Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021441bd-90ab-3a2a-bd8b-3047a46adc24.roa
File:                     021441bd-90ab-3a2a-bd8b-3047a46adc24.roa (raw, json)
Hash identifier:          YyLY111vcn51kmhfETBua4RQRr27CYLawbcFydSQeko=
Subject key identifier:   CD:49:9D:40:CF:8D:5F:20:1C:65:8A:2A:CD:E8:DF:3A:0F:09:97:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D3C40CA9B63A11B625D50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021441bd-90ab-3a2a-bd8b-3047a46adc24.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        71.59.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:3c:40:ca:9b:63:a1:1b:62:5d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2e757b12-1bef-4948-b3a7-68c108424457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:55:17:0c:b3:98:b2:f0:16:73:d7:dd:6a:
                    2f:c8:7b:d5:00:07:9b:a0:b9:29:3e:4b:44:ea:64:
                    02:30:fa:5b:64:a4:3c:2e:98:b4:1c:f9:1f:c1:40:
                    fd:20:42:26:41:e2:00:3a:77:69:f1:e3:3c:85:ae:
                    90:f1:1a:19:20:3e:67:fc:8f:f0:22:11:68:4e:ba:
                    cf:bf:3a:df:4b:a1:52:fa:64:93:c4:41:00:e9:2e:
                    56:2e:0c:22:57:ba:d0:f0:be:ce:c3:be:6e:10:74:
                    86:20:9b:77:6b:30:60:1b:e9:b0:1a:1d:4d:87:81:
                    b4:51:eb:59:69:92:c9:5a:6f:5e:9a:27:8c:a8:9a:
                    ee:ac:6c:3b:35:39:71:43:3e:5c:e8:70:8f:88:ca:
                    09:36:9a:ad:f7:dd:ae:71:86:49:42:36:5e:6c:d6:
                    fc:1c:1c:dd:17:8c:45:5a:df:79:e7:17:69:48:79:
                    93:7e:5b:5d:e1:1b:50:99:c5:48:ee:5d:2f:37:3e:
                    07:0d:8b:05:3d:24:81:88:ed:c7:e2:35:cf:af:a7:
                    75:7f:d4:4e:c5:0c:56:df:e1:dd:da:3f:b1:a1:6b:
                    2f:59:64:92:6b:d5:c5:97:6a:10:50:2c:32:c7:56:
                    8c:82:17:26:d1:02:5b:85:f5:5c:68:a2:7c:82:89:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:9D:40:CF:8D:5F:20:1C:65:8A:2A:CD:E8:DF:3A:0F:09:97:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/021441bd-90ab-3a2a-bd8b-3047a46adc24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.59.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:0e:3f:0c:03:64:51:c3:7b:86:52:4d:a7:2f:30:7c:ed:
         c3:52:e8:34:cf:4d:f3:3c:ca:35:99:4c:cc:14:06:06:68:f8:
         24:ae:cc:66:be:a6:5f:0f:3f:2c:ac:6d:49:72:40:29:10:57:
         7f:26:86:f2:46:8a:4c:97:4b:01:36:0f:38:63:59:b1:9c:3d:
         31:b1:04:c9:4a:16:a6:03:09:ce:6c:66:03:88:b8:75:c7:6e:
         4e:f3:5a:c6:35:f5:23:6d:80:e4:18:dc:48:e2:2a:d9:1c:25:
         9b:3c:4d:ce:8b:f1:04:82:64:6a:58:92:d5:ab:bf:5b:b5:f7:
         1b:c3:9b:86:6d:9e:a9:a9:7a:7b:c0:e9:fc:2d:d5:a1:0f:56:
         8f:0d:27:32:bf:39:17:c3:ba:7c:2e:68:67:c7:c5:ff:81:46:
         d2:d4:31:43:b4:c3:76:31:85:51:6b:c7:06:29:52:fa:49:7e:
         f4:bc:7f:48:71:6e:c4:ca:33:2a:2c:7c:44:02:0d:37:f9:e2:
         78:bd:74:75:a2:30:3d:45:b5:43:75:a3:a2:a5:62:d0:f0:6a:
         69:db:7e:a4:cb:0b:72:57:fd:c7:0f:25:17:b5:c3:45:d8:99:
         6c:d5:7e:d3:06:27:72:31:3c:05:ed:eb:5c:56:0a:ae:5b:a0:
         26:5a:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:49:43 2026 by rpki-client