Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/e59f5867-1f0d-36cb-8ab4-13a4edd0283d.roa
File:                     e59f5867-1f0d-36cb-8ab4-13a4edd0283d.roa (raw, json)
Hash identifier:          hvV92rPL30ZCWFvG0PLiMjiI4CidHhCw90ld+MP6AJ8=
Subject key identifier:   A3:A9:05:2B:CA:84:A8:36:C3:F6:A8:0B:BB:DB:3F:24:68:F4:F7:CE
Certificate issuer:       /CN=ba63cc08-daec-4944-82e6-c294a3caa982
Certificate serial:       010D0C9F4328584E856BB3B3F7F34D0806D2C400
Authority key identifier: 7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/e59f5867-1f0d-36cb-8ab4-13a4edd0283d.roa
Signing time:             Thu 16 Jul 2026 19:48:02 +0000
ROA not before:           Thu 16 Jul 2026 19:48:02 +0000
ROA not after:            Wed 14 Oct 2026 19:48:02 +0000
asID:                     23465
IP address blocks:        74.113.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:6b:b3:b3:f7:f3:4d:08:06:d2:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba63cc08-daec-4944-82e6-c294a3caa982
        Validity
            Not Before: Jul 16 19:48:02 2026 GMT
            Not After : Oct 14 19:48:02 2026 GMT
        Subject: CN=9d51d61b-80e8-4975-8985-02a64df3595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:be:16:2d:b8:ac:61:29:47:d6:3d:42:f6:
                    06:28:16:0f:dd:cb:7a:93:1a:fe:fe:f4:ec:5d:cb:
                    c8:2e:b0:5d:ed:f9:eb:37:f5:74:75:69:a1:ed:7e:
                    95:14:e8:07:0c:50:10:b8:26:2b:51:6d:63:62:89:
                    f2:58:e4:17:04:bd:b2:10:f1:27:fc:b4:72:00:53:
                    69:2c:ee:5f:22:c2:ef:20:74:8d:99:2d:fb:1c:64:
                    54:1f:08:a2:c2:85:3c:f0:b3:fe:e3:ae:b7:91:b5:
                    ee:f1:6c:a3:a9:fb:10:d2:b7:69:0e:15:6e:2e:4c:
                    44:72:85:0e:ac:14:7f:2b:f9:e0:04:1e:1b:37:68:
                    ed:83:76:c0:04:8a:f9:35:3f:f9:0a:a3:df:33:4f:
                    9e:9c:0c:c1:54:74:29:7a:db:6e:04:75:7b:20:e7:
                    b8:46:fb:2a:5b:ef:1c:32:1f:c6:c8:cc:ec:0e:fe:
                    ac:59:0e:9d:9c:33:31:03:89:c9:c5:9f:61:d0:53:
                    62:00:76:2f:2b:01:26:2b:63:58:35:5a:37:60:8c:
                    b8:41:43:6e:f3:9c:f3:65:9f:31:49:a4:19:14:bc:
                    28:9a:22:20:10:be:80:95:07:9b:59:ff:8b:de:5f:
                    74:fd:18:78:d9:2e:cf:7b:30:ad:92:52:aa:2a:d8:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:05:2B:CA:84:A8:36:C3:F6:A8:0B:BB:DB:3F:24:68:F4:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/e59f5867-1f0d-36cb-8ab4-13a4edd0283d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982/ba63cc08-daec-4944-82e6-c294a3caa982.crl

            X509v3 Authority Key Identifier:
                keyid:7B:21:57:13:1B:DA:80:AD:2A:A4:E9:5E:34:0E:65:31:F8:2B:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ba63cc08-daec-4944-82e6-c294a3caa982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:8b:d3:41:39:ad:df:0c:06:e7:23:5f:e5:47:52:19:4d:
         e5:2b:a7:9c:e4:e9:4d:33:67:15:da:76:b1:0b:0f:e0:51:12:
         c7:69:f7:c1:78:f7:44:43:2f:e9:7c:dc:13:ae:ec:d5:57:99:
         5b:70:b1:5d:d7:13:25:8a:ea:ce:d7:3c:b8:ad:2a:bb:36:97:
         05:aa:01:6e:fd:2d:c9:84:dc:12:ec:f1:20:6a:2d:9e:b5:82:
         2b:19:9a:a2:aa:17:9f:ba:16:5d:93:2b:d6:0b:ff:21:bc:ba:
         63:68:2f:f5:e8:51:f4:fa:a2:67:68:7a:56:94:10:bf:a8:28:
         0e:07:d0:7e:bd:0d:8d:e0:e0:38:60:b1:53:f9:60:0d:fd:59:
         33:a2:64:98:74:0e:9c:1a:3b:68:71:e0:3c:f5:d3:35:68:44:
         3e:27:a9:36:6e:7e:69:74:cc:45:8d:12:78:f8:7d:da:69:99:
         f5:15:42:0b:56:b3:a6:96:ca:87:23:f1:fd:04:71:0e:9e:80:
         8d:82:6a:bc:59:c3:4b:28:ca:e5:f8:a6:d1:55:fa:a6:ff:6e:
         f8:fe:c1:7b:71:b1:d0:9e:a3:f8:54:a2:2e:83:86:6f:73:1c:
         34:46:32:d3:91:21:1a:18:b3:12:20:07:66:15:3c:d7:45:12:
         38:89:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:03 2026 by rpki-client