Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa
File:                     4f237dd8-f898-37e0-8290-0c7181165279.roa (raw, json)
Hash identifier:          fLwaVxt/EuK6ir6lGHNmuxsDcXIDPnM8Ak4k1JhWH8w=
Subject key identifier:   26:65:7F:A0:11:E5:67:5F:58:3E:52:C4:7E:25:A1:47:AB:5B:8F:26
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584EA79475F5C794370B878B91A0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13492
IP address blocks:        216.37.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:75:f5:c7:94:37:0b:87:8b:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=80bad199-ad10-43cd-b83f-30f157b90a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:5c:44:80:e9:b3:72:27:69:4b:0a:ad:56:
                    06:70:4b:60:54:97:ea:eb:1c:51:4e:ef:62:5a:70:
                    12:1c:a9:42:c9:dd:1d:2b:6a:6c:2a:8f:65:8f:1b:
                    59:79:97:1b:0a:a2:cb:ea:b5:77:42:5a:6d:cc:b7:
                    db:c8:0a:be:0f:62:59:15:f0:e3:de:af:89:a6:54:
                    ca:ca:62:11:7c:c7:ed:b0:57:57:f2:83:eb:17:cc:
                    75:8c:ce:9b:11:64:b1:e6:b2:c2:bf:a2:70:2e:a7:
                    87:64:02:c3:4a:cb:58:28:f2:a1:ed:ed:0b:1e:b0:
                    2a:63:21:1c:cd:8c:88:c5:2a:3c:7d:e7:12:a4:af:
                    e1:7f:f6:9e:4f:8f:ed:f1:f1:17:03:c0:29:b4:75:
                    18:09:ef:26:7d:6d:04:0c:24:79:bd:99:81:49:fb:
                    46:2f:72:17:d4:fa:3a:5a:83:87:63:f7:ad:e1:b5:
                    74:80:38:65:b2:e5:6b:3c:cd:da:f0:91:a3:4b:ef:
                    83:3b:cf:49:a3:0c:98:48:d6:fe:a1:7d:7a:c4:2c:
                    ef:25:be:3b:16:3c:3b:e6:9e:33:54:75:7b:1f:b7:
                    bd:77:aa:ef:12:5f:d8:30:ad:12:83:2d:20:88:46:
                    06:7f:5e:00:a7:e3:82:15:72:ec:22:7c:35:7b:79:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:7F:A0:11:E5:67:5F:58:3E:52:C4:7E:25:A1:47:AB:5B:8F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/4f237dd8-f898-37e0-8290-0c7181165279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:45:26:ab:48:c6:65:56:64:a7:ee:77:14:10:2c:3c:06:
         30:b6:63:e4:5c:6b:44:7c:5d:a1:58:e9:01:08:f8:d0:59:35:
         1c:b3:e4:3f:84:59:3f:0a:6c:6b:ab:c8:76:ef:2f:57:a9:76:
         c4:4e:a9:fc:1f:02:89:ca:e1:6f:a1:08:8e:3b:2d:f4:7e:1e:
         2b:83:46:26:b5:bd:15:2a:c3:cb:c3:30:13:57:17:10:a5:a1:
         c2:67:ae:23:cf:ef:39:2e:6b:42:f4:1d:81:55:0c:fd:3c:5a:
         85:93:a9:cd:ce:bf:60:68:f8:e2:9c:49:96:7d:9f:31:5c:ea:
         03:bc:2a:e2:0a:9e:7a:5a:dd:4d:2f:9e:9e:70:96:d0:66:4e:
         ba:a0:d2:ac:e6:9a:4f:54:81:8d:23:5d:d7:de:3e:36:51:78:
         7e:b2:bb:58:1b:4e:e2:77:03:e2:fc:47:23:0c:de:a5:29:b4:
         17:68:1d:e1:76:6c:34:31:04:e1:1f:bf:79:99:06:a9:75:70:
         01:cc:3d:22:6f:70:59:e9:6a:3b:ef:73:e2:86:df:95:3f:a5:
         87:94:2b:65:7e:0e:73:5c:4e:cd:d8:9d:97:fb:58:c4:53:4e:
         54:a6:e0:7a:0a:d4:17:9f:57:d9:94:19:c5:06:6d:18:d2:e6:
         64:ad:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:04:26 2026 by rpki-client