Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/2e8c5553-6df8-3abc-9ef3-cff8031b8df2.roa
File:                     2e8c5553-6df8-3abc-9ef3-cff8031b8df2.roa (raw, json)
Hash identifier:          ae6l4JK06N1CKflKpjKDB3M/VQlRmyTDeoAn+AP6vO0=
Subject key identifier:   B6:2A:03:56:98:38:0A:A3:3D:AC:41:13:09:4F:6D:30:B4:DB:DB:6E
Certificate issuer:       /CN=d2bffcbb-8f35-4dc3-8559-2ac426005118
Certificate serial:       010D0C9F4328584D8100A71BDF25D5AADB1A1EE8
Authority key identifier: A0:F7:9B:4F:E8:A6:41:5D:EF:10:9B:46:B3:48:73:6F:77:34:78:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/2e8c5553-6df8-3abc-9ef3-cff8031b8df2.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     46859
IP address blocks:        45.59.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/d2bffcbb-8f35-4dc3-8559-2ac426005118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/d2bffcbb-8f35-4dc3-8559-2ac426005118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a7:1b:df:25:d5:aa:db:1a:1e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bffcbb-8f35-4dc3-8559-2ac426005118
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=4b026c43-8d3c-440e-ad42-808559aa1b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:19:43:2f:ed:10:ab:25:62:7e:b2:ba:5f:
                    2c:bd:3e:f4:33:f4:a6:57:b2:e0:4c:ef:af:fd:3a:
                    dc:ba:24:f8:7a:e7:a0:9b:52:8a:ee:fc:bb:74:3c:
                    b6:fc:f7:f8:cb:57:f6:3e:32:d4:bd:ec:e7:17:19:
                    82:05:7e:5a:b3:c3:f4:30:e0:4e:4d:7d:3a:5d:9b:
                    54:63:73:b1:6d:62:d5:71:96:9d:f7:5e:0c:57:8a:
                    34:64:56:af:ee:e8:54:f1:96:4d:96:a7:89:7e:bb:
                    96:3b:83:65:14:c7:5e:47:98:3c:ef:04:97:e9:e5:
                    01:e3:37:d1:44:2b:1c:a2:74:9b:e6:91:24:b1:31:
                    f8:ce:b1:3f:02:b9:90:0b:ea:72:5c:0b:17:ce:39:
                    74:2d:18:fb:42:9a:7f:d1:73:a7:b2:43:2f:00:ea:
                    8a:5a:db:82:49:da:95:a4:6d:e3:36:57:6c:41:9a:
                    24:70:78:60:c3:09:a8:57:e4:8b:8a:cf:76:fa:97:
                    6e:54:51:67:3f:f0:d5:1c:a7:8d:01:bd:1d:ec:dc:
                    f9:69:70:b1:99:67:26:63:c6:0c:3e:78:a9:97:66:
                    0d:10:9b:34:67:8b:9d:24:12:fb:5f:62:d8:f5:b5:
                    d9:fe:e6:f1:24:15:ab:e2:3d:14:57:ce:78:4f:db:
                    a5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2A:03:56:98:38:0A:A3:3D:AC:41:13:09:4F:6D:30:B4:DB:DB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/2e8c5553-6df8-3abc-9ef3-cff8031b8df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118/d2bffcbb-8f35-4dc3-8559-2ac426005118.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F7:9B:4F:E8:A6:41:5D:EF:10:9B:46:B3:48:73:6F:77:34:78:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d2bffcbb-8f35-4dc3-8559-2ac426005118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:05:49:3a:f5:26:a0:51:b7:61:f0:fd:f9:64:44:d1:e3:b6:
