Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa
File:                     60d58fff-6605-34bc-96e4-45cd266fe952.roa (raw, json)
Hash identifier:          wy6B7Z8WUWEpJ2BxgPcVABUtAtULsMxrnEZesKUbXDw=
Subject key identifier:   49:8C:07:FE:D6:F1:ED:69:49:62:13:03:AB:D3:19:70:3C:7E:84:0A
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F4328584F00DCD5C3E9DAB35DD76B4500
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     33601
IP address blocks:        45.59.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:d5:c3:e9:da:b3:5d:d7:6b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=69cccf33-51b8-4bb7-a8f4-261ede890d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:b9:41:6c:89:16:fb:16:fc:a6:7f:6c:c1:
                    98:98:f0:db:1d:78:c8:56:85:ff:3e:36:45:bb:4b:
                    c7:6b:24:58:1e:11:b6:29:06:6f:1f:f8:ca:87:20:
                    78:1f:f8:1d:bf:0a:ae:56:30:11:5b:51:f8:bc:c6:
                    ac:c3:92:ac:66:0d:01:53:d5:ca:91:a3:70:0a:6f:
                    a4:90:88:7f:30:41:38:f4:cd:ae:75:ba:78:88:bf:
                    2f:21:18:7c:92:8c:49:0f:e7:77:72:10:54:1d:fe:
                    c8:81:b8:6c:48:63:c0:41:38:13:25:da:57:ef:74:
                    bd:f8:f1:b8:57:c5:3d:68:d0:ed:b2:17:06:9e:79:
                    ec:98:df:d8:3e:90:9c:90:5f:36:1f:02:94:5f:71:
                    46:ff:c7:4a:84:47:cd:f5:4a:b1:d3:a9:c5:ff:23:
                    53:62:4c:b8:5e:25:15:93:49:38:06:0a:e7:01:91:
                    c9:cd:09:7b:1b:d4:94:51:25:2a:25:5a:ce:64:a4:
                    a3:e1:bc:ea:d3:20:9e:d8:7f:58:bc:a4:a6:a1:de:
                    b0:bd:29:3d:5c:bc:2d:de:8e:e6:1f:2d:4d:e1:89:
                    aa:ee:d3:da:6d:d1:61:d1:b0:5c:6f:ec:fc:ed:ce:
                    1b:a6:81:8e:49:e4:f7:b5:cc:b3:69:d2:21:8e:3b:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:07:FE:D6:F1:ED:69:49:62:13:03:AB:D3:19:70:3C:7E:84:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/60d58fff-6605-34bc-96e4-45cd266fe952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:95:85:e0:72:dc:eb:d2:69:9d:89:1f:6e:f5:6e:76:c2:
         04:b3:f1:56:bc:b0:dd:21:b4:ff:1b:55:2b:e9:0c:d8:e7:3e:
         3a:8b:7c:db:ec:c5:6f:75:9b:80:00:3e:f6:cd:7a:df:05:80:
         5d:a1:2e:6f:20:b4:84:dc:7f:5b:62:61:f1:23:e5:18:23:07:
         86:98:43:33:0d:62:d1:2a:04:4f:8f:d7:af:48:22:22:06:42:
         ee:bf:89:2b:bb:50:05:76:97:d9:d6:ed:5b:0c:a2:69:0a:8b:
         ac:67:03:b8:1f:0e:11:c2:6c:18:da:47:0f:2e:a3:23:33:8d:
         28:3d:0c:7d:20:ca:cf:a1:fb:6e:95:2f:c4:ce:cc:73:14:73:
         49:c7:44:c9:a4:c7:6a:6e:3f:da:1e:d5:5e:ae:d1:c4:7e:98:
         d0:04:22:79:ac:08:81:0a:cb:0d:77:3f:5d:e0:30:3b:f9:1c:
         59:2b:2c:d5:2c:76:92:75:5e:20:d8:4c:a1:42:1a:56:7b:57:
         16:ed:34:c1:27:f7:31:d9:5f:ba:d1:58:27:92:cd:1d:5f:90:
         a6:22:73:fb:3a:ad:6a:f2:5b:b1:bc:c8:7b:36:c9:11:9b:70:
         b7:73:94:ab:12:1d:8c:23:8e:b1:4b:40:9d:00:ce:7e:41:b3:
         86:1a:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:58:10 2026 by rpki-client