Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa
File:                     0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa (raw, json)
Hash identifier:          5xFAIsvORmVBnI+DrHe7U+TNDM58uuAvzLJLVi6b/nk=
Subject key identifier:   59:24:2D:DD:E3:44:18:80:2D:4A:71:C3:F8:BC:DC:9C:43:E7:F7:D0
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584CB551D280C0E751F3FC67FA00
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     8987
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d2:80:c0:e7:51:f3:fc:67:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=21562ffe-4514-4ba8-be4f-90dc64b960be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:e5:d5:01:19:60:96:3b:65:a2:ee:58:ef:
                    42:4f:fa:30:72:2e:a7:c2:b4:cd:84:1d:2b:58:70:
                    16:8a:9f:7d:ab:6f:15:f4:10:ee:76:09:b4:2d:4d:
                    f5:36:c7:ce:e1:f0:fa:b5:c6:ca:e0:82:79:41:47:
                    b9:8f:01:35:7d:e6:b7:32:de:d7:58:9b:d7:9f:e9:
                    a9:57:f8:16:ca:97:68:dc:88:79:95:3d:f6:a2:80:
                    04:ce:ea:2c:c9:97:43:8d:15:17:a7:15:f2:43:8b:
                    44:8c:c1:ab:d9:fa:ed:2b:d6:4d:b0:2e:66:71:6f:
                    d7:84:65:d0:96:37:fa:17:e4:ae:aa:15:16:3c:f7:
                    4a:34:ae:fd:63:89:55:37:35:14:9f:ca:16:e2:76:
                    93:26:68:a7:df:da:a3:11:47:54:03:cb:41:24:56:
                    28:39:72:cc:d6:be:7d:1d:85:d8:05:25:4d:db:2d:
                    8d:58:1b:d5:30:03:17:74:cc:8e:1b:cb:8f:56:7d:
                    65:c9:ff:e3:e7:26:5e:32:6e:85:cf:5b:0d:fc:5e:
                    34:38:a3:7b:e6:68:6e:d3:23:51:f7:3b:3d:b3:1d:
                    4c:37:1a:23:52:94:9c:81:bb:2d:4c:13:77:b2:20:
                    12:46:ac:98:e8:43:a4:31:10:65:66:2f:5e:ef:6e:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:2D:DD:E3:44:18:80:2D:4A:71:C3:F8:BC:DC:9C:43:E7:F7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/0cd8749f-e83b-34d8-a2ed-21a383cfe9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:69:ef:d7:51:3b:6e:0f:c5:93:6e:f3:27:05:c4:94:59:
         64:9e:2a:dd:f2:bb:dd:1d:d6:de:ae:db:ed:af:fb:2d:32:e5:
         81:dd:02:5d:34:30:3b:e1:88:fc:e1:a4:37:9a:4c:e0:f6:9f:
         e7:03:86:97:a8:26:bd:f3:d8:11:36:6b:85:f1:60:8d:ed:4f:
         d1:de:f6:1a:83:8d:42:3c:c4:5b:20:80:5a:18:db:23:fa:41:
         d1:e7:d6:74:f9:7b:46:a3:25:0c:5f:fc:35:db:62:34:4f:b3:
         2c:e2:e0:fd:fa:b1:96:17:a7:41:73:6b:b5:25:a7:03:3e:c1:
         6a:a6:c9:1d:03:5d:d1:dd:aa:9a:36:ab:24:c4:74:e7:fd:e8:
         da:39:99:c6:38:56:5b:5e:33:bd:7f:10:86:35:ea:1e:45:ab:
         57:79:ae:5f:e8:76:39:29:ca:ce:0b:34:69:9e:9e:69:25:e6:
         46:65:f1:b5:4b:39:5f:6d:0f:84:f8:33:19:09:a6:86:dd:ba:
         9b:3c:b7:ce:7b:d3:2b:bd:16:97:63:fb:44:0a:7e:09:5b:4c:
         d9:68:02:7c:ea:8c:2a:f8:4b:5c:d1:da:c6:55:9b:2b:a4:34:
         56:7a:88:89:ce:f4:02:f1:5b:bc:55:6c:d6:b2:d4:0c:ff:f3:
         aa:13:dc:d0
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEy1UdKAwOdR8/xn+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTljOWY0NmItNzQyZi00YjJkLTkyOWItMjY3ZmVmY2Nj
NTBhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
MjE1NjJmZmUtNDUxNC00YmE4LWJlNGYtOTBkYzY0Yjk2MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNbl1QEZYJY7ZaLuWO9CT/owci6nwrTNhB0r
WHAWip99q28V9BDudgm0LU31NsfO4fD6tcbK4IJ5QUe5jwE1fea3Mt7XWJvXn+mp
V/gWypdo3Ih5lT32ooAEzuosyZdDjRUXpxXyQ4tEjMGr2frtK9ZNsC5mcW/XhGXQ
ljf6F+SuqhUWPPdKNK79Y4lVNzUUn8oW4naTJmin39qjEUdUA8tBJFYoOXLM1r59
HYXYBSVN2y2NWBvVMAMXdMyOG8uPVn1lyf/j5yZeMm6Fz1sN/F40OKN75mhu0yNR
9zs9sx1MNxojUpScgbstTBN3siASRqyY6EOkMRBlZi9e725lCQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFFkkLd3jRBiALUpxw/i83JxD5/fQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5
ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdmZWZjY2M1MGEvMGNkODc0OWYtZTgzYi0z
NGQ4LWEyZWQtMjFhMzgzY2ZlOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTljOWY0NmItNzQyZi00YjJkLTky
OWItMjY3ZmVmY2NjNTBhLzU5YzlmNDZiLTc0MmYtNGIyZC05MjliLTI2N2ZlZmNj
YzUwYS5jcmwwHwYDVR0jBBgwFoAUMZTLBk+ktjymSkjMqIYBkqcOoE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81OWM5ZjQ2Yi03NDJmLTRiMmQtOTI5Yi0yNjdm
ZWZjY2M1MGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLS3EAwQD
0EqoMA0EAgACMAcDBQAmBwiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHd/ae/XUTtuD8WTbvMnBcSUWWSe
Kt3yu90d1t6u2+2v+y0y5YHdAl00MDvhiPzhpDeaTOD2n+cDhpeoJr3z2BE2a4Xx
YI3tT9He9hqDjUI8xFsggFoY2yP6QdHn1nT5e0ajJQxf/DXbYjRPsyzi4P36sZYX
p0Fza7UlpwM+wWqmyR0DXdHdqpo2qyTEdOf96No5mcY4VlteM71/EIY16h5Fq1d5
rl/odjkpys4LNGmenmkl5kZl8bVLOV9tD4T4MxkJpobdups8t8570yu9Fpdj+0QK
fglbTNloAnzqjCr4S1zR2sZVmyukNFZ6iInO9ALxW7xVbNay1Az/86oT3NA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:54 2026 by rpki-client