         a9:41:ea:8a:84:35:32:56:6a:a8:64:4e:3f:f2:5f:eb:ec:9a:
         7d:1a:91:5e:7c:72:1c:98:b6:96:2c:8f:08:bc:63:2b:c4:49:
         64:0f:5f:41:ae:ed:75:2b:35:b5:d3:d8:85:0f:7e:42:b9:10:
         62:a3:6e:f4:56:aa:64:51:4a:9f:d1:e6:60:44:9e:98:25:22:
         1c:9b:43:be:9a:6f:2e:02:a6:50:04:3a:71:2b:21:bf:ec:9e:
         66:e0:ca:bc:b1:43:3e:79:ec:a4:8b:69:69:25:c6:13:49:98:
         37:84:b4:8c:83:de:bb:4c:7d:70:a3:f5:1b:a8:1e:ac:09:77:
         3d:50:21:b0:c8:36:95:73:a7:b1:1a:62:48:e6:e8:98:8d:03:
         ea:af:aa:04:a2:37:cc:07:a7:0e:6e:da:95:5a:e8:d3:b8:b6:
         87:aa:ed:cb:52:c8:a5:72:bb:36:5c:6a:3c:66:62:84:de:cd:
         e8:71:f4:46:da:21:66:13:1f:2c:09:7b:7d:3d:35:56:15:70:
         81:fd:ff:11:be:82:bd:06:5c:ef:b7:d8:11:0e:af:6b:58:b3:
         7f:7a:13:73:f5:3b:51:5e:71:37:ac:82:c4:f8:8b:6f:65:88:
         a2:97:dd:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAKcb3yXVqtsaHugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiZmZjYmItOGYzNS00ZGMzLTg1NTktMmFjNDI2MDA1
MTE4MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
NGIwMjZjNDMtOGQzYy00NDBlLWFkNDItODA4NTU5YWExYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilgZQy/tEKslYn6yul8svT70M/SmV7LgTO+v
/TrcuiT4euegm1KK7vy7dDy2/Pf4y1f2PjLUveznFxmCBX5as8P0MOBOTX06XZtU
Y3OxbWLVcZad914MV4o0ZFav7uhU8ZZNlqeJfruWO4NlFMdeR5g87wSX6eUB4zfR
RCsconSb5pEksTH4zrE/ArmQC+pyXAsXzjl0LRj7Qpp/0XOnskMvAOqKWtuCSdqV
pG3jNldsQZokcHhgwwmoV+SLis92+pduVFFnP/DVHKeNAb0d7Nz5aXCxmWcmY8YM
Pnipl2YNEJs0Z4udJBL7X2LY9bXZ/ubxJBWr4j0UV854T9ulBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYqA1aYOAqjPaxBEwlPbTC029tuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMmJm
ZmNiYi04ZjM1LTRkYzMtODU1OS0yYWM0MjYwMDUxMTgvMmU4YzU1NTMtNmRmOC0z
YWJjLTllZjMtY2ZmODAzMWI4ZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDJiZmZjYmItOGYzNS00ZGMzLTg1
NTktMmFjNDI2MDA1MTE4L2QyYmZmY2JiLThmMzUtNGRjMy04NTU5LTJhYzQyNjAw
NTExOC5jcmwwHwYDVR0jBBgwFoAUoPebT+imQV3vEJtGs0hzb3c0ePwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kMmJmZmNiYi04ZjM1LTRkYzMtODU1OS0yYWM0
MjYwMDUxMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTukMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAFSTr1JqBRt2Hw/flkRNHjtqlB6oqENTJWaqhkTj/yX+vsmn0akV58
chyYtpYsjwi8YyvESWQPX0Gu7XUrNbXT2IUPfkK5EGKjbvRWqmRRSp/R5mBEnpgl
IhybQ76aby4CplAEOnErIb/snmbgyryxQz557KSLaWklxhNJmDeEtIyD3rtMfXCj
9RuoHqwJdz1QIbDINpVzp7EaYkjm6JiNA+qvqgSiN8wHpw5u2pVa6NO4toeq7ctS
yKVyuzZcajxmYoTezehx9EbaIWYTHywJe309NVYVcIH9/xG+gr0GXO+32BEOr2tY
s396E3P1O1FecTesgsT4i29liKKX3d0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:58 2026 by rpki-client