Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/59ab3c15-c3dc-34f1-b57b-826d3e4ade10.roa
File:                     59ab3c15-c3dc-34f1-b57b-826d3e4ade10.roa (raw, json)
Hash identifier:          hhPnTUl4l9zR1wtLucJuIu2Bdv2HeO6yoEjsMQGWf4M=
Subject key identifier:   39:13:D7:AC:7F:3F:D1:36:E1:E8:25:57:92:51:59:C6:88:C4:C7:7E
Certificate issuer:       /CN=9f3a9b3e-7348-40a4-9468-47a3d1edd5ce
Certificate serial:       010D0C9F4328584CC1E1D2AF0AC6FDFC3648D300
Authority key identifier: 36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/59ab3c15-c3dc-34f1-b57b-826d3e4ade10.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     401822
IP address blocks:        192.104.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:d2:af:0a:c6:fd:fc:36:48:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3a9b3e-7348-40a4-9468-47a3d1edd5ce
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=a9c1372c-5faa-42eb-951f-0f4325856804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:6a:dc:5e:eb:59:0e:6a:da:2b:5e:c3:67:
                    5a:e5:82:e3:c3:df:80:d3:fa:0d:6d:7e:bd:63:ab:
                    4d:c5:69:a6:f7:fc:ae:86:17:5e:05:40:79:bb:dc:
                    a3:5b:6a:9e:b3:17:8a:3e:f2:c3:55:10:d4:17:a8:
                    4f:4d:41:5f:87:1c:78:e3:1f:da:52:ff:60:e1:87:
                    76:ec:ff:58:21:71:62:4d:f9:75:da:3b:5c:01:70:
                    f6:00:e3:9f:07:9c:84:ac:35:04:fd:d5:f6:24:be:
                    10:15:c6:59:f5:be:19:07:c6:22:86:84:aa:dd:9b:
                    73:b5:65:32:f2:97:4c:1e:b9:54:8e:22:0f:cc:45:
                    e8:a4:a3:71:e8:1d:f0:d3:31:cf:1d:17:6e:c8:f5:
                    31:a0:f1:c7:a3:d2:79:8e:e7:31:1e:2d:a4:25:10:
                    59:38:45:af:75:d8:ef:56:77:17:20:76:a0:9f:55:
                    f2:36:33:a9:64:42:03:09:e7:ca:73:70:7d:af:fb:
                    14:30:2a:f9:23:38:ab:22:19:95:10:89:bf:55:99:
                    bf:60:dc:5d:f5:5d:b1:4b:68:4e:61:2d:f0:8b:78:
                    f3:db:69:e6:09:09:50:e9:1c:82:97:f4:d3:fd:d6:
                    b3:f1:16:56:e8:f0:99:5c:e4:45:a9:32:2d:51:80:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:D7:AC:7F:3F:D1:36:E1:E8:25:57:92:51:59:C6:88:C4:C7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/59ab3c15-c3dc-34f1-b57b-826d3e4ade10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.crl

            X509v3 Authority Key Identifier:
                keyid:36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:72:4f:4f:4c:77:f8:84:6d:d1:17:5d:44:6b:5a:28:22:82:
         1d:78:80:1f:bf:ca:43:0b:41:92:e5:3f:8b:10:e9:04:6d:7f:
         28:2e:db:b7:b1:03:bd:bd:3f:43:30:fc:d4:cd:f6:0b:27:fc:
         88:46:3b:02:12:7a:be:9d:81:26:83:21:b0:8b:e2:77:b2:9f:
         53:6f:5f:08:22:f4:e4:be:9c:84:27:e5:e9:71:63:1b:35:b9:
         46:8b:d0:3d:2b:e9:5f:3e:0b:68:59:dd:ee:19:8f:4b:e3:1a:
         fe:6d:5c:ff:e5:14:4b:ca:70:4f:60:06:4a:e1:91:48:56:49:
         f6:8b:c7:fd:08:c4:82:00:8b:1f:7d:64:c7:a3:e0:12:1c:c6:
         97:65:18:af:81:28:0f:fd:3d:75:ae:1d:2d:77:16:06:d3:72:
         42:09:b1:b4:ca:ad:13:f2:2f:57:92:22:c9:50:3d:18:fc:51:
         79:66:92:3a:72:e7:83:74:a1:b3:28:f9:61:a4:90:2a:35:b7:
         2d:85:1a:31:be:f5:5f:d5:37:24:47:a8:32:86:75:11:8b:c7:
         1d:92:6a:d0:4c:26:58:db:0d:1c:dd:46:d1:a2:d0:15:5f:35:
         f7:2f:ae:95:df:43:7e:8b:2e:04:82:73:26:ce:9c:30:65:21:
         1a:4a:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:06 2026 by rpki-client