Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa
File:                     60d58fff-6605-34bc-96e4-45cd266fe952.roa (raw, json)
Hash identifier:          9Ta4IrmM/aQnquXCsHbpggBU0/nnjWDx+kA1BRwaPMw=
Subject key identifier:   6A:06:43:83:56:DE:DD:CB:1C:17:1D:E3:57:CF:84:4B:C7:DA:DF:40
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584E5EDE610181DD7C831078F380
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa
Signing time:             Fri 03 Jul 2026 00:22:34 +0000
ROA not before:           Fri 03 Jul 2026 00:22:34 +0000
ROA not after:            Thu 01 Oct 2026 00:22:34 +0000
asID:                     33601
IP address blocks:        45.59.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:de:61:01:81:dd:7c:83:10:78:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Jul  3 00:22:34 2026 GMT
            Not After : Oct  1 00:22:34 2026 GMT
        Subject: CN=ce8c71ce-c225-4a40-b527-6dd18274542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:cf:d8:46:3f:24:26:ef:79:2b:88:af:42:
                    17:1e:d4:ae:a7:a2:2e:86:93:fb:e5:ec:16:4f:03:
                    01:72:16:d8:d6:a1:38:22:b6:94:04:4d:6e:ca:01:
                    ef:a5:53:17:85:90:b2:1e:ed:a4:5c:40:c8:fe:40:
                    41:fd:cf:43:53:e4:cc:a9:5d:91:85:d0:ea:61:66:
                    70:0b:d4:7c:ec:c6:4f:69:c6:40:9b:bc:a8:be:bc:
                    20:92:ca:c7:bd:2e:3c:47:59:50:5c:06:9c:36:ca:
                    47:a4:b3:71:f2:ed:d2:4f:d1:5d:fd:1c:20:d3:1f:
                    91:73:8f:05:dc:cb:58:a1:56:b6:e1:31:9b:1a:d7:
                    34:d8:8f:f9:2e:67:b8:5e:69:4e:fe:7e:b3:0e:5d:
                    f0:0b:9c:a8:52:c6:19:35:19:65:dd:54:9f:31:12:
                    ef:09:84:d6:50:a0:0f:b5:14:c5:29:7d:be:1e:8c:
                    30:79:d0:46:18:1c:9e:5d:40:e8:22:d3:af:1a:fd:
                    79:de:84:20:e8:9c:2b:02:79:58:f9:3a:c0:59:58:
                    45:91:15:14:8d:67:77:9f:4e:09:26:dd:d8:15:5a:
                    7c:ac:23:ae:1a:c0:96:ee:44:7a:9f:65:48:e4:dc:
                    99:be:3d:3c:64:29:56:3e:2f:b0:f4:2b:ba:30:f0:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:06:43:83:56:DE:DD:CB:1C:17:1D:E3:57:CF:84:4B:C7:DA:DF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:66:98:56:95:60:c2:80:91:4f:ad:a3:23:2e:b2:74:bc:
         8a:a2:f1:f6:06:80:ef:e6:66:ba:bd:c8:36:b1:83:63:9b:08:
         4b:bd:cf:4b:38:e9:e0:10:1f:0d:36:c7:c2:d9:02:00:3e:83:
         e8:07:e5:57:4d:26:03:1d:4e:68:12:e1:72:30:68:3c:c1:03:
         19:10:20:cd:8b:1b:91:d5:41:29:e9:67:5c:07:b3:17:0e:70:
         f1:0c:44:ac:a8:5d:9d:54:a3:fd:1d:b2:a6:9c:b4:79:2c:16:
         dd:93:25:cd:35:5f:82:1c:db:ca:38:1e:d6:e7:5d:06:bd:49:
         1e:5e:c4:a5:56:db:12:fc:e0:9b:a0:c4:5e:d3:79:37:3a:0e:
         43:a5:32:de:ca:bd:ba:74:c1:8b:53:46:a4:3f:f8:57:c1:96:
         ff:39:04:35:48:5b:c2:fd:0e:ae:13:f3:43:c2:a0:f5:e2:17:
         6b:d4:42:f2:a4:84:d0:d3:d3:1b:fa:82:26:be:08:6f:47:6e:
         6a:29:06:ab:e8:8d:4c:25:72:52:cf:de:8e:a5:e9:8e:1a:dd:
         a1:fe:46:a5:1a:e7:4a:51:03:e4:66:18:d5:9b:1b:ed:c1:0f:
         55:24:a2:56:b3:c4:5c:1d:70:72:fc:8e:26:53:35:34:5c:0f:
         48:ec:0f:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5e3mEBgd18gxB484AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3ODQtMDJhYzNjMTQ0
NTM4MB4XDTI2MDcwMzAwMjIzNFoXDTI2MTAwMTAwMjIzNFowLzEtMCsGA1UEAxMk
Y2U4YzcxY2UtYzIyNS00YTQwLWI1MjctNmRkMTgyNzQ1NDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39HP2EY/JCbveSuIr0IXHtSup6IuhpP75ewW
TwMBchbY1qE4IraUBE1uygHvpVMXhZCyHu2kXEDI/kBB/c9DU+TMqV2RhdDqYWZw
C9R87MZPacZAm7yovrwgksrHvS48R1lQXAacNspHpLNx8u3ST9Fd/Rwg0x+Rc48F
3MtYoVa24TGbGtc02I/5Lme4XmlO/n6zDl3wC5yoUsYZNRll3VSfMRLvCYTWUKAP
tRTFKX2+HowwedBGGByeXUDoItOvGv153oQg6JwrAnlY+TrAWVhFkRUUjWd3n04J
Jt3YFVp8rCOuGsCW7kR6n2VI5NyZvj08ZClWPi+w9Cu6MPAINwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGoGQ4NW3t3LHBcd41fPhEvH2t9AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3
YzllMi02NDhjLTRjYTItODc4NC0wMmFjM2MxNDQ1MzgvNjBkNThmZmYtNjYwNS0z
NGJjLTk2ZTQtNDVjZDI2NmZlOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWYwN2M5ZTItNjQ4Yy00Y2EyLTg3
ODQtMDJhYzNjMTQ0NTM4LzlmMDdjOWUyLTY0OGMtNGNhMi04Nzg0LTAyYWMzYzE0
NDUzOC5jcmwwHwYDVR0jBBgwFoAUZHXrfCV7cP95Mb9Xfny6xnTRzpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjA3YzllMi02NDhjLTRjYTItODc4NC0wMmFj
M2MxNDQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTtqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtGZphWlWDCgJFPraMjLrJ0vIqi8fYGgO/mZrq9yDaxg2ObCEu9z0s4
6eAQHw02x8LZAgA+g+gH5VdNJgMdTmgS4XIwaDzBAxkQIM2LG5HVQSnpZ1wHsxcO
cPEMRKyoXZ1Uo/0dsqactHksFt2TJc01X4Ic28o4HtbnXQa9SR5exKVW2xL84Jug
xF7TeTc6DkOlMt7Kvbp0wYtTRqQ/+FfBlv85BDVIW8L9Dq4T80PCoPXiF2vUQvKk
hNDT0xv6gia+CG9HbmopBqvojUwlclLP3o6l6Y4a3aH+RqUa50pRA+RmGNWbG+3B
D1UkolazxFwdcHL8jiZTNTRcD0jsDw8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:36:33 2026 by rpki-client