Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/06ede48a-222a-3907-9b8a-4d12cc176101.roa
File:                     06ede48a-222a-3907-9b8a-4d12cc176101.roa (raw, json)
Hash identifier:          XZO0/Ur+FPkpI2t4co9vvSBk9CvGgs7pZktQYzGQoFg=
Subject key identifier:   16:3A:AE:F8:75:C8:F7:80:E4:6D:8C:70:CB:B8:27:E6:A1:9A:95:32
Certificate issuer:       /CN=59a35a91-b6d1-4033-930b-406694a01e1e
Certificate serial:       010D0C9F4328584E815FC15B60ABADE13DBCACE0
Authority key identifier: FB:5C:8F:99:AC:49:24:D4:24:3E:4F:B1:AA:F0:5F:30:89:BF:18:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/06ede48a-222a-3907-9b8a-4d12cc176101.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     8075
IP address blocks:        204.80.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/59a35a91-b6d1-4033-930b-406694a01e1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/59a35a91-b6d1-4033-930b-406694a01e1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c1:5b:60:ab:ad:e1:3d:bc:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a35a91-b6d1-4033-930b-406694a01e1e
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=fdb5a88d-71b5-44b1-9727-14b607a8f242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:93:5e:f8:f3:5c:96:44:d7:b9:90:47:08:
                    fb:49:95:d3:03:6b:aa:63:fe:18:d5:4b:63:bd:04:
                    8a:36:a8:35:34:ca:c7:0e:08:24:48:2b:7f:97:4b:
                    38:e2:8a:d6:7a:b5:34:94:2f:c8:ab:f4:33:cc:b6:
                    10:0d:fe:80:90:ea:08:51:36:17:e2:35:fb:30:90:
                    8c:a1:f9:90:5e:30:10:40:5f:a8:60:fc:8c:3f:37:
                    f9:fc:80:4d:9b:64:1a:5f:30:d0:58:18:77:ab:30:
                    8a:0c:3c:7a:f4:9a:68:8c:e7:78:42:36:a1:a4:2f:
                    c0:2d:b5:e9:64:a5:65:b8:00:ea:89:58:7e:6d:6c:
                    20:7a:1d:b4:0f:40:aa:06:ea:25:89:d7:b8:1b:cf:
                    7f:82:9d:0b:c3:37:23:8a:5b:a7:51:e4:50:6a:52:
                    b2:5f:83:99:8b:80:18:68:c0:99:70:66:7a:4e:5a:
                    98:8e:b8:57:5a:7e:a1:45:54:c0:df:37:25:81:28:
                    d5:69:ec:0f:2d:79:35:bb:ed:e1:d3:79:9f:64:07:
                    11:5b:32:e5:82:5a:93:a9:ce:24:2c:a2:58:4d:b0:
                    b1:d9:6d:f6:d4:d4:d4:a2:f6:33:0d:50:ee:26:d1:
                    f9:32:c0:1b:5e:fd:01:b7:a9:84:83:81:a1:01:70:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:AE:F8:75:C8:F7:80:E4:6D:8C:70:CB:B8:27:E6:A1:9A:95:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/06ede48a-222a-3907-9b8a-4d12cc176101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e/59a35a91-b6d1-4033-930b-406694a01e1e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:5C:8F:99:AC:49:24:D4:24:3E:4F:B1:AA:F0:5F:30:89:BF:18:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59a35a91-b6d1-4033-930b-406694a01e1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.80.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:68:8d:a7:9e:fa:1b:95:47:a1:38:5b:93:48:03:11:70:ac:
         72:e2:91:7e:96:72:5c:9e:11:33:29:d6:10:e8:f8:52:38:8a:
         b0:06:6c:2f:e8:60:2a:a7:fe:05:25:d3:44:71:45:41:b5:58:
         58:34:4c:36:e7:9a:7c:90:2e:f9:f0:da:86:2c:53:b0:ef:bc:
         ae:88:90:c5:9c:2c:eb:ac:d2:e0:5f:5d:f5:18:6f:5d:69:23:
         23:7c:77:89:a9:31:ee:21:46:a7:32:1e:bc:ef:cb:d0:52:7b:
         a1:5e:c2:a0:f3:d8:56:17:16:c3:e2:fe:95:4f:be:27:69:1f:
         12:7c:61:03:26:5f:9d:b3:78:71:63:06:40:31:eb:cb:75:88:
         b6:95:24:1d:26:91:87:a6:f3:bc:c9:92:ed:ff:18:a3:6c:e7:
         01:af:42:87:3c:6b:9b:d9:8b:1b:3c:6c:71:81:81:e6:4b:6c:
         eb:b9:ac:cf:dd:17:43:b0:79:b1:bf:83:e0:f0:04:91:de:7f:
         a1:51:c1:6f:4d:52:0a:30:27:7e:1e:5b:a4:86:98:d6:5f:52:
         1c:fc:f5:3d:3a:d4:2d:6b:8c:6c:89:35:f5:6e:c8:6b:7b:86:
         4d:77:20:3f:5f:f6:bd:b1:cf:11:2d:d1:59:a5:70:21:a4:61:
         6c:27:bb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:30 2026 by rpki-client