Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa
File:                     e5ca1f47-d81d-3129-af6e-f848e999731d.roa (raw, json)
Hash identifier:          /m8oL7KE8pbV3XJnhpM7qqxAS5/Melm+p28Wypu9T6Q=
Subject key identifier:   8B:A6:8A:16:E2:3E:BF:81:33:79:25:FE:C5:1A:39:18:CD:F0:36:29
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584F00DCCCF29EC8BF218D4CCE00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        45.59.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cc:f2:9e:c8:bf:21:8d:4c:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=e256cbf5-12d9-497d-bc6a-c2c1caea5261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:bb:43:6c:ef:cd:e2:b3:55:69:56:f1:e9:
                    8a:35:50:5a:83:36:ae:6a:11:bb:37:7e:45:14:69:
                    27:b2:63:c8:06:38:83:b8:97:c6:4b:2f:af:56:94:
                    cb:12:98:e2:cd:a6:d8:27:b7:d2:a1:76:a9:70:74:
                    68:89:8f:da:c1:db:66:35:f4:ae:1a:2f:8d:21:b5:
                    9b:5f:9d:9a:dd:03:d8:c6:0a:14:e1:93:de:6b:0e:
                    59:0d:18:ff:10:0f:42:69:de:a8:de:7d:31:a0:b8:
                    29:29:9a:b6:9a:e5:47:74:13:ed:fa:1c:23:cf:2a:
                    ea:ad:c1:da:ff:fc:4e:34:21:d7:21:54:07:d3:de:
                    04:f8:14:9e:07:19:ef:44:9f:45:fd:bb:cd:9c:7e:
                    2e:a5:17:8b:ba:49:01:b4:a6:20:6d:04:18:d1:65:
                    df:cf:0e:df:85:58:e6:2b:99:e1:ce:68:c2:18:00:
                    49:db:3e:2b:48:a5:5d:f6:57:da:d2:79:2b:f9:a9:
                    20:f3:03:5c:0c:64:e1:a8:25:83:63:9c:83:a7:b7:
                    ef:8e:da:4e:0f:7f:b8:87:71:1d:8a:ca:3e:99:ec:
                    cc:f7:7a:61:12:45:1c:55:9e:81:58:28:ab:ec:3a:
                    76:63:bc:02:01:b6:f2:bc:fe:34:14:d0:2c:4a:6b:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A6:8A:16:E2:3E:BF:81:33:79:25:FE:C5:1A:39:18:CD:F0:36:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e5ca1f47-d81d-3129-af6e-f848e999731d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:02:ef:cf:f1:3f:63:58:3f:38:85:55:76:b8:63:e8:3b:
         be:63:2f:ec:fd:95:3e:2b:f6:79:5a:28:46:9c:2f:60:56:6b:
         3d:4f:3a:a5:75:68:d5:27:d1:89:8e:53:ee:db:dd:7c:4c:d4:
         2a:eb:27:9d:4e:2f:d3:08:41:ae:73:9f:9a:67:7e:d0:8c:7b:
         1a:81:68:d7:a9:97:06:ce:5c:35:af:89:e4:aa:0f:bd:8b:b4:
         07:67:4c:bc:ac:77:53:51:98:61:49:08:4b:4c:cf:c6:7e:d2:
         b7:d7:3e:bf:c7:c8:6c:28:b0:6b:39:b2:5a:6a:6b:8a:b1:50:
         89:26:65:95:b8:3d:0e:64:39:b3:27:c6:ae:46:5c:90:c4:b0:
         46:56:af:ae:9b:25:22:1d:13:c5:bf:67:e0:fe:b4:f5:32:09:
         86:6d:6d:58:5f:36:25:f7:28:1c:4c:76:49:53:de:9f:f7:cd:
         46:fe:b6:72:66:94:17:c5:20:73:d2:a2:b1:ae:05:3d:b7:1d:
         8c:54:7a:aa:45:13:1e:1b:51:be:85:6d:92:a7:09:6c:db:ce:
         5b:0d:85:e7:2d:44:6d:43:77:a0:e8:2e:4b:76:e2:0e:a7:bd:
         b4:9a:98:69:cf:b8:17:87:a3:cd:24:77:7d:b9:8e:7f:d1:03:
         f7:97:b0:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3Mzynsi/IY1MzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZTI1NmNiZjUtMTJkOS00OTdkLWJjNmEtYzJjMWNhZWE1MjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi27Q2zvzeKzVWlW8emKNVBagzauahG7N35F
FGknsmPIBjiDuJfGSy+vVpTLEpjizabYJ7fSoXapcHRoiY/awdtmNfSuGi+NIbWb
X52a3QPYxgoU4ZPeaw5ZDRj/EA9Cad6o3n0xoLgpKZq2muVHdBPt+hwjzyrqrcHa
//xONCHXIVQH094E+BSeBxnvRJ9F/bvNnH4upReLukkBtKYgbQQY0WXfzw7fhVjm
K5nhzmjCGABJ2z4rSKVd9lfa0nkr+akg8wNcDGThqCWDY5yDp7fvjtpOD3+4h3Ed
iso+mezM93phEkUcVZ6BWCir7Dp2Y7wCAbbyvP40FNAsSmuOGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIumihbiPr+BM3kl/sUaORjN8DYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTVjYTFmNDctZDgxZC0z
MTI5LWFmNmUtZjg0OGU5OTk3MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTsBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ36Au/P8T9jWD84hVV2uGPoO75jL+z9lT4r9nlaKEacL2BWaz1POqV1
aNUn0YmOU+7b3XxM1CrrJ51OL9MIQa5zn5pnftCMexqBaNeplwbOXDWvieSqD72L
tAdnTLysd1NRmGFJCEtMz8Z+0rfXPr/HyGwosGs5slpqa4qxUIkmZZW4PQ5kObMn
xq5GXJDEsEZWr66bJSIdE8W/Z+D+tPUyCYZtbVhfNiX3KBxMdklT3p/3zUb+tnJm
lBfFIHPSorGuBT23HYxUeqpFEx4bUb6FbZKnCWzbzlsNhectRG1Dd6DoLkt24g6n
vbSamGnPuBeHo80kd325jn/RA/eXsLY=
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:27:22 2026 by rpki-client