Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          zEaPIMiNUop3P46snjPM4gYM8eQh3m9rtkPRD3PfCAA=
Subject key identifier:   70:65:8E:CC:CC:D7:40:95:5B:4D:BF:A2:65:CC:ED:BB:68:80:2C:6B
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584F63F8173AFBDAEF94E6025800
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:17:3a:fb:da:ef:94:e6:02:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=73d268ce-0030-4dce-ad27-333dc29a6a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:a1:bf:4a:e3:72:4a:63:ac:77:c7:fe:99:
                    28:74:f0:45:99:a0:1b:21:58:8d:24:3a:e9:2b:19:
                    88:14:eb:d5:b9:05:c6:56:5d:c7:d6:72:7a:8a:96:
                    22:c0:6f:ad:09:62:0e:c1:a5:5b:98:38:6d:9f:4d:
                    ef:69:46:b3:a6:13:21:0b:3e:bc:79:e1:25:00:20:
                    8a:20:35:4b:61:fe:12:1a:77:9a:9e:50:8c:c1:d7:
                    c0:a4:b1:73:d5:30:ad:55:9a:70:90:08:dc:ba:25:
                    0f:6b:53:62:a2:b5:c3:6b:3e:cb:86:18:e4:8c:41:
                    1c:d6:b2:74:02:e0:6d:95:5b:1a:67:14:fc:39:89:
                    c7:a6:5f:b4:7f:a7:59:42:6f:d8:79:fb:c1:d7:58:
                    1d:cd:69:f4:6d:d0:46:4e:e4:6f:3d:6f:db:38:a6:
                    68:a9:16:57:6d:4b:72:d4:d9:df:17:b3:90:04:c9:
                    f0:7e:d9:18:6f:bc:fb:ea:cb:26:b2:36:26:85:e3:
                    22:d4:61:e9:b0:d9:20:cb:b5:d0:98:31:e6:09:2b:
                    ea:85:5d:82:d9:6c:9d:4f:71:5d:fd:63:7c:f3:2c:
                    2b:76:9a:2d:3b:71:33:7e:d4:ff:f7:2d:b6:1a:ba:
                    0f:54:6a:b0:4d:bd:24:13:27:5d:65:d0:4e:57:0c:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:8E:CC:CC:D7:40:95:5B:4D:BF:A2:65:CC:ED:BB:68:80:2C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:ee:f5:c9:5a:38:90:0b:59:44:08:bb:0b:96:5a:da:57:
         04:b5:12:9a:f9:eb:0a:8a:2a:c7:c1:ba:45:88:e2:7b:d6:04:
         25:c4:e8:17:7f:19:02:5f:ca:92:19:e9:d4:11:96:b6:cb:9d:
         fe:e6:27:d0:15:1e:ea:f4:3a:00:11:dc:5f:e7:3b:c2:66:39:
         77:8c:cf:d1:29:22:3a:01:52:01:cf:9b:e6:66:82:28:94:c6:
         fe:51:39:24:c3:54:b3:a0:1d:f4:75:0d:97:9f:11:c9:78:7e:
         a5:84:06:00:da:4f:03:cb:39:60:6d:44:c4:87:91:a7:95:64:
         95:2c:14:f3:da:9d:6e:f6:98:fe:0f:e9:ac:b6:f8:2b:99:bc:
         e6:6d:27:90:bd:9d:67:4d:f5:75:25:14:b8:33:9c:a9:66:00:
         65:5d:01:42:12:3b:4d:c0:28:f6:d6:5a:c9:8e:10:c5:9c:3c:
         92:16:b0:64:17:58:56:57:4b:3b:bb:f7:69:d2:18:fe:e0:8d:
         44:89:e2:e2:e4:e9:2b:06:95:58:70:30:a3:0b:37:2b:7f:44:
         b0:fc:cb:56:98:e4:f6:d0:31:c2:1b:77:b2:1c:b6:b8:ff:ff:
         ed:9f:3e:c6:bb:e4:17:86:fa:03:20:c9:95:5e:c7:e3:fd:e1:
         43:22:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:10:31 2026 by rpki-client