Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa
File:                     922156f4-c611-3dd6-9d0e-b98df24ae729.roa (raw, json)
Hash identifier:          18x3JycxxD50gdwnwjkR2Pc6MWKrAY0XVsdsLeqoG/A=
Subject key identifier:   0A:8D:1D:10:D9:38:7D:3C:48:79:32:5C:14:6A:C9:47:1B:C2:A9:EB
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584DF21088AFE99F3B13D52DDFC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        173.199.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:88:af:e9:9f:3b:13:d5:2d:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=785bdf06-9dd4-4802-a555-55340b17d00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:78:fc:3f:b5:a6:af:b6:9a:e7:c6:5f:12:
                    c4:fb:66:bb:c6:88:d9:33:3a:55:86:81:be:da:fc:
                    84:aa:34:58:82:ce:21:b6:ef:29:4c:d7:13:a2:f0:
                    53:f0:f8:48:9e:de:bb:3d:8b:74:94:96:fb:34:10:
                    f9:0b:bf:f2:27:95:d8:2e:d4:10:9d:8e:bc:40:29:
                    dc:cb:11:99:fa:c5:26:ff:b9:a9:b7:16:dd:33:56:
                    78:b5:05:88:e1:df:69:7e:63:78:99:6f:ef:2f:36:
                    4b:db:9e:84:73:31:fb:3e:1c:1d:0b:0e:2e:6e:d0:
                    96:d8:66:8c:34:ca:85:f4:d5:de:4e:95:7b:ff:0f:
                    cc:4a:86:b3:5d:62:62:0c:ea:b2:d8:0a:e9:9c:0d:
                    2d:0c:e1:c1:a1:7b:e9:32:2b:44:58:bf:50:20:84:
                    a1:98:47:d0:45:77:df:57:7b:ef:98:8a:df:34:c4:
                    b0:e5:4b:27:67:06:3d:55:ad:11:bc:24:5b:64:79:
                    62:90:14:8d:50:b2:59:c0:51:43:a7:bb:83:0b:65:
                    4b:c0:60:01:58:d4:aa:19:b0:99:68:f7:2b:50:06:
                    25:6e:19:76:3c:93:18:37:29:ef:33:1d:b1:5f:b2:
                    54:33:18:2e:1a:07:27:ac:ba:d4:ed:84:61:18:d3:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8D:1D:10:D9:38:7D:3C:48:79:32:5C:14:6A:C9:47:1B:C2:A9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/922156f4-c611-3dd6-9d0e-b98df24ae729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:8b:32:20:7a:a9:98:c5:4b:8b:76:b2:cd:9e:74:43:8e:
         8e:e0:98:43:91:42:9c:f0:60:bb:c0:85:25:30:60:c4:86:41:
         b3:f5:48:2e:83:12:28:82:a9:33:ba:dd:29:fb:50:32:e1:83:
         03:4e:7a:0e:45:b4:d7:53:90:db:f0:86:75:61:3f:3e:d3:17:
         eb:85:e0:90:c1:f7:f7:87:0c:b7:82:0a:58:e4:3c:96:86:db:
         1b:79:e5:7b:94:68:a1:e0:2e:0c:e1:dd:36:26:9e:b2:63:77:
         ef:f3:f4:77:b3:01:f9:f2:28:6c:be:b4:a5:09:95:86:bf:00:
         00:4f:1d:0b:8c:70:fa:1d:5b:9f:eb:65:ef:5e:27:23:fc:ae:
         f0:55:65:2a:20:bd:8c:f3:34:72:ee:6a:c0:1d:28:23:f4:d4:
         11:ef:77:60:3b:f7:19:7d:c1:b3:6f:ae:ee:81:0e:0a:7e:a6:
         e6:89:b9:75:6a:a4:92:3d:74:0b:26:dc:ba:45:f4:0d:f6:47:
         ed:c8:50:03:8f:b0:93:6f:95:14:6d:82:47:52:26:29:10:12:
         13:3b:80:8c:f6:33:3a:6f:00:92:6c:a8:4f:a0:72:44:cb:50:
         12:65:9e:b6:2c:83:e8:94:54:9d:49:7d:cc:e6:75:25:df:5f:
         6d:59:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 11:30:59 2026 by rpki-client