Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa
File:                     d95cc6d6-55bb-308f-949f-92289630db15.roa (raw, json)
Hash identifier:          sTfz3QqLPtMOV91/9uc7YXonZlyZyWbL64U0kkCDzqA=
Subject key identifier:   CC:73:74:34:CD:48:6D:D4:D9:EF:0E:D6:75:AA:EE:00:64:12:07:55
Certificate issuer:       /CN=59b44f57-163e-4377-bee0-0f066b25f0c2
Certificate serial:       010D0C9F4328584E640FC41F642D76630C6A2C80
Authority key identifier: A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        204.239.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c4:1f:64:2d:76:63:0c:6a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b44f57-163e-4377-bee0-0f066b25f0c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=61a192a8-e20b-4599-a20d-28bef7d88cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:e5:c5:b1:5e:04:e2:03:82:d5:4e:37:1f:
                    7b:7e:4d:33:a8:e6:d8:33:85:48:94:e0:fd:2c:ad:
                    ca:20:86:cd:e2:45:ff:a5:68:5d:f2:b9:50:a4:90:
                    65:9e:bc:7f:77:aa:4d:b9:2a:cf:2d:8a:c7:1a:f1:
                    d5:69:2e:bf:0a:ff:0e:bf:2b:18:23:10:a7:82:37:
                    53:8b:e1:f3:f5:ac:3c:73:93:bf:90:f0:50:75:fd:
                    ab:1b:df:d3:a7:6e:25:59:94:72:5c:8c:7a:d4:26:
                    24:d5:3d:2a:06:f6:b9:ef:4f:d3:0f:1d:d0:4b:58:
                    96:2c:b9:1c:91:7e:b7:35:20:8b:e1:2a:aa:08:fc:
                    7f:a0:92:80:ea:9f:ee:d4:72:2d:00:00:2c:a1:74:
                    1a:8c:68:34:bb:b2:0d:dc:ad:ed:f9:a5:1c:fb:e7:
                    de:23:74:bf:45:cd:35:b2:e4:5e:2d:5d:f0:01:ea:
                    69:2d:d0:a1:5b:db:ff:3c:73:48:fc:83:4b:13:eb:
                    92:56:03:f8:2e:f9:d2:b0:2a:4f:4f:03:e7:87:2e:
                    87:5a:b7:51:37:99:f5:ae:13:f6:c7:36:53:5c:63:
                    3e:3f:64:e6:b2:eb:04:4b:4e:4f:ba:1e:03:b9:19:
                    94:5c:83:b8:b1:4d:16:5a:1a:5c:12:4b:b3:9f:e1:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:73:74:34:CD:48:6D:D4:D9:EF:0E:D6:75:AA:EE:00:64:12:07:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:bc:1d:ee:ff:30:08:97:f5:17:0c:f2:6e:4e:5c:3d:be:
         2a:f5:63:87:92:9b:9c:a1:b5:ec:81:65:3e:eb:fc:01:1a:23:
         7d:8d:62:6f:2b:62:6d:17:1d:eb:8d:38:36:02:88:a0:38:86:
         42:09:da:1d:3b:bc:db:d3:d1:12:17:86:93:4d:e4:4f:1c:f3:
         15:b0:4f:f8:59:be:e0:3d:01:06:94:e8:26:5e:5b:27:b5:44:
         83:95:cc:c4:e8:0c:db:f0:1a:27:ce:60:e4:cc:b7:ea:2a:ac:
         a1:fe:a1:f8:ab:83:a4:2f:a0:74:95:24:b2:e5:15:c7:61:b9:
         10:3c:26:13:57:11:5c:a9:75:97:b7:1c:8f:c8:c2:ce:ed:9a:
         76:28:4f:12:01:a4:b4:9c:92:d2:22:5d:8d:02:88:0d:45:3a:
         62:d4:82:23:4e:ef:14:d3:38:d8:6e:a7:6d:5d:79:e1:fa:57:
         83:b8:a1:a0:fa:50:3d:07:5d:9f:5f:1c:ba:ae:9e:06:13:15:
         3f:eb:e2:2d:27:51:af:47:14:fe:cf:ac:f9:ec:1b:ec:d5:b8:
         5f:df:3c:cc:fd:98:00:26:0d:d4:11:ff:ec:7e:06:c6:c9:24:
         45:ca:3a:4e:5e:c8:21:41:b8:f3:bd:b7:dc:41:43:72:93:25:
         a1:8a:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:20:38 2026 by rpki-client