Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/59521d2b-69e2-35bc-9892-cb46064d5cdb.roa
File:                     59521d2b-69e2-35bc-9892-cb46064d5cdb.roa (raw, json)
Hash identifier:          nQbwuseNuzDjLVufnpKspNpcHDyDCAksXsGRmUVh1jg=
Subject key identifier:   6A:0A:47:96:C3:78:20:9E:EB:40:98:08:3F:18:76:7D:92:77:EF:69
Certificate issuer:       /CN=d3f45ed0-f7cb-4b11-898c-6889f47f74d6
Certificate serial:       010D0C9F4328584E921FADB839E7DD0CC027B020
Authority key identifier: E4:70:71:94:D3:62:2D:A8:2A:4F:C3:56:5C:9D:E4:5F:52:1F:CA:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/59521d2b-69e2-35bc-9892-cb46064d5cdb.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     13465
IP address blocks:        68.67.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:ad:b8:39:e7:dd:0c:c0:27:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f45ed0-f7cb-4b11-898c-6889f47f74d6
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=bba4ed69-3546-46be-aae7-a257cbd59036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:50:4c:59:ab:95:3f:6a:a3:69:e8:c5:ef:94:
                    83:09:33:78:e7:c9:cf:40:79:2a:cd:d8:5a:37:b8:
                    d7:d8:6d:72:24:37:8a:a1:ef:55:e7:08:82:eb:7d:
                    89:0e:00:d3:3f:62:32:c9:4e:bb:3f:61:3b:21:df:
                    0d:92:eb:7c:5b:0c:4b:f6:b1:37:a7:8e:55:b7:8f:
                    42:e7:84:b8:96:65:9a:fa:70:34:a5:b7:2e:ea:9b:
                    e9:d0:ad:6f:44:ab:a9:95:b6:a5:16:c2:1e:1b:36:
                    d1:d0:01:eb:65:92:14:29:bd:89:1c:04:a0:2d:df:
                    3a:57:73:84:7d:20:33:a6:21:d8:15:10:fc:ae:51:
                    86:d6:42:51:cc:7d:5b:97:b6:e4:a8:ae:5e:a1:85:
                    a7:10:d1:73:02:7c:e9:27:3b:62:d4:8b:b1:c9:3c:
                    70:49:59:7a:e9:b7:26:c2:f4:fd:63:17:2b:ef:bf:
                    e2:ef:41:e3:c8:94:39:68:e7:61:da:5a:e3:17:3c:
                    2d:cb:5f:ab:f1:ee:70:88:48:d3:e5:e2:a3:f0:fa:
                    2d:fe:1a:36:57:6d:fe:ad:db:2c:8b:a5:04:be:c2:
                    0e:e6:8b:5f:7b:8c:83:32:fc:9f:9a:a2:c4:ac:b6:
                    c6:d2:8c:35:c6:1f:83:18:15:ff:37:b2:7e:a6:d4:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0A:47:96:C3:78:20:9E:EB:40:98:08:3F:18:76:7D:92:77:EF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/59521d2b-69e2-35bc-9892-cb46064d5cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.crl

            X509v3 Authority Key Identifier:
                keyid:E4:70:71:94:D3:62:2D:A8:2A:4F:C3:56:5C:9D:E4:5F:52:1F:CA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3f45ed0-f7cb-4b11-898c-6889f47f74d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:41:5a:78:79:b6:2a:e7:8b:65:e4:5b:ff:27:25:af:5c:
         12:85:cf:30:3c:6c:d0:f7:92:f8:a9:08:b7:ae:6b:b0:b9:3a:
         19:31:c7:37:e2:5c:ec:de:1f:1b:c3:9a:97:56:8d:ac:da:44:
         83:08:7f:fa:08:41:6b:10:9a:55:97:de:cf:bf:91:21:85:6a:
         d1:dc:e4:06:7d:b4:95:79:a9:66:d5:9f:18:4f:ee:39:0d:84:
         0e:a7:92:ef:0a:4e:eb:d2:64:6a:bf:76:64:ac:72:20:57:76:
         5d:df:b1:55:12:46:a1:53:3f:ed:8a:e9:cb:9e:6a:34:86:85:
         03:77:d2:f9:9e:96:ad:91:40:61:e4:fe:af:32:63:47:74:c9:
         f8:89:b7:8a:ae:95:17:77:fa:29:b8:52:c3:11:a7:81:03:9d:
         58:4d:23:d8:51:3d:a9:dd:ca:67:16:6e:da:51:fa:79:39:d5:
         81:03:50:89:90:98:d4:b4:e5:8d:b6:be:fb:48:10:f9:3a:ff:
         f2:81:2a:f9:c7:31:f4:a4:5a:0d:f3:e0:76:32:52:3a:a5:4e:
         ad:c8:d5:ee:8e:7c:0e:83:38:f9:ef:89:9e:74:f6:76:35:a2:
         14:61:9d:81:21:31:93:e3:49:be:49:1f:e6:1c:10:7f:c2:a5:
         3b:59:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:21 2026 by rpki-client