Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/6065f591-861f-37f7-b6c7-0acdc9db1c3c.roa
File:                     6065f591-861f-37f7-b6c7-0acdc9db1c3c.roa (raw, json)
Hash identifier:          Nr0SmYkOJYt5fZeZ+ugbTv2ctYM7/zVDLKNdY59qeDk=
Subject key identifier:   A6:62:04:D4:85:2F:FE:A0:73:4B:22:77:AD:23:91:84:88:C0:34:E0
Certificate issuer:       /CN=8d6ffccc-661c-4332-9017-cddf03d9fc70
Certificate serial:       010D0C9F4328584F13024C61906FB675F9B3FA20
Authority key identifier: 94:D5:30:D0:B9:3D:4D:3B:84:48:92:B9:D6:55:EF:8D:9D:FD:3B:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/6065f591-861f-37f7-b6c7-0acdc9db1c3c.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     59253
IP address blocks:        162.249.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/8d6ffccc-661c-4332-9017-cddf03d9fc70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/8d6ffccc-661c-4332-9017-cddf03d9fc70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:4c:61:90:6f:b6:75:f9:b3:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6ffccc-661c-4332-9017-cddf03d9fc70
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=3808bab3-e825-4308-93ee-f724d3d714f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:8a:de:53:07:e4:a4:ff:8f:68:de:f5:5d:
                    22:dd:00:de:fe:b8:93:2c:60:12:28:29:7f:5a:4b:
                    4d:7d:f4:55:b4:58:32:73:b8:f2:df:c8:f0:04:4a:
                    1d:9e:9a:83:6b:01:c7:ad:85:31:7f:18:d0:9d:bd:
                    f6:4a:97:c4:b9:46:2d:f6:d4:b0:fa:97:7e:36:a3:
                    1f:b2:8e:31:e3:a8:0f:6a:ca:1e:88:47:be:7d:78:
                    ff:f3:35:ed:22:d2:9c:24:6d:29:aa:a6:19:06:37:
                    95:a5:79:1b:98:33:ba:e6:d7:b0:6b:72:79:8a:00:
                    9d:97:7c:dd:d4:7b:ac:7b:24:3a:c0:60:77:04:d7:
                    b6:88:f4:bf:4e:b2:3a:b0:97:d2:69:ef:3c:94:50:
                    3c:3f:d3:9d:5f:da:fc:31:2e:31:7c:c9:a4:3c:2e:
                    c3:34:42:9b:3f:83:4b:09:ff:cc:85:97:fc:7a:6d:
                    54:f0:3e:49:8c:42:42:e9:6a:e2:7b:51:a2:45:74:
                    28:61:d8:8e:7d:4a:32:5c:3c:39:19:bd:c1:3a:d0:
                    44:c8:b0:39:c3:ac:fe:3e:cc:35:64:91:61:66:a1:
                    2e:66:14:50:cf:5e:0a:4a:14:21:6e:04:c3:4d:ee:
                    e9:49:9d:61:aa:dc:f7:ad:85:9d:d4:08:de:6b:a4:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:62:04:D4:85:2F:FE:A0:73:4B:22:77:AD:23:91:84:88:C0:34:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/6065f591-861f-37f7-b6c7-0acdc9db1c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/8d6ffccc-661c-4332-9017-cddf03d9fc70.crl

            X509v3 Authority Key Identifier:
                keyid:94:D5:30:D0:B9:3D:4D:3B:84:48:92:B9:D6:55:EF:8D:9D:FD:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:b8:e3:9a:6d:d7:49:8c:7c:11:b4:23:7d:ff:a9:66:cb:
         a4:b3:b9:ae:5a:ee:5b:6a:2e:72:d6:2a:85:9a:20:42:2c:40:
         c1:77:d5:b6:b8:29:01:72:69:dd:c9:6f:13:5f:85:f0:f3:d4:
         62:3e:88:bf:a8:db:a2:77:66:42:c7:7a:b7:6d:c0:52:a3:fc:
         26:d5:90:d2:68:14:d0:3a:67:ec:b9:13:3e:b0:64:ac:cb:8b:
         f3:b8:8c:00:96:23:df:04:15:7c:d1:26:ec:4e:28:e2:02:fd:
         93:cf:0c:bb:b4:2c:71:ac:4d:a8:1e:c3:bf:96:47:3e:8c:56:
         66:17:be:ae:2d:cd:83:3f:dd:ef:36:2a:94:c9:0a:84:21:69:
         54:60:cf:c1:ef:0c:cc:25:dc:e2:77:6f:eb:7c:b6:e3:e6:a3:
         88:2c:5c:7c:72:f1:6c:1b:a5:a5:59:a8:b0:c0:7d:16:ef:ab:
         ce:68:14:dc:39:00:3c:d1:ea:98:d5:2d:8f:e7:3c:b1:e4:17:
         3f:1d:a2:d7:d2:33:cc:6a:be:5f:dd:b6:e0:72:26:52:fd:24:
         de:2e:3b:cb:d2:2b:7c:eb:ad:05:30:ce:b8:a0:c0:b8:80:ec:
         52:68:8c:11:41:c6:73:18:4a:55:10:e6:a4:39:8f:70:c4:22:
         23:f8:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:27:07 2026 by rpki-client