Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
File:                     37f97f97-7938-33a2-94e9-584d409d7825.roa (raw, json)
Hash identifier:          NQdvfXDqMBST8qmSMu2fyjsmywgQwfm/pGPLdVNMBMY=
Subject key identifier:   C1:3B:4F:8E:27:DB:A7:F1:08:2E:C5:EA:DA:F3:B0:F5:56:DA:D5:71
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584F18979932825AC188022FD440
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:99:32:82:5a:c1:88:02:2f:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=bbe07854-a1f0-43df-be3f-d46ced03bb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:b6:28:04:1d:4d:a2:c7:0b:33:56:e2:c9:
                    01:bf:1c:f5:9b:a8:c2:12:04:ad:70:6d:e1:00:d3:
                    f5:d1:77:a9:99:2a:8a:af:dd:e0:bf:f2:bc:aa:dd:
                    da:49:bd:05:b4:1a:f6:4f:74:12:36:59:1a:1a:36:
                    05:9e:12:cd:8a:02:81:4c:1d:f5:67:de:e7:28:01:
                    bc:aa:cf:80:75:c3:b9:71:bb:19:be:5a:cf:55:9a:
                    00:e8:4d:6c:51:62:5c:2e:86:2b:03:45:6b:bc:79:
                    ed:77:2c:40:6b:e4:7e:90:aa:d0:d7:41:bc:16:89:
                    c8:1a:6a:90:52:f8:21:fe:28:e3:cc:a1:79:1b:25:
                    00:bc:aa:75:c7:13:a0:96:b2:4e:f6:59:bf:4e:0c:
                    88:ae:c5:fd:2c:f7:3a:6b:86:dd:5e:f4:96:70:85:
                    f6:e2:de:ab:a8:c3:36:4e:c4:13:a5:32:6f:a1:9b:
                    18:53:c5:7b:29:ca:c7:de:66:89:71:91:b8:4d:f6:
                    91:6b:4e:c2:91:4c:d3:da:fc:b8:84:a5:07:a3:e3:
                    1b:0b:df:41:b3:b4:fc:d5:6f:35:4f:b0:4d:3f:e9:
                    3a:3f:20:7e:00:7f:ac:29:6c:4e:27:e5:7a:77:4d:
                    f9:57:ef:e2:94:d7:14:06:e6:ca:9b:e1:42:50:d3:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:4F:8E:27:DB:A7:F1:08:2E:C5:EA:DA:F3:B0:F5:56:DA:D5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/37f97f97-7938-33a2-94e9-584d409d7825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:95:c3:b2:f0:bc:3f:2e:c0:ae:e1:e7:01:11:21:07:c9:
         70:41:d5:52:31:18:b8:49:8d:d4:45:9f:f2:d6:a4:46:fa:a3:
         6f:f9:81:3f:75:99:d0:b3:56:ab:d1:c3:92:cb:e3:1d:3d:80:
         be:8f:49:68:62:f0:c5:e0:16:e7:5a:39:8c:fc:c4:d4:b1:aa:
         ba:52:77:3c:89:13:1e:44:1d:1f:a1:cd:35:f7:26:62:dc:30:
         d0:24:a0:09:14:b0:e6:5d:4a:90:1f:0f:76:90:78:bc:c5:7b:
         00:c9:6d:77:d8:8c:de:9a:a1:f1:ee:75:36:05:43:13:ac:02:
         db:c5:95:6a:92:1e:4b:57:9a:62:79:20:a3:1d:90:f5:7b:cf:
         2e:18:42:1e:4e:a6:9e:6d:bd:e5:10:f2:d0:88:86:56:e2:80:
         6c:05:91:23:40:fd:46:76:87:b5:c2:0f:04:3b:ca:e9:95:b2:
         9e:98:36:6e:1d:8b:b6:c5:bc:84:29:0d:b1:97:49:d0:4f:b2:
         a0:7a:cd:cb:c9:f8:65:13:ea:f5:b0:f9:78:52:b5:02:61:74:
         30:ea:bf:6f:0f:c0:5c:b4:00:1d:20:5e:c4:f8:60:48:f4:3f:
         e1:c9:bc:2c:f6:0f:1d:e5:e3:59:e6:20:ec:c5:9b:97:11:d8:
         41:8e:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:25:40 2026 by rpki-client