Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/621aafae-f4ad-3b97-931e-46c355bda709.roa
File:                     621aafae-f4ad-3b97-931e-46c355bda709.roa (raw, json)
Hash identifier:          o35CXwjBjWtI6/aa7+FxLsmpOgBvQn+6Id5Bf5FbSCc=
Subject key identifier:   6C:DF:9E:B8:59:E7:59:6F:DD:62:B1:BF:C0:46:53:FC:E1:D4:A9:5A
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584EA7939273061E170A06BE2B80
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/621aafae-f4ad-3b97-931e-46c355bda709.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11096
IP address blocks:        108.59.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:92:73:06:1e:17:0a:06:be:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0eaece2d-2429-4604-9dff-c59296f469f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:31:16:90:c8:85:94:14:0c:3b:90:e7:5d:07:
                    44:68:b4:33:70:17:b1:da:e2:f1:2c:7f:58:d4:43:
                    b3:02:e1:e8:ad:65:ca:4c:0f:63:48:e3:68:5f:0b:
                    08:77:26:a0:ca:26:b8:8d:27:76:d7:1e:f4:8b:81:
                    c1:18:f7:a6:f7:75:bd:9b:5c:75:29:01:78:1b:58:
                    d3:d9:a7:a7:fe:8e:69:40:f4:20:36:a9:f9:98:7a:
                    60:e5:17:13:dc:31:c1:77:56:3d:81:cf:24:e3:9d:
                    a9:49:e8:3f:81:2d:3c:f0:5a:c6:31:1b:6a:dc:2b:
                    c1:f2:8d:13:54:c9:60:8f:87:be:4b:72:63:65:18:
                    ca:fa:6f:bf:2d:9e:51:c4:ad:d5:6c:22:f4:49:d7:
                    e6:6b:b8:cb:2c:23:8a:49:01:6d:6f:39:18:a9:b8:
                    11:db:cb:11:b3:46:a2:3b:25:9b:76:8e:2c:99:bd:
                    83:6b:24:a8:09:14:7a:3c:dc:e9:3d:ce:4a:13:8c:
                    ab:f2:11:f6:21:4e:f7:43:18:a0:d9:65:b6:b8:5f:
                    2c:45:25:0b:c6:2d:af:1f:45:b6:1a:41:db:a3:fd:
                    44:b1:06:6f:8d:18:fb:d3:49:ad:ba:a2:af:c0:f4:
                    bb:31:1a:b4:7a:91:2c:5f:2d:93:4a:b3:f5:27:ab:
                    95:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:9E:B8:59:E7:59:6F:DD:62:B1:BF:C0:46:53:FC:E1:D4:A9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/621aafae-f4ad-3b97-931e-46c355bda709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:fb:30:66:76:1d:06:8e:d4:c6:6c:a2:06:a2:ae:8f:c0:
         bc:71:cc:33:d7:f5:3f:d9:47:f9:63:d3:ff:bd:65:ef:9d:39:
         ea:34:36:58:09:ae:34:0e:29:5c:d8:14:74:c5:db:3c:b4:26:
         1c:88:4a:d9:82:75:6b:bc:02:5d:43:ea:da:1c:14:bc:78:08:
         56:85:43:3e:71:0f:db:8b:cc:fa:cd:4e:7c:e1:2d:8e:6d:78:
         43:e0:69:94:da:37:d6:c4:5a:57:68:e4:76:3e:c6:6c:18:24:
         a7:62:0a:15:80:b8:5e:01:df:9a:ae:2c:89:c2:bd:dc:04:d3:
         a1:3e:d6:1a:4a:08:b7:ec:04:9e:a0:e9:7b:24:24:48:99:47:
         c5:33:41:7f:80:99:b0:fb:dc:ff:84:38:a5:bb:87:21:7f:11:
         48:15:4a:83:fe:c5:5c:f8:d5:38:03:95:ce:33:c3:87:44:05:
         54:78:d9:1d:da:62:30:e3:12:1b:75:18:7d:63:f3:f9:ed:92:
         43:3d:53:64:11:25:4e:45:bc:f7:b4:dd:ab:37:f5:99:c4:0d:
         89:dc:6e:1f:6b:e8:04:38:e0:53:56:9d:6b:2a:5d:c2:34:e1:
         a5:06:29:08:21:36:8d:57:b5:8e:af:22:ee:eb:f3:82:c2:42:
         68:2b:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 11:08:15 2026 by rpki-client