Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa
File:                     0159b89a-a656-3a48-9238-a00b41851590.roa (raw, json)
Hash identifier:          yMdQKjo2Xewm109OjpA4gAxhIWNocKeAkCMJP83XzlI=
Subject key identifier:   8D:05:F4:DD:22:0A:7B:8E:E8:E8:5A:A8:66:D0:A8:2A:51:A9:04:C5
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4E295C26B9368196CE335A80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa
Signing time:             Fri 27 Mar 2026 07:57:58 +0000
ROA not before:           Fri 27 Mar 2026 07:57:58 +0000
ROA not after:            Thu 25 Jun 2026 07:57:58 +0000
asID:                     12025
IP address blocks:        72.44.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:29:5c:26:b9:36:81:96:ce:33:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 27 07:57:58 2026 GMT
            Not After : Jun 25 07:57:58 2026 GMT
        Subject: CN=782ede31-f5c4-45ff-a242-0892231880b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:2a:09:dd:fe:b7:a8:94:bf:6c:88:a8:21:
                    1d:fc:93:d1:4c:e3:4d:fd:dc:6c:4e:d5:3f:35:ed:
                    99:97:70:8a:fd:9c:8c:fc:ad:8d:1e:62:71:7b:95:
                    de:14:2d:61:bf:30:f7:97:55:9c:d8:9b:53:64:ee:
                    c5:1e:3c:4f:04:e7:91:93:c0:a2:8f:82:6d:fe:97:
                    80:85:2d:96:5e:11:d2:20:0a:d0:f7:35:e2:4c:6e:
                    f8:21:bc:cc:ab:64:1f:83:cf:69:0f:df:5a:85:a8:
                    2a:7f:3b:f0:0b:c8:a9:d4:71:d1:f5:09:9c:c0:78:
                    ad:1a:72:16:97:90:1a:e3:a3:9f:b0:ca:81:70:ca:
                    71:4a:e3:ab:0d:c2:8a:c9:22:b2:65:f3:4d:78:52:
                    6b:83:57:2d:6b:5f:b6:44:c4:55:50:48:80:44:b6:
                    bc:47:0c:49:04:96:10:47:a4:31:c3:60:10:bc:b9:
                    27:9f:87:f6:9c:d9:9f:32:1f:ef:a9:95:aa:5a:be:
                    de:fd:13:92:99:6e:13:8a:13:2d:13:85:19:0f:2e:
                    c6:ea:f5:a1:48:be:7f:af:c1:65:81:75:a4:8a:4a:
                    8c:ad:58:5f:9c:dc:d5:f8:38:24:03:14:08:58:58:
                    81:b3:94:28:43:1a:3a:d4:1f:8f:9d:45:e4:b4:ec:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:F4:DD:22:0A:7B:8E:E8:E8:5A:A8:66:D0:A8:2A:51:A9:04:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0159b89a-a656-3a48-9238-a00b41851590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:f7:6b:55:fc:54:c6:2a:ce:a9:98:2e:06:a6:32:eb:b4:
         5c:a3:6e:c5:7f:11:3e:d4:c5:81:94:1c:b5:23:13:eb:2c:bf:
         06:ae:41:0c:8f:03:1b:54:8e:52:be:55:7f:73:a1:64:5e:f4:
         b8:93:a4:cb:bc:0e:f7:9e:e7:f8:51:d1:66:a5:07:76:ca:1f:
         a9:dd:45:5d:ae:6d:86:df:32:41:02:91:75:b0:7c:1a:3b:a9:
         7b:1c:4a:fa:95:5e:26:6a:a3:a0:48:15:a7:61:8c:db:bb:2e:
         c4:b6:cb:e1:e6:38:e5:54:4b:ad:aa:79:32:08:74:84:8b:11:
         4e:48:cb:b1:c4:5f:5b:e5:67:34:c5:22:e7:66:59:38:8d:95:
         ed:e8:8e:d1:7f:bd:3f:ee:31:64:cb:ab:f3:19:34:9f:e9:66:
         7c:e0:27:1a:33:05:5c:be:1e:9d:55:3b:60:44:de:1a:b3:c5:
         fc:b1:1e:8d:39:53:7f:42:64:27:59:80:5b:a4:7a:36:0a:e7:
         14:72:2d:c9:d3:88:72:7e:0a:63:06:db:9d:ec:a8:9a:08:22:
         bb:9e:ae:98:82:a6:04:a8:87:a9:23:a3:49:81:d0:3e:79:bd:
         ff:4b:83:1c:4d:ea:90:da:d4:63:99:98:7d:65:02:24:cb:9f:
         6e:a7:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:01 2026 by rpki-client