Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa
File:                     59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa (raw, json)
Hash identifier:          Sb3Gpv6so2NqlyaCMLD5kj3r0K2VMKf9g2EJH+trglQ=
Subject key identifier:   09:6F:F1:E5:A6:CF:0C:07:18:D8:C9:0E:9F:B3:FE:3C:87:2A:8A:B8
Certificate issuer:       /CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
Certificate serial:       010D0C9F4328584D6EDA65FE28CDB89A2A4A49E0
Authority key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     209242
IP address blocks:        199.33.230.0/24 maxlen: 24
                          199.33.231.0/24 maxlen: 24
                          199.33.232.0/24 maxlen: 24
                          199.33.233.0/24 maxlen: 24
                          2001:503:ff40::/48 maxlen: 48
                          2001:503:ff41::/48 maxlen: 48
                          2001:503:ff42::/48 maxlen: 48
                          2001:503:ff43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:65:fe:28:cd:b8:9a:2a:4a:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=45c4bc61-d1a1-45b6-a1b3-7fdb4eac6244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:42:5a:7b:79:ee:e9:05:45:97:58:8f:ed:
                    77:bb:85:23:b5:56:0d:f6:ab:0d:e3:2c:f9:91:fc:
                    46:02:e6:c0:31:5d:b5:f7:a7:5d:b8:db:97:0c:1b:
                    c2:ec:73:ce:eb:20:d7:5b:26:c8:96:cc:78:fe:2e:
                    f4:1a:aa:2c:e1:d8:3b:83:02:cd:fc:bc:b0:66:9c:
                    b2:e9:55:a4:45:8c:07:4a:a2:6b:f6:de:5a:82:1f:
                    69:04:2d:9a:11:25:06:28:0e:d2:e3:10:d1:1f:d7:
                    43:f7:3a:f9:c1:1c:de:ad:29:29:00:a3:c6:62:fa:
                    91:38:bb:ef:c4:5b:85:1f:3c:3f:13:8c:1d:8d:ba:
                    7c:f6:68:b5:29:2b:b3:e5:e2:67:dc:5d:01:b2:eb:
                    10:6e:82:44:77:ce:52:75:73:55:c1:61:ae:e2:db:
                    15:10:d9:bf:4b:c4:c1:08:f9:bb:74:9a:ce:bd:ef:
                    20:84:bc:d1:63:19:70:4e:b9:fe:c2:e3:68:68:f8:
                    f7:b4:81:54:d4:6e:d9:0d:c3:d0:04:4a:28:77:57:
                    f8:18:c3:b2:d9:db:80:dd:93:e4:e9:94:32:a6:cc:
                    8d:b4:22:af:cf:69:05:2a:85:98:ab:f7:71:5c:77:
                    14:aa:23:d3:73:ba:fe:af:3b:62:26:88:de:57:5f:
                    ed:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:F1:E5:A6:CF:0C:07:18:D8:C9:0E:9F:B3:FE:3C:87:2A:8A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/59c14deb-5794-3d55-a33a-dd50dc7e6a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.230.0-199.33.233.255
                IPv6:
                  2001:503:ff40::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:44:b4:c7:7b:2e:6e:c3:2e:b5:1c:0a:74:93:a1:51:6e:4a:
         51:b8:eb:15:cd:cb:ee:5a:87:45:eb:31:64:22:01:d9:75:91:
         44:91:0f:c3:2c:c0:dd:cd:bd:69:54:7b:93:9f:f0:fe:e2:f1:
         37:58:7a:b3:f0:9a:35:0b:0a:32:00:4c:84:25:7c:23:e4:88:
         69:cc:a8:84:d2:8d:05:97:c4:ef:bb:f1:4f:0c:67:36:0a:cb:
         44:c9:ee:d6:80:4b:26:e5:7b:e7:f4:35:ea:30:4d:bc:5a:bc:
         0b:1d:87:6b:bd:9d:a3:0e:b3:14:d5:af:f5:71:6a:77:28:ab:
         84:8d:22:d3:2d:95:de:a4:1f:f9:b6:0b:ab:6a:94:23:c5:49:
         e9:8a:84:bc:22:21:c2:be:aa:ec:40:c1:61:14:df:23:65:70:
         df:55:65:31:8e:0d:0f:50:80:00:76:5e:cc:ae:3a:c5:ec:a4:
         c8:87:4c:2b:41:67:35:08:61:e9:38:04:6a:8f:df:a6:05:7f:
         eb:aa:de:9f:65:3f:fb:35:fb:06:57:2d:0f:09:7c:c9:e3:5a:
         55:f0:3f:30:67:02:55:50:78:ff:85:9b:e5:a8:1e:25:89:dc:
         49:fa:08:89:8c:b5:1f:7a:15:28:37:5c:dd:d7:47:86:ae:47:
         71:90:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:58 2026 by rpki-client