Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59055e45-1e84-3cb8-acff-061b71b53deb.roa
File:                     59055e45-1e84-3cb8-acff-061b71b53deb.roa (raw, json)
Hash identifier:          e0ZpeH++jgFicHawyf1orh23AbFy0QDdFkfsOfH2Lac=
Subject key identifier:   5F:35:16:72:B0:3D:E8:AC:7A:F0:EB:E3:44:40:1D:10:61:37:2E:24
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1F7A8A8B196AC4814B0900
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59055e45-1e84-3cb8-acff-061b71b53deb.roa
Signing time:             Fri 24 Apr 2026 23:22:43 +0000
ROA not before:           Fri 24 Apr 2026 23:22:43 +0000
ROA not after:            Thu 23 Jul 2026 23:22:43 +0000
asID:                     20001
IP address blocks:        64.16.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:7a:8a:8b:19:6a:c4:81:4b:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:22:43 2026 GMT
            Not After : Jul 23 23:22:43 2026 GMT
        Subject: CN=17a128d2-5d15-4df4-8213-959d7ebc7ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:8c:79:c0:10:e8:77:2a:13:b4:a8:83:68:
                    c6:4c:9e:0f:ba:5a:68:bd:77:10:45:b6:c8:b5:da:
                    93:75:f5:6a:fd:81:82:69:a4:6d:d9:91:fc:f6:c1:
                    75:ac:8d:1b:0a:93:72:46:99:c2:9c:30:73:15:28:
                    ab:2a:e0:04:7d:d2:25:7b:00:12:1c:28:5a:e1:5c:
                    eb:01:49:97:27:40:e0:86:47:e4:47:e8:a8:cb:a7:
                    04:81:c6:63:30:d1:7f:ec:2b:b2:26:59:e6:4e:71:
                    a3:ff:8e:62:bc:b8:aa:5a:a6:99:20:29:45:73:a6:
                    3f:0b:31:62:7a:1c:4e:1b:ee:ff:58:fe:c2:e9:e4:
                    aa:d9:9d:89:cc:7f:6e:af:f0:2c:be:3f:dd:97:0c:
                    8c:c6:9e:e8:fc:52:8b:2b:a7:f5:0d:da:f2:1d:5f:
                    a8:34:0c:52:14:d2:74:53:9c:06:c3:7b:7b:3f:2c:
                    71:f6:83:f5:98:5f:e1:83:f8:18:33:6d:40:a5:85:
                    45:ff:55:47:bd:3b:77:ef:a6:8b:c1:5e:e2:4b:14:
                    fa:a7:36:bd:ff:cc:c6:8b:07:7d:6c:50:b5:52:ef:
                    05:0e:e2:f4:b9:5e:87:f9:78:5d:a0:e5:a2:b1:c2:
                    9c:f1:a8:52:39:3c:20:09:44:b2:4f:6c:e6:07:db:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:35:16:72:B0:3D:E8:AC:7A:F0:EB:E3:44:40:1D:10:61:37:2E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59055e45-1e84-3cb8-acff-061b71b53deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:db:73:fc:eb:e7:3f:b9:1e:96:68:07:bc:fd:ec:34:9d:d8:
         98:5c:6e:d9:e8:1a:6e:b9:51:84:75:48:4f:89:b8:63:c9:24:
         34:df:03:ea:72:fe:8f:c2:12:d6:4b:9b:64:f5:86:1d:54:97:
         dc:f2:41:b2:30:4d:12:08:ab:4a:53:2d:43:e8:bd:ea:eb:12:
         c3:e3:fc:95:56:89:14:d4:1e:89:0e:10:bd:5f:4f:94:65:5b:
         a1:29:cf:c3:cc:28:0d:9d:66:3d:f0:b2:de:c3:6d:17:d8:70:
         cd:5b:ec:97:ba:ac:2d:9b:f2:59:1d:5c:ec:fe:3e:b5:2e:44:
         ab:47:20:3c:b9:7a:20:63:28:bb:9c:32:f6:19:74:b4:60:2b:
         51:52:2e:e2:0d:c4:07:2e:fe:f8:74:5a:e6:c5:65:42:db:6f:
         87:c6:d6:4b:8f:5a:d0:9e:ef:28:b8:ec:ae:29:10:8d:26:15:
         f1:98:c5:82:8a:4d:5c:fc:6d:33:0c:56:4f:e4:4a:0c:9b:f3:
         b2:44:80:36:04:c7:bb:df:04:ab:3a:16:db:18:15:1d:b3:1e:
         d2:46:a4:6e:14:31:8b:f9:b9:ca:8a:9d:b3:45:47:8b:12:ae:
         39:71:3f:60:65:cc:d2:55:8f:b1:48:3c:0a:9f:a8:d8:fa:1d:
         11:a8:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:02 2026 by rpki-client