Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa
File:                     59b2e926-b9f1-3016-bc49-ae2d229b646d.roa (raw, json)
Hash identifier:          yWCjN+lm6NrAeV/GCdo+/zFfw1Nm96Re44HcC/jRaEA=
Subject key identifier:   A5:4D:A0:A5:8A:DF:8F:36:8B:3F:42:92:FD:AC:3D:34:D3:E1:4F:06
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D651514EDBC185E9D9738CD80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     27281
IP address blocks:        192.184.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:14:ed:bc:18:5e:9d:97:38:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=bf8f775b-eba8-452f-bb31-e1f639493469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:29:e9:df:4e:6b:99:e7:71:88:8c:19:59:
                    37:5c:8f:6b:55:ce:85:fb:92:1b:0c:fd:f4:41:70:
                    43:10:ef:dc:9b:fd:12:5e:1c:4b:ab:93:90:5c:7e:
                    75:77:92:3f:e2:f9:2e:5d:37:55:dd:db:c6:f1:7d:
                    ab:89:94:b4:1c:8d:82:a7:e7:d2:ed:d6:4b:50:c5:
                    30:4f:dd:99:f1:6a:dd:c6:78:b0:1c:84:17:37:a6:
                    f1:3f:5f:11:b8:0c:99:e8:b8:35:1d:19:95:09:b2:
                    1b:1b:39:3b:77:03:69:03:26:37:7f:a7:a3:90:6f:
                    fb:a7:bf:b4:a9:3e:11:53:79:c0:11:e3:c6:b4:79:
                    b2:69:2a:08:8b:84:2d:f1:6b:b5:51:73:f3:b5:be:
                    09:bc:c1:e6:c8:a1:3a:3e:58:fb:3b:c8:c0:8c:ad:
                    59:da:af:51:f5:4a:98:90:3a:ac:b0:0a:0b:80:07:
                    d0:40:d1:70:62:3f:7e:af:fe:85:45:68:e6:dd:4d:
                    86:6e:f9:e2:e2:70:07:2b:8c:f8:f5:43:5c:5e:3e:
                    b1:06:a1:48:7a:a0:25:58:83:a5:57:b7:fc:b6:93:
                    43:cb:71:4a:3f:fd:35:57:7e:1e:8d:48:4b:cb:6f:
                    56:2d:f9:7f:ed:98:b9:64:8a:d5:49:d8:9c:f1:83:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:A0:A5:8A:DF:8F:36:8B:3F:42:92:FD:AC:3D:34:D3:E1:4F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/59b2e926-b9f1-3016-bc49-ae2d229b646d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:56:95:4a:ef:18:9f:0b:f5:27:7f:a2:35:76:39:da:ef:
         33:5b:78:aa:27:58:63:fc:67:df:09:49:6a:9b:05:1b:50:d7:
         37:f0:1b:8c:98:3b:99:3e:a8:72:27:d5:80:02:f5:2a:32:b7:
         3e:99:c7:61:f8:26:c1:62:e2:6c:cd:58:82:2b:d3:a3:bd:22:
         a4:9b:bd:e6:71:66:20:d2:66:ed:c5:36:82:fa:30:c0:8e:f7:
         2c:3d:ab:87:af:f6:57:ef:0e:0c:4f:d9:e3:4b:c3:11:05:e3:
         61:3d:83:15:7f:19:e1:f1:ed:4f:65:b7:b8:13:89:28:cf:dd:
         90:37:60:39:26:92:f1:12:44:e8:ac:83:b9:b0:7a:8b:f9:f7:
         67:a2:bf:a9:70:0f:8c:9b:21:b0:d8:bf:4c:5c:05:ee:7c:c6:
         2a:1b:f4:76:fb:b1:71:1f:0c:49:6b:ec:28:21:f3:76:e2:32:
         c7:da:fb:2d:1d:df:6b:d4:c8:89:bc:f1:92:82:f2:3d:01:89:
         6e:e9:43:36:9f:e4:93:d7:04:cb:bb:4e:07:ad:24:bc:1c:b6:
         2c:80:38:fe:44:35:7d:72:07:f1:e4:c0:b0:26:24:86:f8:90:
         49:2a:6f:a6:87:41:47:bc:c9:1d:68:8a:ed:ec:9d:4e:32:df:
         fc:bf:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:48 2026 by rpki-client