Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa
File:                     91333e8f-84c7-38a5-b21f-858f90a37c75.roa (raw, json)
Hash identifier:          tBH3Gb4J4ypGxVQX+Yyv8eBxO+HgdQ0L7sSrXir+d9g=
Subject key identifier:   80:13:4A:B8:58:28:83:98:D8:E5:B5:0D:EC:AE:A1:AB:E9:59:6B:69
Certificate issuer:       /CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
Certificate serial:       010D0C9F4328584E2C39A5C41D74A9BB1539A450
Authority key identifier: 42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     202736
IP address blocks:        45.59.129.0/24 maxlen: 24
                          45.59.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:a5:c4:1d:74:a9:bb:15:39:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939ee7e-81b2-46cf-9a43-3647ff132a06
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=19cd8474-7492-405c-9525-2dff4531438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:89:cf:d2:17:ea:a8:f9:76:24:48:00:30:
                    a8:ea:f4:21:03:12:67:79:0d:8d:7d:ee:7b:df:c9:
                    e9:68:0d:c9:24:f9:dd:fe:05:56:c3:aa:52:75:e0:
                    8e:fc:06:46:10:af:be:0a:f5:b0:e3:9c:c2:c4:d7:
                    82:9d:a9:d5:c2:bb:70:37:c6:13:1d:3f:eb:b7:12:
                    98:18:c5:ca:a3:36:99:7e:ea:53:b7:5c:2f:2d:30:
                    0d:b0:8c:5c:37:fc:13:55:9b:a8:a8:fc:18:bb:ab:
                    90:f9:34:27:e5:7c:fa:0f:33:bd:2f:b9:0c:79:8b:
                    4d:87:81:8d:b2:47:2c:9a:ba:d6:c1:30:64:7e:17:
                    b1:9e:14:12:de:2c:6d:d7:8b:36:01:6c:a6:a1:64:
                    2d:c9:17:79:49:ab:04:69:36:93:e3:b8:d9:0f:a3:
                    0b:de:2f:9e:68:f8:96:da:32:35:16:21:28:db:85:
                    b4:c8:83:4e:3b:3b:5c:4d:cb:25:a1:19:fd:84:a7:
                    65:c7:6c:86:6f:9b:75:e3:4b:39:ba:96:b4:3a:75:
                    06:88:76:c1:39:73:b7:5c:f5:9f:27:fe:e6:dc:2a:
                    4a:e7:ab:35:95:29:d8:dc:ec:15:43:90:32:1c:b1:
                    54:9a:d2:b7:7f:91:37:81:a7:b2:36:90:cf:77:d5:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:4A:B8:58:28:83:98:D8:E5:B5:0D:EC:AE:A1:AB:E9:59:6B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/91333e8f-84c7-38a5-b21f-858f90a37c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06/a939ee7e-81b2-46cf-9a43-3647ff132a06.crl

            X509v3 Authority Key Identifier:
                keyid:42:67:98:4B:71:CA:19:1C:6D:E1:A0:5E:54:0C:B8:AA:FA:8B:28:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a939ee7e-81b2-46cf-9a43-3647ff132a06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.129.0-45.59.130.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:52:f1:ec:26:2c:f0:a3:b9:b6:c6:1d:9f:c8:a0:a9:c0:34:
         c3:2f:01:08:cf:ae:8c:46:0b:6c:71:84:9c:bb:72:f0:db:b1:
         d3:16:a5:9f:3f:93:e5:c2:31:26:0d:2d:0c:ee:f1:e6:50:fd:
         10:85:a1:f9:c3:2e:ae:3a:f6:49:67:54:21:07:38:15:cd:33:
         58:cd:75:55:54:7b:35:27:ce:e8:33:ed:ea:c4:b7:4e:1c:c5:
         a1:c3:5b:50:52:bc:c8:20:14:c2:80:46:06:6b:ef:e3:7c:a8:
         b5:ac:bc:9c:3b:27:7f:ed:a4:74:30:f3:30:03:9e:4d:cc:6e:
         0f:55:77:12:08:0c:df:ef:39:0c:3c:0d:9e:a4:42:a1:c1:32:
         0c:f7:4c:99:30:25:ac:e7:f7:5c:e9:22:b6:36:97:65:4c:c4:
         e3:6c:a7:10:86:cd:05:8f:14:d0:43:9b:ad:76:c4:73:6f:ce:
         a9:a4:7b:b2:de:f2:64:a2:7d:b1:d4:bb:46:3d:5b:ca:7c:7e:
         22:31:08:44:a6:5f:e4:e6:c2:a5:55:82:b3:75:4d:45:7d:32:
         d8:79:6b:1f:20:cc:85:00:95:f3:95:74:2e:44:78:6e:6a:3c:
         ea:a5:92:39:e0:b6:cd:f6:05:12:34:7c:7c:ea:8e:65:be:25:
         20:a5:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 10:55:25 2026 by rpki-client