Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa
File:                     0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa (raw, json)
Hash identifier:          JaUpzG9WuG59eTrjrQvyFOdSDvAl6osGxwc5cmm2Rs4=
Subject key identifier:   19:11:9F:7C:BE:43:AC:26:61:98:0B:3F:9E:58:D5:FF:25:C9:FD:C2
Certificate issuer:       /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial:       010D0C9F4328584D2BDA14DF450B9116685CE880
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     5650
IP address blocks:        72.18.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:14:df:45:0b:91:16:68:5c:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=7b804646-652f-4192-89e5-190cf00206af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:7a:85:10:92:31:51:d8:2f:c1:fe:80:e1:
                    9b:4e:f1:04:ae:b6:aa:ad:c5:0a:60:47:48:da:af:
                    37:56:3e:3c:f0:ac:0b:df:04:60:11:68:1a:73:e2:
                    75:c2:76:2f:b5:28:ee:a2:25:72:d1:5a:6a:e0:d6:
                    4a:28:3c:d8:9f:a9:72:e8:6a:d4:00:3a:0f:83:ad:
                    31:bb:56:5d:71:a8:4c:fb:0b:ab:f2:09:c6:fd:29:
                    38:a9:24:6c:49:38:91:0c:73:e3:21:9a:0a:84:f3:
                    a8:be:62:47:f0:2e:c0:26:fe:fb:69:40:42:86:2c:
                    a0:5d:d1:bd:6e:ae:df:e0:98:c2:ab:1c:97:24:a4:
                    98:98:e4:28:b1:a4:d5:e2:74:a6:10:3a:39:f2:1b:
                    0f:3e:42:6e:17:c6:63:d1:8d:a3:c8:b5:21:08:81:
                    3c:e9:37:e9:79:b5:91:0a:f5:ab:5f:2a:65:e4:9c:
                    27:26:d3:2f:78:17:1c:02:69:f6:4b:ed:c6:c5:43:
                    22:3b:dc:03:f1:de:05:da:ee:ea:0f:6a:84:0b:46:
                    74:e4:9e:8a:24:4e:d2:76:f7:61:6d:41:d7:8a:2f:
                    22:8e:f7:7a:ab:1e:92:22:64:07:bb:8c:5c:1d:f9:
                    05:22:f5:9f:fa:89:36:df:31:89:c2:32:05:a8:f7:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:11:9F:7C:BE:43:AC:26:61:98:0B:3F:9E:58:D5:FF:25:C9:FD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0e69bc89-8678-3fbd-9e27-c759d48ee48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl

            X509v3 Authority Key Identifier:
                keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:d7:6f:9c:81:65:aa:f3:53:bf:56:ab:e6:49:71:ae:76:
         bb:7d:f2:bc:74:93:0c:a7:89:37:af:70:57:84:50:38:c0:81:
         96:d4:a2:f2:b7:a5:bc:8e:c4:f6:9c:c8:54:a3:86:18:a9:5d:
         a2:66:03:2d:5b:58:19:03:1f:24:6b:60:44:6d:e6:23:ad:52:
         ad:09:4a:a4:f3:79:4e:58:13:38:a0:8a:83:a4:ad:06:12:ae:
         5e:6c:51:c9:14:71:d7:93:1e:34:a0:b0:99:f9:71:6b:2d:b9:
         72:8e:da:6b:c9:f2:9b:52:d7:b0:20:c2:4f:6a:9d:28:2f:a1:
         92:39:a8:83:e1:4f:44:8f:dd:d6:ea:0d:e4:20:65:9d:0b:2d:
         16:07:fe:68:e1:b7:b4:f0:c4:a4:66:da:4d:ac:27:19:76:bf:
         17:5c:43:ce:79:eb:7d:e1:07:1d:86:fa:3a:85:fd:70:d9:eb:
         3b:02:0d:8e:6e:42:ad:83:93:86:4f:0e:73:9f:ca:b2:10:06:
         e1:ed:90:3c:7e:8c:e6:85:c1:e7:eb:68:40:7c:74:96:16:83:
         3b:cd:5b:b4:1b:fe:92:19:21:99:d0:7a:fb:17:15:52:e5:c9:
         db:54:e0:99:a3:33:1c:e6:1d:59:f6:58:62:88:b6:91:3c:f3:
         c5:42:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:54 2026 by rpki-client