Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59a2deec-fd86-3c84-bc41-f24c0c7cd5f5.roa
File:                     59a2deec-fd86-3c84-bc41-f24c0c7cd5f5.roa (raw, json)
Hash identifier:          ubQRpD6cqIF2BUfb4JelUKTvGZNxGXxVz68d+FntTRc=
Subject key identifier:   CA:E2:14:58:9B:7B:EE:24:28:E3:7D:15:58:18:11:98:32:11:56:29
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EA79CA52B91A0C5924DE61740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59a2deec-fd86-3c84-bc41-f24c0c7cd5f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        174.80.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a5:2b:91:a0:c5:92:4d:e6:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3895dea9-dfa3-485d-8eda-93246f84150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:47:28:3e:d6:65:53:2b:4e:9d:58:ad:9a:
                    88:a5:29:2a:1e:02:54:d2:15:1d:9b:45:78:c9:e9:
                    e6:f3:54:fe:02:dc:d2:09:40:a1:1d:7c:35:9d:23:
                    0f:4e:2c:65:5e:59:07:9c:42:f2:95:22:9f:58:73:
                    d7:55:91:f7:4a:9d:9e:6a:a6:e4:2b:dc:1d:39:87:
                    3d:b3:f6:70:24:da:6d:33:78:8e:ce:f4:cd:a0:1e:
                    84:0e:4b:ac:3d:35:b2:19:fe:e6:03:59:ff:b3:2e:
                    d5:d7:6a:a9:50:e3:b9:a7:f2:97:3a:8c:dd:2b:ca:
                    6c:1c:c9:a4:a8:cb:47:a5:ff:17:2a:78:83:15:be:
                    56:c3:58:d6:9f:40:69:5a:a1:38:e1:1f:08:ff:08:
                    69:9c:65:7c:23:5c:54:79:5b:0e:60:da:29:70:bc:
                    2d:74:8d:0a:ef:49:a3:e3:5f:cd:24:25:10:ac:c9:
                    5e:ea:49:4f:6f:1d:51:9a:9b:cb:47:fc:40:6c:c0:
                    90:33:31:fd:c9:2d:da:b3:30:98:55:ef:e9:3d:d8:
                    36:0d:67:cf:35:f7:57:15:03:53:77:57:ed:aa:b8:
                    36:bf:3c:f1:4d:ec:f6:22:7a:c9:7c:8e:a7:9a:6d:
                    24:06:94:9b:41:57:60:2e:c5:8e:a0:aa:47:1c:db:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:14:58:9B:7B:EE:24:28:E3:7D:15:58:18:11:98:32:11:56:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/59a2deec-fd86-3c84-bc41-f24c0c7cd5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.80.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:39:00:d4:da:0e:98:70:1f:d6:fc:8f:6d:b4:9d:2a:c5:5a:
         89:46:28:ea:d9:06:2b:bc:72:53:2d:a9:1a:ac:91:e3:9e:dc:
         ae:c6:5d:2d:c5:17:31:e8:a9:5d:31:50:1e:90:b5:a3:ea:f7:
         81:3a:3a:7c:34:df:a9:05:df:c2:b2:26:67:0c:5c:47:d5:61:
         cf:9d:05:e5:46:03:3c:da:c2:37:5e:a8:de:45:0d:0f:23:e1:
         98:43:cf:b3:97:e3:5f:c3:2e:ad:8d:14:64:bd:91:e1:8d:32:
         02:ec:0d:b0:3f:7f:d4:c9:d0:26:06:4a:a8:e8:d8:27:5b:d4:
         92:c5:df:e4:f4:96:ad:a6:31:bd:92:5d:e1:17:a3:2e:e0:53:
         29:d3:14:13:65:17:62:a0:e8:1f:a3:65:62:c8:09:1f:04:ed:
         6d:24:c2:f3:56:57:bf:49:de:b3:ce:bf:53:1a:e5:7b:15:76:
         37:c6:d2:b1:69:09:4a:75:fc:79:93:30:6f:64:d7:d8:89:20:
         93:6a:87:b3:e7:45:02:b0:1c:89:6f:51:5e:ec:8e:61:57:17:
         7d:3d:6f:b8:95:5c:a4:3e:2b:e6:ac:42:e1:12:66:f8:73:45:
         93:61:66:59:b1:98:dc:16:77:eb:d6:f4:be:4b:04:6c:d5:3d:
         70:c3:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:04:50 2026 by rpki-client