Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa
File:                     19532b8c-5970-3db7-bd7b-480f7125deac.roa (raw, json)
Hash identifier:          rYPfj2DcmZF25+T9Z+GcmMlrgeDH72UVGL3U1O/EQ34=
Subject key identifier:   6C:94:19:76:82:D4:FC:4D:87:6D:D4:CC:92:9E:FA:0C:3C:9E:3A:B5
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584DA2800FCA7E3383FC5393E100
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     198949
IP address blocks:        209.59.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:0f:ca:7e:33:83:fc:53:93:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=eb30fd95-8bc2-4f8e-9b0f-92b8d516bc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:42:17:53:c3:61:90:b8:13:42:f4:b3:f5:
                    29:dd:91:66:4d:8a:bd:d7:c1:17:b9:d2:4c:f8:fc:
                    15:4d:ce:69:5c:df:a2:45:15:e5:8d:84:32:07:5d:
                    60:36:2f:37:cc:38:9f:71:5c:8e:42:c9:e6:fe:03:
                    20:af:29:53:68:ee:0c:a6:15:2e:64:a7:68:89:6f:
                    9c:48:03:38:e3:23:91:85:9b:bf:87:64:0f:6d:ac:
                    c5:90:37:6f:2f:02:7a:13:11:3a:d1:55:25:99:ed:
                    db:5a:af:0d:6d:9a:1e:74:d4:23:3c:58:75:49:de:
                    a2:be:9c:3a:57:4f:bc:b0:c9:8e:c3:bd:c2:a2:a4:
                    a5:05:1b:48:a2:5a:d8:2e:91:ca:ab:d6:ee:2a:01:
                    60:1b:d6:a2:e5:f0:58:ed:b2:af:2f:64:ae:70:90:
                    c4:40:ed:44:59:65:8e:fd:18:b5:d7:94:c7:53:3c:
                    3b:2e:20:45:74:09:ec:11:33:55:e6:d8:c4:59:16:
                    b8:20:51:48:ee:94:b0:03:90:90:0f:aa:c6:2c:35:
                    93:65:ab:b1:8b:79:b5:59:59:da:ce:f8:c8:68:22:
                    4e:ea:5c:6a:7c:d8:24:31:58:35:74:43:a0:55:31:
                    c0:78:13:95:1b:8a:8c:6d:8c:50:6a:94:21:18:c5:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:94:19:76:82:D4:FC:4D:87:6D:D4:CC:92:9E:FA:0C:3C:9E:3A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/19532b8c-5970-3db7-bd7b-480f7125deac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:f1:0a:52:bd:5a:e6:5c:b2:a5:20:d6:e3:07:f9:81:d6:
         ac:18:4c:c7:00:b5:b4:ca:8a:c7:1c:f3:45:09:49:8b:61:d2:
         88:a5:ec:da:e9:cf:cd:a5:92:3d:ac:47:2a:9c:60:54:53:5e:
         b7:50:76:e8:fd:b2:e9:ec:56:29:93:f3:dd:ab:f8:6d:17:25:
         8d:57:ed:65:6e:17:c2:9a:9b:90:8d:e4:6e:72:e6:20:99:d1:
         16:3c:29:49:10:00:65:1c:07:20:d2:76:24:e7:16:48:00:89:
         5c:7b:01:4a:16:a9:25:16:ea:66:64:c2:1c:61:a5:dd:5c:eb:
         cd:9c:04:dd:1a:42:1f:5f:5c:9c:56:6f:9f:84:44:17:fc:5a:
         28:f3:22:1b:2e:58:b8:cb:59:fa:ad:74:0b:5d:2a:72:4b:3d:
         8d:7e:6f:3e:c6:44:c3:0e:e9:97:1e:74:81:8b:21:2c:02:b4:
         1e:e2:05:fd:f9:02:ac:3c:86:3c:c2:4b:90:2e:26:f3:d9:c2:
         67:e6:7d:61:0f:f4:38:86:19:16:30:de:a2:b8:5e:1c:b3:53:
         9d:54:04:22:36:c2:6e:ee:71:57:31:01:3a:d7:df:36:e5:38:
         2d:d2:63:b5:e3:73:3a:f9:f9:c5:a3:44:80:fe:2d:b5:4c:7f:
         79:98:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:01:52 2026 by rpki-client