Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/59495c94-e38c-302e-b8f0-97309aa735e6.roa
File:                     59495c94-e38c-302e-b8f0-97309aa735e6.roa (raw, json)
Hash identifier:          DP3R510ZIp6fpigXjDa4MBla7KzH4RVPddlmu32n0tM=
Subject key identifier:   4C:D4:50:6A:0A:38:47:D8:64:16:E1:43:09:9A:D2:3D:7A:63:C4:92
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584D492A672B7AE876A6C5BFD880
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/59495c94-e38c-302e-b8f0-97309aa735e6.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     53334
IP address blocks:        208.95.112.0/22 maxlen: 22
                          208.95.112.0/24 maxlen: 24
                          208.95.113.0/24 maxlen: 24
                          208.95.114.0/24 maxlen: 24
                          208.95.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:67:2b:7a:e8:76:a6:c5:bf:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=31f80bf7-ab69-47f9-bf3c-01c31f7c4998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:f1:14:6f:94:5e:30:4b:7c:86:74:a8:f5:
                    09:0c:58:a8:23:76:5d:1d:80:53:5e:06:02:9c:e7:
                    f5:7a:7b:28:f9:7e:57:d1:cc:eb:6f:9b:4a:6f:62:
                    bb:4b:6b:3b:ed:f3:df:00:1e:5a:41:8c:01:3b:a4:
                    f9:50:0c:9d:c4:10:1a:aa:7f:19:25:a1:0b:17:7b:
                    ec:12:5e:3d:d6:81:f5:b1:fa:58:45:b5:8f:72:54:
                    82:04:7a:30:e5:87:2a:c6:e3:2e:25:7a:02:e6:a3:
                    b1:af:2c:27:df:73:74:bc:13:7b:91:6b:17:33:e7:
                    2e:07:56:b8:c2:da:7a:8e:1e:ba:f7:d3:5e:71:dc:
                    51:8e:65:c2:96:9f:38:e2:30:8f:0e:f7:d9:c3:ca:
                    a5:b8:af:ae:e7:f6:eb:89:01:37:81:2f:55:4b:88:
                    1f:cf:51:3a:10:88:dd:97:ee:83:d1:00:03:fb:d6:
                    3b:9b:a6:b4:4d:b2:9d:61:e4:49:e5:9a:97:31:46:
                    d5:05:da:b6:7f:b6:c5:0e:12:80:4c:7a:fb:31:b0:
                    d1:7d:84:c1:79:70:a7:ba:1c:a1:ec:e2:3b:93:f2:
                    6b:ff:32:a5:e2:b6:37:69:bb:f7:52:25:0f:d8:c8:
                    fa:d7:24:ce:c2:fe:57:05:00:8d:10:4e:ba:be:14:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:50:6A:0A:38:47:D8:64:16:E1:43:09:9A:D2:3D:7A:63:C4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/59495c94-e38c-302e-b8f0-97309aa735e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:18:d6:05:9b:82:bc:70:8f:6e:f3:1d:23:f9:93:d9:99:eb:
         4d:52:e6:20:f0:31:91:7f:38:2e:cd:96:e9:d9:59:44:6f:96:
         9d:fe:e3:ae:68:42:b9:35:f5:01:e5:59:92:22:d1:fb:f9:48:
         3f:de:4a:3f:26:a2:03:9e:2a:f6:3a:e3:95:ca:00:93:02:7e:
         39:f4:7a:05:63:77:10:93:76:6d:e3:68:cc:6f:c8:76:b7:76:
         63:be:9c:6c:62:ba:13:04:a4:8d:2d:3a:7d:37:57:43:95:85:
         05:9e:42:0f:f6:2c:fe:b2:e2:05:a1:0b:f6:82:9e:d6:41:10:
         d7:9c:16:b9:72:3e:f6:1e:d6:4f:ce:a6:65:44:fc:e1:d0:27:
         55:d5:a4:9f:c7:3c:61:a6:77:d1:17:77:0e:15:ae:77:14:02:
         8e:8a:a7:6c:b8:7c:56:79:7c:9f:84:81:bb:4b:42:83:0d:68:
         52:b3:59:3a:a8:44:d9:7c:c3:3a:54:4d:7b:98:e0:15:2a:90:
         65:12:dd:cf:14:98:40:ee:50:e8:a5:cd:28:60:39:40:65:55:
         c4:69:e9:9a:bc:f4:6b:9a:4d:48:a9:4d:d7:39:93:f1:13:86:
         1d:25:c8:68:86:5f:9a:6b:aa:98:64:de:52:07:fc:ec:b7:da:
         a2:10:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:22 2026 by rpki-client