Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d1408bd3-49ee-34bc-88ce-608977b16e56.roa
File:                     d1408bd3-49ee-34bc-88ce-608977b16e56.roa (raw, json)
Hash identifier:          2F7CTSmgfDFPUIqkQcscEhCMWNf1UdPMXObbc4M4Beo=
Subject key identifier:   DA:4F:81:B2:8E:77:D2:F2:1C:66:65:19:D3:6F:15:C5:BF:F2:48:30
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584DB3402D4446CD90F016F655E0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d1408bd3-49ee-34bc-88ce-608977b16e56.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     25899
IP address blocks:        67.59.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:2d:44:46:cd:90:f0:16:f6:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=3d4fe6c1-edad-439b-b287-8b6a190c519d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:57:60:b2:af:2e:e5:55:97:ea:ce:16:8c:
                    be:e2:c5:0a:e7:44:c6:c8:d5:7d:d3:de:da:d5:16:
                    25:e2:ab:94:3a:59:15:d5:7c:b2:f4:0c:c5:b2:c9:
                    49:08:a9:8c:f3:0b:04:74:52:5e:10:2e:1c:a7:c7:
                    ba:b0:8e:0b:d0:4a:09:59:ff:83:8c:ff:54:c5:b2:
                    10:99:9a:8c:6a:2e:72:0f:9e:86:f4:30:40:1f:5b:
                    61:8f:9e:1c:13:48:9f:d3:e4:b2:94:cb:93:39:cf:
                    bb:b4:7f:e5:19:73:7b:4b:3e:d4:9b:a5:4d:3f:4f:
                    86:bd:e9:1f:21:97:b2:91:a8:39:1c:e4:d9:85:21:
                    e3:e2:77:52:ab:ce:b7:e9:59:4e:b9:d6:e3:c6:cc:
                    ad:ec:b0:03:de:e4:ef:53:60:2f:20:71:40:50:ce:
                    fd:62:b5:6a:45:7d:4a:62:d8:9b:f1:c7:7a:fd:0f:
                    bf:37:a5:31:ff:06:08:00:59:bf:0d:f2:ed:11:6d:
                    f0:06:42:85:25:87:3f:10:73:2e:2b:84:3d:6c:99:
                    c2:b6:3d:68:f7:60:cd:5c:80:f3:b3:16:6d:e7:f8:
                    e9:f9:37:04:76:bb:78:6e:c4:70:bc:39:3b:57:75:
                    80:6b:ad:d6:e3:e9:d1:7e:4d:38:cb:36:27:df:d1:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:81:B2:8E:77:D2:F2:1C:66:65:19:D3:6F:15:C5:BF:F2:48:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/d1408bd3-49ee-34bc-88ce-608977b16e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:f5:88:82:e3:df:68:51:c9:22:7d:94:24:b1:3b:59:75:
         5c:0d:c6:1a:b9:f7:a4:89:2f:65:b8:e2:f5:7b:41:74:ac:27:
         95:a4:3b:69:ad:f8:ff:1a:16:e1:1f:be:99:4e:1c:36:af:f7:
         db:58:be:8c:61:25:88:dc:63:35:87:af:e0:ec:89:7b:91:2f:
         2e:ac:5f:7e:2b:95:b1:21:c4:ea:61:b8:e6:c6:ee:c3:9e:36:
         83:58:c8:ff:05:4a:1d:ba:cc:ce:ce:f4:b7:fa:b0:b9:51:eb:
         2c:98:b7:1d:7d:10:e7:71:83:d2:4b:41:59:a6:1e:6a:50:ea:
         8c:d5:82:6d:7e:ad:3c:85:0e:f9:c6:19:f4:ae:7d:8e:1f:f1:
         14:4f:02:47:af:3d:b2:e7:b5:25:62:9d:be:98:52:99:12:b6:
         9c:65:68:7f:5b:6a:2e:ed:87:2b:af:6b:0e:56:b6:18:5c:42:
         23:47:a7:81:1a:a5:64:95:42:07:22:5e:d7:3e:62:47:a9:19:
         18:d5:b8:f5:20:c9:75:3a:1d:06:f5:ad:a0:93:78:b6:df:50:
         1b:15:a1:ea:c7:6c:93:73:ea:c3:4d:3c:db:31:ce:9b:a3:6a:
         14:10:fa:8c:04:ee:53:95:ab:e1:c2:82:ec:70:fe:e4:a1:5e:
         1d:38:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:19 2026 by rpki-client