Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa
File:                     d1d035f6-95d4-3dbe-a301-249e15b96059.roa (raw, json)
Hash identifier:          aKA3Pxnqx3jwuLqP3q7anaoPNiKGY1iaG+oA/+He750=
Subject key identifier:   63:66:BE:20:C6:F8:CE:3D:9A:39:68:ED:8E:32:80:D3:7B:D5:5F:5D
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584DBA3AD41EED731A4B4B2537C0
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     397373
IP address blocks:        199.127.59.0/24 maxlen: 24
                          204.77.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:d4:1e:ed:73:1a:4b:4b:25:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=2b8f6911-88ef-4627-ad2b-6c2a636fd945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ce:a7:6d:79:1d:69:a6:10:81:a2:7e:2a:b8:
                    71:25:19:32:4e:51:9d:27:33:34:ae:5e:0c:a1:54:
                    fe:c9:ed:5f:19:af:c4:b3:38:44:af:ad:69:c2:75:
                    39:27:af:16:f3:92:2d:4c:06:04:5d:67:81:c5:ea:
                    6f:c5:68:cb:9b:a1:52:f5:5d:ba:36:5c:47:fd:41:
                    bd:81:c9:47:d6:41:29:71:e7:82:97:c2:a4:f8:71:
                    01:09:00:03:ee:f8:ed:25:56:e3:6e:82:b8:e8:c7:
                    bb:53:3f:3d:34:d6:33:92:9f:d0:7e:f1:ec:99:18:
                    d3:e9:a9:8f:fc:3f:a1:88:19:ab:74:eb:7e:7d:d0:
                    d5:4e:4d:c3:28:be:30:43:fe:1c:5f:b8:42:c0:b5:
                    06:bb:6f:50:ad:7e:1b:de:c2:51:4e:fc:72:41:0a:
                    f4:da:f7:7a:0b:14:33:1a:9d:06:f9:71:17:9d:96:
                    95:d4:35:7d:88:27:41:f9:a8:e4:34:cd:16:5d:b6:
                    c9:03:57:90:87:88:d6:aa:44:7a:f9:f8:94:51:4f:
                    7d:5e:d5:62:21:38:2d:54:01:fe:6f:0a:5a:b8:e9:
                    46:96:84:e9:9f:49:33:c6:b2:a7:1d:44:f4:28:31:
                    4d:e4:4f:91:a0:eb:25:86:fd:2e:ef:3f:4a:4c:32:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:66:BE:20:C6:F8:CE:3D:9A:39:68:ED:8E:32:80:D3:7B:D5:5F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/d1d035f6-95d4-3dbe-a301-249e15b96059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.59.0/24
                  204.77.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:ca:4a:4e:f8:1f:e9:01:96:e4:76:58:2f:fb:64:59:ca:
         65:6f:cd:2f:b4:b0:71:94:ef:41:39:5c:7d:58:f1:0d:9d:1c:
         9b:f4:20:8f:4c:35:6f:af:ef:6c:41:0a:68:2a:3d:75:de:45:
         5c:ed:b0:d3:67:f5:b8:2f:2f:c8:4c:98:e8:d7:a5:8d:76:78:
         44:86:31:67:69:88:ac:af:7a:c8:8f:02:bb:69:e6:bc:49:05:
         87:cf:eb:72:b9:89:bf:a2:2c:ea:e5:4a:7c:3d:e3:7a:4b:f0:
         c1:5b:cd:06:07:d0:a0:b6:8d:92:52:cd:09:84:27:8e:42:56:
         2d:22:81:90:65:c9:96:08:3f:ba:11:a5:0b:ba:ac:3b:fc:2d:
         f3:b5:c9:a1:89:71:48:7d:e8:59:67:19:26:e0:ba:cb:73:0e:
         ba:14:e4:e7:5d:19:72:bb:fe:73:1b:de:1b:4c:36:50:6b:10:
         85:78:89:cc:73:de:a3:a6:dc:ed:96:5c:f2:45:88:9f:13:fc:
         ba:0f:6d:6b:e7:79:8f:1a:6e:af:5b:c0:ad:d5:a3:64:f2:35:
         18:31:ba:41:23:06:ab:3a:f6:df:a1:8b:ac:c3:13:96:a2:63:
         d2:b4:65:2f:63:94:55:eb:86:c3:de:c4:b4:f7:70:2a:b2:f6:
         b3:e6:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:31 2026 by rpki-client