Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa
File:                     186909b2-1f38-3535-ba9a-aa83c426facb.roa (raw, json)
Hash identifier:          9a2dmcNTMQQLlBYdNbv0Rlxfk8TEYuTz50gKA0hRyu0=
Subject key identifier:   84:D0:CE:98:31:B0:4C:58:F6:55:16:6B:CD:1C:F8:F5:A8:2A:D4:D9
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584E668D5F4865A6DDCFA1B9B800
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa
Signing time:             Sun 05 Jul 2026 18:25:49 +0000
ROA not before:           Sun 05 Jul 2026 18:25:49 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     46261
IP address blocks:        45.59.21.0/24 maxlen: 24
                          45.59.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:8d:5f:48:65:a6:dd:cf:a1:b9:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Jul  5 18:25:49 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=29de9511-10c5-4e44-a533-98ccbe4d7492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:21:b2:d9:8c:40:e0:46:fd:4d:46:2e:44:
                    74:ff:75:29:56:b7:7e:0b:f0:f1:2a:4f:87:bd:a1:
                    9f:45:c9:18:d9:f6:ab:a4:bf:23:f0:0b:43:13:8f:
                    25:37:e3:57:36:96:36:cb:59:95:f3:2d:07:16:a0:
                    c7:97:f7:65:19:15:ca:9d:87:01:c9:f8:d5:7c:3b:
                    47:1d:c2:14:cd:dd:5b:bb:01:7b:05:e0:71:d5:9d:
                    ee:27:88:92:90:09:07:a1:2c:9b:03:56:6a:27:7b:
                    23:70:a0:56:29:f9:ad:9d:69:a5:24:91:1b:da:a4:
                    21:a0:d7:ea:08:52:3d:33:52:05:39:76:c2:f2:04:
                    73:62:09:00:49:9e:8e:86:64:d3:e4:35:e5:b3:96:
                    f6:4f:71:e3:7a:cb:ce:f1:06:b6:65:42:18:56:31:
                    3c:fd:55:62:67:d7:13:e5:7d:ef:6e:ab:b6:0c:2c:
                    78:a2:1e:7c:11:5f:d0:2e:0f:dd:c1:b2:03:c4:ce:
                    e8:08:59:10:15:87:97:8d:55:d9:7b:61:04:b8:db:
                    83:fb:1c:23:d1:7d:88:0c:7b:1b:d8:7c:23:de:10:
                    c9:5f:b1:3b:17:61:e1:81:29:33:82:7f:33:bd:ef:
                    c1:bc:07:d6:05:df:30:4e:85:82:09:5b:f8:05:dc:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:CE:98:31:B0:4C:58:F6:55:16:6B:CD:1C:F8:F5:A8:2A:D4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/186909b2-1f38-3535-ba9a-aa83c426facb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.21.0/24
                  45.59.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:64:38:4b:95:54:44:95:32:5e:2c:39:67:aa:2a:b8:f9:
         96:80:2e:fb:8e:70:59:76:ee:93:e5:ee:30:b2:8c:ae:9a:ef:
         b9:a8:11:fd:ac:97:bb:79:00:a9:6f:7a:ce:35:73:40:d6:80:
         c0:9f:2a:aa:b1:f8:cc:17:76:d9:15:c9:de:80:33:6a:9b:42:
         21:c0:8c:d9:07:c2:2c:3d:72:b9:f2:e0:79:26:99:79:bd:ed:
         75:b0:5f:40:bd:ea:61:2d:e5:87:b9:f0:44:02:fe:2c:6e:94:
         09:df:da:52:9f:d1:9f:f3:79:c1:91:fe:3b:26:6b:06:1d:ac:
         01:e1:72:b6:d5:bb:da:bb:31:0d:61:78:27:aa:eb:8f:ab:ff:
         54:74:36:ff:18:31:6c:08:d9:d7:42:e0:8b:9e:d9:da:df:5c:
         78:c7:ee:4b:6f:8c:fd:2b:dc:f6:8a:e3:fc:ab:ed:53:17:eb:
         6c:bf:f4:3a:f6:f4:82:0d:4b:1c:9c:fe:40:cc:3a:80:26:df:
         24:c7:44:9a:cb:70:d5:d7:38:5b:81:06:a4:97:15:64:4d:5b:
         e4:1f:88:7f:40:78:23:e0:15:32:13:f6:2e:ef:ea:18:5a:df:
         38:7f:e3:ef:19:f9:34:bd:6d:92:b2:b6:82:22:5a:ed:8d:98:
         cb:0b:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:05:57 2026 by rpki-client