Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa
File:                     59164d63-d428-368e-b33d-c57508b4ca42.roa (raw, json)
Hash identifier:          SOUH5X+/f4GuJPeAT8fddw2t07G9J/ICmONNnrCX6+Y=
Subject key identifier:   CF:9B:4D:D6:22:D8:8C:C2:48:9B:41:18:76:04:17:53:65:F8:64:3A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DAC45846EC144EAB2FF70BC5C
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     16540
IP address blocks:        104.152.100.0/22 maxlen: 24
                          199.36.176.0/21 maxlen: 24
                          199.187.148.0/22 maxlen: 24
                          2607:6200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:84:6e:c1:44:ea:b2:ff:70:bc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=480171bb-6f42-4acb-b267-abe3e11696a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1d:cb:94:bc:18:97:60:14:6c:8b:41:f9:57:
                    41:b4:a9:f2:c8:1b:48:b3:f2:a1:86:76:2a:b6:8c:
                    ed:96:21:73:e3:95:3d:d7:55:9f:cf:7a:a8:47:3a:
                    d9:b1:21:a6:53:ec:be:8a:85:e9:ef:cf:0f:8a:1c:
                    dd:61:ff:02:b1:f6:e7:f9:0f:ac:65:8b:eb:7b:f5:
                    2d:08:6e:c9:4c:6c:09:89:2c:ac:20:06:d7:8d:0e:
                    38:f7:e4:61:65:2b:35:19:1b:fe:55:d2:28:bd:ef:
                    fa:eb:52:9a:b5:86:b4:55:66:fe:9a:95:aa:ab:2a:
                    24:e5:4b:dc:51:d0:3b:92:64:5d:d2:45:2e:b6:5d:
                    75:b2:74:a6:ab:89:b9:b9:1d:e3:a0:42:3a:43:51:
                    3a:d3:12:c2:4d:39:a1:fc:99:8d:e7:04:19:3c:12:
                    a4:0b:a2:25:df:32:3f:76:53:f8:2f:04:ee:55:05:
                    9a:cb:ad:e4:32:1d:d9:b2:65:74:b4:ae:5d:be:47:
                    03:a3:2f:57:9b:a5:7f:0c:6c:0c:0f:01:96:f8:8e:
                    77:ed:4f:fa:9d:e3:ed:ff:88:7a:6a:bc:0f:8a:af:
                    1b:d7:a6:17:c1:96:3f:ef:d0:0c:57:6b:fa:be:25:
                    7b:36:47:23:bd:41:e7:b9:66:69:71:5f:e9:83:1f:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9B:4D:D6:22:D8:8C:C2:48:9B:41:18:76:04:17:53:65:F8:64:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:ab:c5:0e:50:d8:9a:ba:9a:ad:95:56:a5:b1:c8:fe:4b:
         97:4e:90:03:5e:35:88:d4:2d:59:4f:f2:77:bb:56:80:ed:aa:
         e9:c3:71:4a:3f:d2:8b:ec:39:49:71:df:a1:77:78:13:cc:25:
         8e:b4:7e:84:2f:18:5f:0a:6b:dd:a8:85:fc:5f:a5:30:fb:1d:
         55:e3:68:15:b1:da:83:42:3d:d8:0b:cf:f8:bd:df:1f:31:39:
         e3:1a:f3:22:ef:fa:8b:58:34:6a:97:46:60:b4:aa:6f:02:4f:
         80:18:80:78:b3:52:1c:c6:44:08:fd:01:b9:64:34:c2:67:9e:
         61:4f:72:d5:2e:76:44:46:7f:11:fa:5b:57:d3:5e:29:07:69:
         b6:ab:9c:32:89:fb:cd:02:64:08:96:ab:61:59:15:5a:d4:78:
         26:46:92:3d:ce:ad:b4:d4:9d:af:d1:0f:41:7c:80:4c:82:5e:
         b1:77:7d:a6:2a:1f:ca:51:23:fd:3d:fb:c0:5a:df:2a:dc:df:
         21:d3:28:20:13:20:b7:67:23:cf:35:66:86:5e:f5:bf:43:8a:
         84:a0:a0:72:9a:47:10:7a:48:ab:e5:5a:9b:a7:cc:0c:ba:a8:
         c5:88:61:00:ea:60:d1:83:e3:33:0b:00:de:f8:48:09:f9:1b:
         8e:fb:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:20:53 2026 by rpki-client