Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa
File:                     59ba3509-76c2-3b16-9160-b70599626c49.roa (raw, json)
Hash identifier:          1Tv+M9KeJHEJSK5NxJnMc1tCsC4UpTV2CBmdUDbV8x8=
Subject key identifier:   44:38:F7:F9:9C:47:B7:FE:DC:D2:EB:03:A5:0B:F9:67:AB:43:FC:B6
Certificate issuer:       /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial:       010D0C9F4328584B2761784969DAF50C03186D80
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     53703
IP address blocks:        64.39.192.0/19 maxlen: 24
                          72.2.179.0/24 maxlen: 24
                          158.51.164.0/22 maxlen: 24
                          198.254.28.0/22 maxlen: 24
                          199.68.220.0/22 maxlen: 24
                          199.83.56.0/22 maxlen: 24
                          199.119.144.0/21 maxlen: 24
                          208.92.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:78:49:69:da:f5:0c:03:18:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=c4ca5d2a-73b7-4efd-951f-404e2b33f6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:49:e5:14:83:78:c2:74:4d:41:5d:b4:9c:
                    b1:f9:f0:c3:c4:10:cf:c3:f2:3e:0a:3f:14:a4:4b:
                    1d:28:3e:96:28:49:f9:98:88:f8:ad:67:68:97:94:
                    33:15:85:ef:c0:6d:08:0e:6e:cf:28:bd:6b:6e:34:
                    12:80:b6:6b:c4:fb:eb:75:e2:13:f6:26:a1:cb:fa:
                    c1:36:e2:13:85:0b:4f:77:ea:1b:a6:43:85:4f:a8:
                    fc:e5:b8:a8:0c:a3:b9:df:67:b9:be:23:8e:e2:a4:
                    98:18:98:a3:52:b3:f2:2a:72:87:c0:44:44:f0:26:
                    a8:b6:fa:37:2f:42:29:d7:f6:96:e8:b2:59:f2:5a:
                    24:3d:b5:b5:3d:db:8f:d2:07:33:82:7b:a3:81:22:
                    8b:a1:fb:60:21:ab:db:ac:a5:a2:8a:19:9c:07:ab:
                    f1:29:0f:88:04:86:c9:42:76:58:32:82:bf:a2:fe:
                    df:29:53:cc:1d:25:b5:0a:e0:3d:07:5f:88:ae:53:
                    77:c1:eb:5c:85:a8:f2:84:da:80:40:8b:7d:ec:ef:
                    92:4f:13:c1:4a:a7:24:82:80:a3:67:dc:b2:42:49:
                    14:f3:a6:ad:eb:31:b2:ab:9e:ec:ff:20:08:fb:0e:
                    96:5c:fe:a0:24:7c:eb:3e:73:dd:cb:66:46:b8:03:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:38:F7:F9:9C:47:B7:FE:DC:D2:EB:03:A5:0B:F9:67:AB:43:FC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/59ba3509-76c2-3b16-9160-b70599626c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.192.0/19
                  72.2.179.0/24
                  158.51.164.0/22
                  198.254.28.0/22
                  199.68.220.0/22
                  199.83.56.0/22
                  199.119.144.0/21
                  208.92.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:3b:06:93:8e:82:b8:9f:31:15:96:b1:14:12:be:47:b6:
         eb:15:9a:a0:04:2d:e0:13:0d:0a:52:5c:78:16:77:e8:f9:32:
         a5:5d:12:ee:a8:ab:30:bd:a6:5f:22:17:a7:34:1c:78:94:2b:
         74:b9:ee:e9:01:7a:a9:60:7e:fa:ac:59:ac:10:18:be:c0:7b:
         8c:6c:b0:51:14:0e:86:78:a9:59:dc:e8:fa:da:25:bb:b8:94:
         46:08:8b:86:fc:22:ac:94:1b:59:b0:63:b0:89:a7:26:18:19:
         d2:14:9a:83:1a:7e:ee:f0:b4:31:1d:78:29:b4:a3:48:d4:2d:
         7b:5c:01:3e:b2:47:75:93:b7:ed:87:7e:89:95:ed:25:52:33:
         b3:81:fc:be:bb:81:95:0a:90:9a:51:4d:04:3c:aa:0f:6a:dd:
         9c:ed:1b:04:8d:13:1e:52:e9:52:4a:03:28:b2:a1:3c:fa:b7:
         ba:e7:52:12:33:e6:6f:5a:79:7b:00:18:a5:d8:58:b3:25:01:
         2f:79:83:9c:7e:13:a0:a4:9d:7e:d6:c8:89:b8:3f:1f:8b:ed:
         15:90:7a:25:9a:e5:7a:af:74:d4:d2:5d:0a:a1:c9:c2:ec:d7:
         59:7c:80:7d:b6:b0:98:cf:8f:7c:04:a6:c3:9b:7a:de:54:f4:
         88:a7:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 03:19:16 2025 by rpki-client