Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e0ed9527-639b-3de4-9415-52b099e85c9e.roa
File:                     e0ed9527-639b-3de4-9415-52b099e85c9e.roa (raw, json)
Hash identifier:          QHOiw4JSL3cwmS2LBtsZo4KJzCZkNEmo5/oLE7cekqI=
Subject key identifier:   DF:FD:AF:90:4D:7A:DB:68:57:E7:1F:39:EB:1C:77:13:D3:9D:8D:FE
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B21CD0878A811870CE1C0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e0ed9527-639b-3de4-9415-52b099e85c9e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.161.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:21:cd:08:78:a8:11:87:0c:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=fdbce262-9ac0-4216-810a-0871502eedb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:de:9b:1f:ce:db:af:52:1f:2b:bf:fc:47:
                    3c:6d:49:45:33:10:b6:71:59:12:15:96:f4:79:4b:
                    67:25:1f:73:12:56:1d:42:1b:fc:ca:cc:b9:b1:1c:
                    ef:de:34:f9:25:9c:a7:79:76:25:11:57:cd:05:9c:
                    ff:4c:96:b3:59:22:b4:66:fb:7f:06:79:ae:42:a2:
                    bd:1d:74:aa:96:69:82:cc:e0:d0:8f:fd:57:dd:de:
                    d2:b1:67:fa:99:cb:68:d9:d6:e1:67:2d:a3:67:b6:
                    d1:33:19:6e:67:04:2a:17:c5:cb:fe:50:0c:8b:bb:
                    c3:b7:0a:f7:f1:d3:c9:55:8e:cc:e9:1a:0c:d5:12:
                    fc:a9:f1:dd:9d:35:20:d8:08:d9:b9:9a:b7:2f:20:
                    07:da:62:c7:9f:e4:6d:a6:f4:c2:85:2e:84:24:8a:
                    34:a5:d2:43:05:d3:49:71:d4:c0:ed:96:49:6c:d0:
                    c6:d0:5e:c7:3e:e0:73:60:a0:7f:7e:9c:b9:b8:b4:
                    79:5d:fa:4e:cc:32:6d:89:2f:d2:41:56:7d:ec:7b:
                    2e:77:c0:d5:24:60:af:c5:2e:bc:2b:8e:f9:34:96:
                    b6:13:b1:76:9a:33:83:93:84:c0:b7:17:98:c1:14:
                    eb:60:a4:d8:53:73:c6:d6:77:08:e6:db:2e:b2:08:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FD:AF:90:4D:7A:DB:68:57:E7:1F:39:EB:1C:77:13:D3:9D:8D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e0ed9527-639b-3de4-9415-52b099e85c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c0:ca:21:dc:76:17:54:91:c3:e9:8f:0e:2f:d4:ff:be:59:
         f7:92:85:1f:3d:ab:52:31:21:56:e2:24:ce:49:5a:15:68:29:
         fb:9f:34:30:dd:dc:25:aa:66:43:7d:2a:dc:e4:64:df:d2:ba:
         43:9a:ca:05:3b:a9:b4:76:bd:99:61:5c:28:c6:d2:41:15:c2:
         e3:50:27:e5:3e:ae:d8:b0:b7:82:f0:4e:f7:c6:5b:9a:ba:04:
         fc:48:98:e3:d3:7b:99:22:4a:3e:91:07:76:4f:d4:1a:0e:04:
         31:b5:3b:be:01:cf:1d:b8:18:f5:21:9f:e2:56:7b:f4:be:66:
         71:0a:13:0f:8c:9d:d8:11:61:3c:a5:80:18:c9:2e:77:52:3c:
         85:67:81:31:94:f2:14:c2:68:a9:06:69:9e:6c:24:87:d9:10:
         7c:ea:7d:ff:3d:53:11:06:c4:23:89:7c:ee:d8:43:d4:01:9f:
         44:33:95:42:35:8c:c9:7c:f0:71:21:a9:67:a3:fb:49:9e:13:
         e5:7d:fd:e1:d0:78:74:c0:ab:6c:37:92:c1:34:ea:9a:ec:f9:
         1a:4f:60:94:f1:1b:f3:6e:f2:c2:e5:78:30:fc:73:f4:7d:2d:
         c8:7b:52:29:8b:49:ea:b6:e1:0a:22:8c:71:e7:8d:3e:83:5a:
         9b:ec:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:34:00 2026 by rpki-client