Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
File:                     cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (raw, json)
Hash identifier:          CSDo6SaAHeRiVthoD4fNqk/3q2OjGwq+txEvY+xZYhM=
Subject key identifier:   DA:5D:BB:9A:35:44:E5:88:32:BD:7C:AD:9C:F5:F7:A9:DA:4C:A0:5B
Certificate issuer:       /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Certificate serial:       010D0C9F4328584EA788938E30A6BC044D8DC880
Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11399
IP address blocks:        204.225.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:93:8e:30:a6:bc:04:4d:8d:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=873acc6a-d183-4bb3-87d0-eca586064052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:4b:fa:3b:8a:14:fc:35:e6:42:99:ae:55:
                    35:12:86:88:e4:9e:4a:34:77:fd:48:a8:a4:89:28:
                    c1:67:99:34:a8:2e:24:1d:4e:e3:49:b9:47:fb:91:
                    fb:db:8c:0b:25:69:9b:3b:f3:76:de:9e:ab:65:ff:
                    01:7d:6e:47:d6:11:bd:0a:59:de:b4:0b:1d:da:e6:
                    bf:46:ab:5b:8a:28:d5:25:e4:ab:9c:4d:60:6d:a5:
                    e1:33:e6:93:b0:92:94:69:a8:df:f8:26:83:4c:fd:
                    85:4e:c8:fd:b4:cb:c2:26:65:33:e2:9e:dd:97:f7:
                    09:18:49:2f:41:0c:02:ff:60:87:a2:19:ea:9a:6d:
                    82:7b:45:4f:86:c8:54:9b:60:05:a2:0b:43:ae:bf:
                    72:7b:66:dc:1d:82:6f:36:ea:ec:73:f3:08:d7:bf:
                    60:e3:5b:69:c7:0f:27:bf:c7:6c:ba:cb:72:f2:ce:
                    b9:0f:36:96:c7:68:75:7d:ff:ac:e3:9f:4a:0d:43:
                    cc:de:e4:fa:90:1f:cc:b8:24:cd:da:5c:84:a4:70:
                    09:0d:20:20:4a:23:d6:9a:62:b9:e7:ed:41:f6:ae:
                    23:9c:29:21:50:5b:02:c6:11:77:d6:fa:9e:09:01:
                    26:93:b4:f0:ca:65:e4:a2:f1:e9:91:b1:54:9b:92:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:BB:9A:35:44:E5:88:32:BD:7C:AD:9C:F5:F7:A9:DA:4C:A0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl

            X509v3 Authority Key Identifier:
                keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8b:e3:a0:90:c9:06:22:34:fc:ea:f4:a2:40:45:18:7b:2e:
         84:0e:a0:ee:34:74:cc:4e:6c:ed:da:c4:3d:88:fd:26:9b:6e:
         1b:9e:57:17:f0:91:2e:a2:7d:c1:74:cd:a9:9a:a4:c4:e4:5b:
         f1:d9:c9:6f:67:82:7b:cd:16:a4:dc:f4:63:a9:87:15:53:fc:
         9a:b2:8f:41:f4:8d:ce:f3:d7:ed:d9:53:93:b8:7f:6e:84:c0:
         a7:c7:ae:6e:98:33:d6:23:4b:2b:18:d8:e6:84:bb:d2:73:46:
         5f:1d:2d:ae:f4:82:ba:9b:58:68:f7:b0:55:b8:28:77:53:6e:
         9d:ca:66:e7:25:96:4e:e3:2c:f8:06:bc:7a:23:3b:30:3f:74:
         18:41:9a:f9:f6:58:37:04:c1:ca:cb:ec:a6:dc:bb:3b:c7:02:
         42:3a:fa:c2:2c:03:57:d8:6e:86:46:b8:f6:ff:1f:6e:da:a2:
         ab:fc:7f:35:eb:d9:ef:cf:53:7e:76:e2:d7:90:ab:1c:7b:5f:
         71:56:7c:5e:26:52:1f:5f:1a:d1:f1:c9:43:6e:c3:05:14:b8:
         4e:e3:53:ec:50:a7:4b:d3:a9:c5:f2:d4:2e:e8:47:e1:9a:90:
         73:0d:c8:79:f8:15:bf:5e:85:2a:da:65:b4:33:81:8b:f5:59:
         9a:da:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:42:48 2026 by rpki-client