Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/59b98a48-49f5-3a6a-beb5-a49b5221aef2.roa
File:                     59b98a48-49f5-3a6a-beb5-a49b5221aef2.roa (raw, json)
Hash identifier:          YHlPNEAAFC9MzMQQIFYnrvwK3FmM/OUmAWumYKdDpNQ=
Subject key identifier:   2A:C1:AB:DF:43:34:F2:E6:DC:C5:41:D3:74:82:54:36:89:4D:E9:1F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4ABB674E943E5A8B0F586F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/59b98a48-49f5-3a6a-beb5-a49b5221aef2.roa
Signing time:             Fri 25 Sep 2026 12:02:52 +0000
ROA not before:           Fri 25 Sep 2026 12:02:52 +0000
ROA not after:            Thu 24 Dec 2026 13:02:52 +0000
asID:                     12989
IP address blocks:        173.44.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:bb:67:4e:94:3e:5a:8b:0f:58:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 12:02:52 2026 GMT
            Not After : Dec 24 13:02:52 2026 GMT
        Subject: CN=a5f40a72-d2ab-4861-9ac8-a3b4978ca897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:ae:42:12:cd:4f:d8:55:77:d7:f7:1b:7e:
                    0f:03:9d:49:7b:29:60:40:29:a8:bb:bf:34:b1:9e:
                    f4:18:90:8c:a6:2b:fb:96:bf:2a:9d:55:28:5a:4b:
                    6e:86:a7:50:51:6f:e0:f7:4a:e8:46:bd:97:d2:84:
                    92:91:47:f0:c7:c8:2c:1b:6a:6d:c0:78:12:9c:02:
                    d6:2c:97:3e:0a:a4:a4:9b:1f:a0:24:65:13:28:a4:
                    e8:d0:e3:99:34:f1:d4:f0:3b:2d:b0:a8:59:1c:45:
                    d9:96:3f:8d:31:a7:a2:6f:55:a0:f6:74:74:4c:46:
                    70:5d:a2:06:53:f7:a9:9a:fc:35:0a:1c:21:67:49:
                    88:87:58:7a:c0:5c:5d:a9:6a:eb:b1:be:10:61:db:
                    38:4a:fa:c8:de:46:2c:74:30:00:00:4c:95:e0:7e:
                    b2:c3:fe:34:bf:e6:b6:53:3f:35:44:22:02:b1:72:
                    88:69:f2:49:15:3d:c9:c4:fe:2f:63:7e:b4:68:b9:
                    d2:ce:b6:72:a7:17:ce:34:b7:02:17:3a:ae:07:71:
                    51:6f:a8:26:d8:ac:22:1a:fd:d5:dd:4e:d6:3a:1b:
                    fa:e0:b3:8e:6b:72:2e:3d:8a:13:7e:3f:aa:c9:e9:
                    e1:86:e4:e7:40:1e:34:b5:48:62:77:7a:ff:7b:79:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:AB:DF:43:34:F2:E6:DC:C5:41:D3:74:82:54:36:89:4D:E9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/59b98a48-49f5-3a6a-beb5-a49b5221aef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:31:4d:6c:a1:38:f7:fa:50:a1:cb:d7:86:58:8d:24:88:
         a8:db:54:b5:48:27:13:86:7a:e5:4d:e2:02:40:68:97:0e:c2:
         09:7c:42:92:63:03:e3:15:85:43:0e:e5:26:49:02:b2:ee:4b:
         66:b7:d2:4e:1e:12:50:03:75:ed:eb:e5:c8:80:13:a0:24:f2:
         0f:00:00:4e:4d:01:c8:94:7b:db:74:38:d8:4c:93:6e:0d:b0:
         9d:df:7e:25:9c:50:44:ed:59:ea:30:c2:5e:d1:44:68:76:9f:
         93:7c:2a:97:b5:55:0a:f1:63:fb:1a:9f:40:2c:1f:d1:77:f3:
         c9:2f:f2:30:f4:e0:7e:0b:4e:10:d8:58:ef:f4:c4:92:c5:ad:
         f8:78:0a:15:15:b4:f2:05:0f:c6:33:e2:51:aa:ba:26:d8:c8:
         0c:bd:58:48:41:e0:83:24:5b:b2:dd:70:f1:13:9a:47:58:f1:
         00:32:f8:aa:90:21:20:72:56:eb:4f:f7:50:3f:04:1d:57:3a:
         bc:f2:b0:75:95:4c:7c:18:1f:26:3a:ae:78:9a:3a:31:11:0f:
         9b:21:d6:a5:8d:0a:44:3e:19:01:2c:27:bf:fe:e2:ef:84:92:
         f2:76:ee:e3:1a:e1:0d:55:e5:db:f7:21:74:78:06:23:1a:7b:
         9a:3d:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:42:52 2026 by rpki-client