Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b2481367-993b-36be-9a8b-a61c59b9cb80.roa
File:                     b2481367-993b-36be-9a8b-a61c59b9cb80.roa (raw, json)
Hash identifier:          Y07fTeaAqia9up3dvGtStu9TpGsuaPIdUENIk0SMaiQ=
Subject key identifier:   CC:19:D8:1E:44:EC:B0:9C:21:DA:97:81:94:29:9F:D6:25:9A:64:7D
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584CAA271E402C02B9009E7F6680
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b2481367-993b-36be-9a8b-a61c59b9cb80.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     9009
IP address blocks:        45.59.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:1e:40:2c:02:b9:00:9e:7f:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=4ab0a6d4-8e18-4085-baf3-92e662f792b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:53:f8:03:66:1a:05:6e:2c:11:a3:9e:08:
                    6a:19:6d:0d:9b:58:41:94:da:c2:f4:26:22:cf:e2:
                    6e:b8:bf:5a:05:5b:1b:2b:c7:46:dd:b4:bc:0c:96:
                    6c:9b:75:7b:eb:f2:65:37:f7:88:bd:ea:75:1f:ca:
                    9d:40:1d:4f:fe:76:0c:76:95:af:da:af:e1:00:c7:
                    59:35:71:52:b1:37:28:12:13:f1:b5:96:00:d6:cd:
                    49:ca:9e:2e:45:08:45:72:17:6a:55:69:41:20:d9:
                    6a:2e:9c:50:91:73:46:03:5c:89:fd:32:8d:14:ff:
                    0e:de:3a:2c:b8:c6:ef:4f:d2:7a:28:eb:66:36:9e:
                    02:82:55:3f:5c:ec:72:d2:d4:44:85:a6:d2:25:c0:
                    50:39:54:99:f6:0d:fb:ae:89:94:f9:b7:93:27:8e:
                    50:2b:bd:4f:3d:6c:4b:91:76:28:d9:86:b6:4e:4f:
                    7f:a5:1c:f7:e4:7b:b4:a3:e0:73:b6:a8:d5:db:0e:
                    39:9a:c3:42:b6:f9:38:1b:71:8c:ce:0d:81:ac:5c:
                    d9:e3:f5:1e:77:68:d7:1c:5b:4d:6e:8b:c1:ca:90:
                    bd:61:d0:7a:4e:e7:93:ac:87:c2:3e:4a:41:3b:5a:
                    df:ee:bd:df:01:56:25:65:37:57:fb:52:3c:95:56:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:19:D8:1E:44:EC:B0:9C:21:DA:97:81:94:29:9F:D6:25:9A:64:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b2481367-993b-36be-9a8b-a61c59b9cb80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:c6:6d:81:80:60:a3:c3:a9:ad:84:43:3a:ed:4d:f6:61:
         4f:ad:e4:24:d3:7e:27:95:43:db:2b:ff:bb:41:78:ab:15:19:
         37:0e:b6:d2:2b:9c:ac:14:a8:21:0a:d5:d9:21:05:50:f7:fa:
         5b:ac:ae:8b:9b:ba:ac:6e:a1:b3:09:40:47:47:ba:15:4d:52:
         68:10:18:34:c4:42:5b:06:cd:28:cd:90:25:1e:ec:a8:40:bd:
         97:dc:7e:67:b8:92:5e:da:93:04:cc:ab:62:66:fe:80:52:a3:
         1d:63:ba:1d:4c:3a:6c:99:da:5e:3e:23:46:a7:1f:39:31:18:
         f4:5d:a4:12:77:3a:87:29:ed:b4:95:aa:41:21:fc:84:62:85:
         d2:39:00:0e:b7:bc:3b:25:12:f9:d1:17:3c:43:a7:58:c4:d2:
         6d:b6:c9:3c:2b:a8:35:fe:be:c2:8e:40:7b:a2:b4:28:26:6e:
         96:02:5c:fe:e4:11:8f:dd:20:a1:ff:8c:22:fa:ff:f6:e0:0c:
         97:a2:94:ed:cb:dc:28:f3:62:49:da:ca:11:e6:25:29:80:86:
         ff:e6:aa:10:a9:86:e4:6e:8c:37:24:1c:3d:e7:84:f2:dd:bd:
         05:1a:ea:35:98:e7:f6:c5:e0:6c:0a:d3:cc:f8:e4:56:72:7a:
         c9:45:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:08 2026 by rpki-client