Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/65948088-78b9-317c-934b-3f6d8c85cc6f.roa
File:                     65948088-78b9-317c-934b-3f6d8c85cc6f.roa (raw, json)
Hash identifier:          h7PC39Pp86X8HsYH/2/cl0BdfHxG9P/eW1UewhHcJhQ=
Subject key identifier:   7E:F0:8E:F0:F9:65:F1:25:9E:55:6D:80:3D:D6:25:C5:1E:0E:D8:E5
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328584AE7D93CECB238B2ED846F0980
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/65948088-78b9-317c-934b-3f6d8c85cc6f.roa
Signing time:             Tue 19 Aug 2025 06:50:12 +0000
ROA not before:           Tue 19 Aug 2025 06:50:12 +0000
ROA not after:            Mon 17 Nov 2025 07:50:12 +0000
asID:                     137235
IP address blocks:        216.126.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:d9:3c:ec:b2:38:b2:ed:84:6f:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Aug 19 06:50:12 2025 GMT
            Not After : Nov 17 07:50:12 2025 GMT
        Subject: CN=8bc913dc-3c00-416e-809f-ef481b7b76c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:32:72:36:ce:d3:f5:f5:fa:62:f7:e0:da:b3:
                    09:1f:66:c7:fe:9b:af:a5:bd:fc:d5:b9:42:96:e5:
                    2c:53:81:57:3b:f8:c8:30:d8:31:50:fd:10:34:27:
                    da:80:65:95:a3:1e:f0:c3:f6:a1:23:b1:12:70:93:
                    3c:94:28:d6:55:7d:8b:bc:8e:99:f5:39:45:98:39:
                    43:ee:61:60:53:23:85:dd:2e:c8:b3:be:81:d6:fe:
                    cd:1f:e1:e4:b3:f9:d4:f5:8a:ee:3c:1b:65:3f:14:
                    10:3f:43:d9:72:4d:17:25:ad:c9:c0:c5:ab:0f:03:
                    82:7a:31:29:85:fa:1a:28:9f:4c:57:bc:92:d4:6c:
                    51:1d:b6:81:98:7f:ee:ba:dd:32:1f:8c:25:a2:cb:
                    a6:c7:5f:36:9e:a4:72:a4:89:49:3c:7f:27:2d:0b:
                    4d:0b:11:e7:d3:5c:00:24:fa:71:8c:4a:02:6e:98:
                    3c:5c:bf:78:2f:13:c9:2d:30:0e:e3:87:31:59:67:
                    4a:e7:b0:2a:34:e1:10:20:ed:d9:c3:06:ff:9f:1a:
                    31:23:30:0b:d4:32:21:8f:ea:59:7c:17:d2:8d:30:
                    9d:7d:8b:92:19:0c:45:98:3c:48:9d:fa:38:33:b7:
                    01:69:6d:9c:54:66:c4:08:1a:c3:5e:a7:9a:32:e1:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:8E:F0:F9:65:F1:25:9E:55:6D:80:3D:D6:25:C5:1E:0E:D8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/65948088-78b9-317c-934b-3f6d8c85cc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:26:a6:7b:21:a0:8f:96:30:40:45:0b:ac:b1:24:05:64:c9:
         1f:6f:3e:8d:95:a8:18:d3:3c:7c:79:41:6e:4a:50:86:3d:6f:
         53:b1:a2:64:c0:c5:39:c7:22:14:71:2f:da:08:f4:99:eb:95:
         8d:18:fd:a7:ed:cb:d5:10:a8:33:a3:bd:10:7f:0d:06:ba:c7:
         1c:56:af:81:9a:47:81:cc:b1:48:ca:84:60:a3:c6:43:e1:f2:
         69:91:13:d5:54:f0:41:ca:98:ac:76:d2:5d:f2:75:3f:de:e8:
         c0:dc:04:e8:44:64:cb:e8:5f:c6:05:23:55:2e:5e:f1:22:c4:
         fc:c3:99:ff:74:84:c2:6d:a3:89:13:a4:99:63:e7:00:05:1b:
         fc:8e:8b:b1:b1:f9:a3:e6:c8:4f:29:af:b9:c8:e8:ea:1a:ab:
         c8:2e:d1:62:62:c1:10:09:a5:a8:eb:3c:4b:93:20:b4:1d:ef:
         fc:c6:ee:06:61:95:dc:f2:d1:0b:b9:05:35:7b:ac:7f:2a:d1:
         55:5b:df:db:38:0c:78:38:94:68:6e:3a:60:14:f1:e9:a2:fc:
         69:53:0d:3c:a3:bb:c5:42:9d:62:0c:fe:6c:22:74:00:9d:c9:
         35:77:e5:34:e3:c9:14:86:2c:71:7c:f8:8f:25:9e:77:f8:d5:
         d7:b2:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:59:58 2025 by rpki-client