Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/59d95b53-10f9-3f47-a0f3-81b727db04dc.roa
File:                     59d95b53-10f9-3f47-a0f3-81b727db04dc.roa (raw, json)
Hash identifier:          q8+oIsEGFu5Dq8K5ww1rNSZturS4MD4fV5DyOKXUans=
Subject key identifier:   22:7E:A1:18:0A:9F:C3:12:F1:22:55:9B:99:57:8D:E4:B3:95:A6:B3
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584ED9C74E30AF91CE9C069A22CC
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/59d95b53-10f9-3f47-a0f3-81b727db04dc.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     32043
IP address blocks:        104.241.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4e:30:af:91:ce:9c:06:9a:22:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=53d3f6d3-c1e0-4020-9247-50e96398670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:0f:28:42:94:08:65:eb:41:fe:24:50:62:
                    98:9e:c1:d3:c9:fb:61:63:cb:b2:e1:d5:4a:67:81:
                    c8:2b:73:88:ef:98:8d:53:16:1d:25:0b:ee:8f:62:
                    cf:88:bf:94:e6:99:0c:14:7b:7a:3d:21:62:a3:c9:
                    56:d8:d6:f1:52:39:3d:af:1d:d0:c1:eb:8f:0b:83:
                    e0:15:0f:34:1b:37:d7:b5:e1:df:6c:59:63:fe:c3:
                    fa:03:76:3d:da:44:99:98:28:8c:95:7f:80:28:6a:
                    80:3a:23:83:84:3c:0a:ae:e9:90:f0:97:51:c6:9a:
                    76:d7:9b:9a:d2:96:60:3b:53:4f:43:91:b9:ce:a1:
                    ce:60:37:ac:b0:96:77:d4:41:43:d7:00:a6:43:11:
                    c4:78:a2:5d:a2:0f:37:6d:a0:b5:9b:1f:b9:46:48:
                    df:92:a5:83:b5:0d:df:fb:b0:8c:80:45:de:e4:15:
                    0b:5f:4d:d4:d2:f0:ab:56:9c:3c:cd:ae:d6:cf:a9:
                    27:e0:42:b5:b1:cd:70:c5:dc:5d:4d:c5:1b:c0:0e:
                    da:d3:f7:8a:a4:a0:9b:29:5f:02:18:6b:bd:7e:5d:
                    3d:67:91:a4:44:05:38:82:e5:86:6e:8b:ea:e3:50:
                    97:35:ee:e2:f6:5a:93:8f:b5:f9:2c:8d:5f:e4:85:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7E:A1:18:0A:9F:C3:12:F1:22:55:9B:99:57:8D:E4:B3:95:A6:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/59d95b53-10f9-3f47-a0f3-81b727db04dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.241.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b4:03:4f:21:ec:ef:64:52:0e:ca:07:94:2e:89:25:e8:2c:
         f4:30:bd:c1:73:e2:d3:5c:a7:db:9a:11:70:5f:6b:70:ca:66:
         0c:72:89:c5:a1:2b:d8:92:eb:8a:2f:c3:9c:49:60:e0:1d:d6:
         a2:48:6a:16:ca:af:2e:8a:c1:6b:73:05:24:53:7e:ad:ff:f4:
         97:e7:dd:d3:c0:50:f0:79:0b:e4:96:37:aa:90:4c:20:ca:cb:
         92:e1:e8:9c:44:3c:d7:98:67:ff:a0:22:76:84:83:8b:5d:b8:
         2c:2d:54:27:c2:15:1c:cd:60:56:4d:05:e4:ee:63:92:51:79:
         ab:67:6e:f4:14:84:7d:aa:b1:11:98:6d:e7:1f:5f:fc:9d:cc:
         2b:ba:46:69:11:7d:d3:37:8f:df:06:1a:85:10:5c:72:5a:47:
         10:8e:fb:c7:90:3f:cc:d1:b3:e2:88:55:3c:57:b2:39:23:ea:
         41:6b:88:b3:2f:b9:05:09:fc:aa:9c:04:5b:02:c0:ad:aa:60:
         ec:85:24:31:a5:2a:32:28:0c:ae:1f:44:d9:a8:b8:f8:45:7a:
         9c:56:7a:d1:24:6b:b1:24:50:3d:49:5d:ce:67:d7:d6:04:6b:
         0b:23:3d:f2:58:7b:63:76:d0:75:c1:26:41:4c:46:05:54:2a:
         58:8f:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:59 2026 by rpki-client