Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa
File:                     91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa (raw, json)
Hash identifier:          ZZz671SWujZy430lCiI3Xg38L9oqXZfz+PE5VMnCTUw=
Subject key identifier:   2A:32:77:B8:74:E8:6C:7B:93:4E:61:E6:C6:D7:76:20:B6:30:81:BB
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584AB220D73D9FFF9B8F7DE20400
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7794
IP address blocks:        216.59.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d7:3d:9f:ff:9b:8f:7d:e2:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=d920a3c9-5798-400d-aa05-d682e70d8810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:0a:22:17:37:58:98:a2:79:e9:1f:2f:1b:
                    35:4f:8c:fa:27:90:59:fb:c5:35:de:53:0f:f3:8f:
                    7e:12:93:44:1b:44:47:89:c6:1b:60:29:f7:c3:00:
                    da:1e:b0:5e:40:5f:a1:af:e4:be:7b:e5:bb:e4:83:
                    b1:66:d6:f1:40:c0:8f:7b:8b:4b:70:fb:a0:0d:2e:
                    8d:59:3e:9c:d4:9b:9b:e0:b3:dd:3d:c6:04:3c:e5:
                    ae:ae:4f:ea:b9:34:14:6e:bc:b2:92:7c:b0:da:6d:
                    cf:c5:b1:52:33:78:3e:ea:97:58:63:02:d6:d6:30:
                    16:df:15:0e:f6:cd:75:c1:de:6e:53:46:2a:d3:3f:
                    62:d0:49:08:c0:e3:db:13:e2:38:66:2d:57:e4:2d:
                    17:6c:f7:fd:9c:de:a1:8d:f6:e3:ba:7f:55:2f:db:
                    4a:d7:36:94:d1:24:3f:3b:2b:1f:bf:3c:09:e0:02:
                    11:da:59:cd:ed:9d:c8:3c:c8:e4:c3:13:ec:b5:aa:
                    85:a4:ed:dc:88:da:6d:f9:e1:87:c4:30:e8:6d:db:
                    96:b2:4e:01:9d:9b:49:56:a9:90:b9:f1:63:09:75:
                    bf:b0:ef:da:76:35:d3:ae:7c:15:bc:37:63:36:07:
                    38:68:66:60:c6:b2:66:62:93:2d:f3:52:d5:e4:5d:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:77:B8:74:E8:6C:7B:93:4E:61:E6:C6:D7:76:20:B6:30:81:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/91a4f5f1-55f8-362f-8749-06e8445d5fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:63:7a:2e:5b:c9:8a:00:d0:b3:51:7e:af:11:5a:24:0b:63:
         48:24:b9:a7:2c:72:83:03:53:35:0e:21:f2:9d:b2:8a:4d:0d:
         6d:d3:a0:02:96:c0:5a:c3:8b:01:3d:65:9f:64:21:86:56:8e:
         a1:14:5e:d3:50:ba:b1:79:58:4c:db:dc:6f:68:6e:9b:b6:af:
         3b:2c:36:41:cd:c9:2c:37:10:90:e2:56:5c:22:15:3d:88:92:
         86:3d:fd:86:32:36:b7:17:db:67:b1:59:17:e3:13:78:f2:7b:
         e8:b0:40:59:54:a0:57:ca:90:37:15:73:37:f3:95:3f:9d:04:
         20:85:fd:6f:b1:dd:6e:bf:5f:19:8e:1a:61:3f:25:8a:95:6b:
         f9:ba:0a:84:4e:d9:80:3c:3c:a9:d6:70:a8:5b:9c:a3:30:da:
         01:0b:e1:63:c0:74:f8:c4:bd:5c:53:e1:a7:10:ec:3b:2c:7f:
         19:76:af:b2:5b:75:9c:15:aa:51:1f:26:4e:ce:a5:b3:05:90:
         68:eb:ae:0e:80:9c:45:ea:0c:a0:a1:c5:f0:2e:1c:dd:1c:9c:
         82:52:25:61:bb:b6:0a:76:9f:14:a0:d7:02:53:03:08:0b:9c:
         bb:4a:60:4f:8f:d5:72:52:16:0e:74:3e:f8:9c:bd:76:d5:c3:
         10:a0:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:47:58 2025 by rpki-client