Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa
File:                     59fc405d-4035-30c0-b187-caacc2bd4a19.roa (raw, json)
Hash identifier:          pR7rqJHlLvY+kC5cgfvxiFSuiFX6ctrk45Mnn6NSVno=
Subject key identifier:   6A:D1:03:D2:AC:D8:AF:5C:7E:3C:80:5D:DF:8B:DA:8D:5F:44:D8:E6
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F4328584EA5AA77AD8969BF664D896700
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     12022
IP address blocks:        208.83.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:77:ad:89:69:bf:66:4d:89:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=4101f99c-f91b-4050-ab21-71efa46a6598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:72:43:20:c8:55:54:bc:fc:e7:4b:44:8d:
                    76:30:56:8e:18:90:d0:32:74:72:59:d4:b3:1d:ec:
                    6c:a9:c6:ab:45:39:44:ad:82:17:df:44:24:e4:0f:
                    3f:2f:72:de:62:52:0f:10:21:89:f6:75:22:37:fa:
                    19:22:7a:e5:1e:7a:e4:91:49:09:a9:a8:11:8a:63:
                    44:3b:1e:81:b3:eb:00:bd:2a:25:34:8b:58:57:51:
                    e8:e3:11:d4:b6:b9:f2:68:60:f1:e6:f7:26:36:9a:
                    c9:bb:96:7f:58:a8:0b:0e:b1:48:14:bf:46:68:02:
                    e9:99:78:88:bb:86:1c:78:71:11:76:46:7e:15:45:
                    94:16:64:6a:5b:e1:88:a6:ef:74:c2:fb:2a:49:d7:
                    97:77:b0:ad:4d:12:47:27:17:3b:a7:2a:02:f2:4a:
                    d2:cf:5b:21:26:81:d6:c4:a0:7c:1c:71:9d:5f:53:
                    73:62:9c:50:30:05:a7:7f:7a:7b:d7:ff:58:fb:6e:
                    e5:8a:a6:f1:a1:42:90:b4:aa:b6:7b:1f:c0:e7:d2:
                    1f:93:57:12:cb:fb:81:7a:fd:53:8e:5d:0e:56:15:
                    15:64:02:08:01:6d:84:56:de:7d:59:3b:1d:70:f1:
                    9b:c7:d2:b1:20:36:d8:5c:23:19:1d:c1:df:80:9d:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D1:03:D2:AC:D8:AF:5C:7E:3C:80:5D:DF:8B:DA:8D:5F:44:D8:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/59fc405d-4035-30c0-b187-caacc2bd4a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2a:34:1a:4f:f9:93:3b:66:01:fc:17:26:f9:59:1c:9e:81:
         2b:94:46:d4:ca:bc:d9:db:f3:82:7d:76:34:14:63:6a:d1:0d:
         54:09:58:93:e5:d4:a5:1f:6f:13:e4:04:45:72:2e:a8:e1:9e:
         c2:a8:16:f7:ef:e1:dd:25:c5:52:63:22:98:e7:6f:a2:90:42:
         60:47:a7:10:b5:5a:e5:7b:4d:b1:23:32:04:b4:58:9e:db:86:
         0c:a5:5a:4a:4b:aa:b9:8b:2f:17:93:a1:0d:d8:83:75:c5:3d:
         d6:e9:e0:58:21:83:3a:82:53:15:0a:1e:40:6e:22:01:fd:fd:
         8a:bf:ee:77:1b:cf:10:e8:21:9f:26:49:10:3f:17:70:12:33:
         fb:78:a7:20:05:fa:af:ec:d3:82:05:a1:c8:e7:95:d3:74:84:
         41:ea:18:04:b9:f0:f1:25:2b:a2:7b:5c:f3:01:3d:9e:29:06:
         ba:d8:d0:ff:40:67:9f:3f:ac:85:46:86:f3:3a:53:6c:de:64:
         9f:cf:88:25:36:24:1c:88:af:4c:de:71:e3:61:a1:db:54:88:
         22:07:f6:28:e7:56:6b:b3:89:33:01:f6:1d:3f:67:79:94:9d:
         df:cb:09:fc:b3:72:be:b4:08:a3:13:2b:97:ae:a9:d0:ec:7d:
         69:df:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:07 2026 by rpki-client