Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa
File:                     9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa (raw, json)
Hash identifier:          ej/YkxmJVqDoyyxatOULdVlMmJIzkYre9A0nyXhfcmk=
Subject key identifier:   05:11:AF:B2:D3:F6:01:62:EA:2C:ED:05:FC:E5:95:8A:FB:02:55:2F
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F4328584E97B5082CD4E8827779935000
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     36131
IP address blocks:        69.57.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:08:2c:d4:e8:82:77:79:93:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=72a5bc96-788a-434f-91ad-4788a74addbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:ea:13:33:ed:a2:24:1b:c2:5b:07:bb:d8:
                    2a:53:3d:27:e7:79:90:f7:d9:dc:01:02:29:fe:df:
                    8a:6c:2b:e8:a1:41:76:dc:0b:dd:a1:2b:30:6d:32:
                    d7:38:95:0d:d4:ed:62:96:2e:f7:bc:4d:0c:d0:6b:
                    6f:e9:c6:2b:0f:0b:eb:79:e6:d7:ac:bd:91:98:3e:
                    b5:ff:ea:6f:bb:d7:a0:ad:59:39:97:b3:04:64:0c:
                    7d:d7:e1:7a:0c:8d:2e:02:b9:af:9d:94:c6:d0:b2:
                    76:d5:77:79:e1:ce:ee:72:df:ff:58:94:59:09:61:
                    54:f7:e1:ff:c4:4b:c8:f2:bd:2f:d0:d4:ce:c1:d1:
                    c0:b3:1a:7a:65:0f:35:31:e8:54:8a:96:77:c2:02:
                    b2:be:50:3c:2d:66:a1:e8:fd:86:fd:43:73:7e:61:
                    3c:af:a8:b7:36:e1:52:98:f8:20:e5:55:0c:9c:29:
                    fb:c9:67:98:0d:cd:3a:16:59:f8:cf:fc:c4:59:da:
                    0a:c7:c1:cc:31:cb:aa:d3:7b:be:c8:af:d1:49:cc:
                    91:ee:7a:9d:78:45:7d:de:e0:7c:5d:2f:97:b5:ec:
                    f3:6e:ca:0e:5a:97:93:01:1e:f9:91:f1:fe:bf:eb:
                    05:4b:ac:f6:17:ca:80:05:0d:a8:a2:01:39:14:aa:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:AF:B2:D3:F6:01:62:EA:2C:ED:05:FC:E5:95:8A:FB:02:55:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/9ef513b6-1797-3d6b-bb78-9772e3048ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:58:3b:a3:e3:34:61:0d:9c:ba:84:3a:0f:6c:f0:5c:3c:
         9d:45:81:60:04:5b:89:8f:3f:94:20:ea:db:06:2d:6d:88:23:
         d7:97:a9:30:1f:ce:29:32:79:ef:fd:b6:93:23:50:41:1d:1d:
         43:98:ef:6e:32:bb:98:3f:be:fc:0d:02:37:b1:2c:d7:41:71:
         7a:e0:b7:78:e1:87:d9:46:ca:58:f7:8c:45:4a:d7:fd:68:9a:
         f6:cd:18:bc:2f:6f:1d:b5:97:5e:f5:bd:35:a2:bc:28:5f:19:
         ec:6e:9a:f3:82:d2:ad:0e:51:bc:01:4f:21:db:b1:6e:a4:7e:
         62:dc:ba:b9:59:d6:3f:3f:4c:89:73:fe:78:b0:80:44:40:85:
         3d:5d:31:8e:93:4d:75:05:85:2d:83:b0:d2:04:5f:7e:7b:eb:
         c5:6f:1a:f7:07:51:1b:a0:d2:d2:7d:70:6d:4f:96:83:06:1e:
         06:f1:47:98:46:bf:70:80:b8:8b:ff:77:96:0b:82:ec:77:29:
         a0:86:13:cd:33:10:dc:15:d2:4c:ef:18:dd:16:f1:f0:e7:ed:
         7d:33:95:61:5c:5a:10:c0:70:25:db:86:07:56:e8:ce:37:43:
         0d:1d:bc:e6:ef:55:51:4d:4e:c7:d1:78:e6:b7:bb:f2:e0:1f:
         65:34:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:44 2026 by rpki-client