V2Vt6im2aQluPH7UcC5Gov5JMEJCfb
WKg+wxf59BrDeJrYcCY+AVzZObC/Xsw=
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:00:51 2026 by rpki-client