Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
File:                     59869761-7ba1-3163-bf71-c30740d5fd21.roa (raw, json)
Hash identifier:          bAC0EYH5rmwpugDwYGL7cyIAyEUdSb/E8yLhMcT9EB4=
Subject key identifier:   2A:B6:1E:B4:25:01:7B:2B:B8:E3:65:6E:3B:9B:8D:BD:CB:75:76:95
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F4328584D3DFFAAF0332E171E3A7FD690
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14977
IP address blocks:        159.238.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:aa:f0:33:2e:17:1e:3a:7f:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=7b96c89e-50d4-4eed-8bd8-61b1cf7bdd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:36:4c:8a:ef:63:86:33:f9:b2:da:c9:7c:
                    f0:81:71:32:7b:48:37:22:b4:26:de:c2:55:8a:d9:
                    06:c9:51:61:29:6b:89:31:7a:fb:6a:ea:d1:9c:c1:
                    66:32:a3:e6:4d:57:5d:16:86:94:de:70:e3:0b:03:
                    f3:35:dc:20:2a:a2:bf:17:16:dd:1d:d2:c0:23:fb:
                    5c:69:bc:a4:01:02:50:70:9f:9e:ee:49:19:e3:06:
                    fb:66:5e:06:f1:cb:45:76:14:09:ec:0d:fc:7d:95:
                    a1:96:55:99:0d:a2:e4:2b:31:a7:b1:85:cc:1b:06:
                    35:99:c9:8b:23:b0:4a:ce:e6:2a:05:e0:ce:a4:f7:
                    54:9a:c7:6a:92:30:c9:33:75:b7:ac:57:64:53:8f:
                    a6:cd:1a:56:83:ce:6a:31:6e:91:4a:a9:54:c8:12:
                    0b:8f:4e:99:ef:72:5f:d7:9d:67:52:e8:11:2d:9f:
                    9d:6e:55:e0:17:26:2f:35:6c:3e:13:cc:24:50:16:
                    3f:83:c1:d8:8e:71:e4:b9:42:d7:88:56:b8:62:ba:
                    63:f6:06:f4:a0:6f:c0:c3:93:41:71:32:ed:9d:91:
                    e1:73:87:09:2a:6d:b9:5a:b2:9a:21:22:4c:f5:eb:
                    be:bf:86:b8:8a:dd:1f:73:56:39:b4:99:0a:12:59:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B6:1E:B4:25:01:7B:2B:B8:E3:65:6E:3B:9B:8D:BD:CB:75:76:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:47:93:0f:02:6a:d6:db:8f:21:c4:09:c1:68:11:4d:05:
         aa:78:7d:74:e1:b4:b4:02:85:d8:bb:56:56:39:1b:36:92:51:
         0d:58:49:b3:9c:68:ea:7c:fe:e8:63:fd:df:91:0d:1d:c9:f0:
         b8:cb:cc:f3:ec:c9:44:28:bb:bf:91:0a:de:a1:03:2c:50:26:
         00:82:bd:43:89:f5:3d:fc:3d:55:b7:f5:9f:94:96:d7:26:24:
         41:52:a2:ed:75:ff:5f:b1:ba:db:7f:44:1c:f1:44:73:ec:77:
         73:1c:9c:53:70:f1:a9:0f:cf:33:cf:a7:2c:5c:7a:2d:cf:9f:
         d0:d4:ff:db:90:1e:cb:24:c2:5c:97:01:2a:4f:a1:69:c2:e0:
         b4:29:94:93:3d:d6:a1:6b:90:1f:e1:62:29:5b:dc:20:a0:45:
         69:ab:d7:38:dd:87:ba:34:11:e7:45:ca:5d:b4:68:0c:19:ed:
         af:76:a9:86:47:07:d5:89:50:48:0a:0a:dc:98:e5:7a:e3:08:
         15:7a:00:52:77:db:1e:a5:fe:e3:85:8b:69:10:57:e7:96:4c:
         8d:f2:dd:2c:bf:b5:5f:4d:50:55:95:04:0c:f8:88:3c:d2:99:
         33:69:3b:d9:52:6f:ba:9c:59:51:ec:87:98:db:9d:aa:d7:5f:
         18:31:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:22 2026 by rpki-client