Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
File:                     e0d79fd4-9174-37dd-ae23-196db87f1499.roa (raw, json)
Hash identifier:          ToQdR7ST8wdjkKBSu0xy1b/HxLl8E9eljkIh0Kom6nA=
Subject key identifier:   D9:6E:61:AB:51:B1:70:6D:AC:62:31:51:2F:36:9D:D9:9D:BE:40:9D
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584D3DFFABCBCBDFD892778FE700
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     397041
IP address blocks:        209.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:ab:cb:cb:df:d8:92:77:8f:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=4f1692f3-d4da-4353-88cb-541948716add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:bb:4c:c6:36:d4:62:0b:e8:e1:a5:6c:b8:
                    11:af:03:d6:f9:6d:1a:a8:3b:3b:88:c1:64:9f:36:
                    ce:31:de:87:d3:c5:71:c0:1b:ce:a1:70:f2:91:f3:
                    9d:ea:a2:32:a0:aa:28:e1:46:dc:85:28:71:30:59:
                    5f:73:4b:1c:55:61:e4:dd:da:7e:42:4c:5e:d0:0d:
                    ab:33:f8:26:4c:c4:69:7c:91:0c:39:85:db:37:95:
                    54:61:f7:bc:02:9f:0f:14:08:37:7c:9f:fa:e3:59:
                    e6:30:58:90:30:c7:64:a2:62:73:19:3a:a8:36:20:
                    f5:1e:75:ce:3f:f4:9f:fa:9b:09:a5:7f:f9:49:41:
                    b0:60:66:9c:8e:8b:ce:38:c9:d2:e1:16:1b:a1:ce:
                    df:92:cd:88:15:15:3b:3e:46:ce:01:a4:cc:4a:92:
                    03:12:5f:df:70:23:dd:18:6a:31:07:06:08:4a:a4:
                    3e:34:84:c5:a8:16:d2:ab:ca:48:a6:25:84:a4:6e:
                    13:52:40:44:5b:ba:96:00:1a:92:c0:2f:d6:39:e8:
                    df:2c:cf:24:fb:ec:7e:2e:c4:4b:23:ec:8e:21:15:
                    99:9a:05:57:c2:dc:2a:c3:8e:e9:d4:c1:58:e1:76:
                    7d:b3:cb:f5:48:39:62:eb:ef:96:0a:2b:d3:94:ae:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:61:AB:51:B1:70:6D:AC:62:31:51:2F:36:9D:D9:9D:BE:40:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/e0d79fd4-9174-37dd-ae23-196db87f1499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:cb:3d:f6:c0:58:f0:68:36:de:a5:a4:90:8a:af:44:15:df:
         81:df:bf:ce:ba:14:f8:58:65:f3:84:bb:6c:55:64:5b:d6:4a:
         3b:83:55:72:79:40:31:3a:c6:45:6f:07:a3:c0:43:2b:68:cc:
         18:6a:db:61:b5:da:53:2f:2d:a0:ca:ab:ce:1a:1f:89:8f:76:
         94:a6:d5:98:d7:ef:46:8e:ef:c0:e4:fb:12:d5:18:f4:39:89:
         06:3f:5b:eb:f0:d8:ff:69:57:c4:cb:6d:60:6d:8e:61:a4:9d:
         47:e7:9e:0b:7e:d7:cc:bf:2f:3a:0a:1c:38:85:9c:30:b8:bf:
         ec:7e:99:3a:3c:53:ba:fc:e4:8c:df:46:85:78:eb:18:b3:9b:
         0b:13:7e:a5:d1:c8:2f:b1:f6:3f:fc:5c:43:d7:d8:57:48:98:
         e3:78:ab:d6:b2:8e:c9:f9:23:4a:d9:a6:43:11:36:20:5a:da:
         06:cf:2b:8e:d3:38:23:91:1f:0c:6c:9a:b3:4f:30:17:3f:45:
         22:20:3e:d6:41:7c:38:1f:67:26:6e:1d:e2:32:42:53:6e:6c:
         ec:75:25:aa:fa:06:47:92:90:d7:57:24:ba:3d:d2:c1:9f:80:
         b0:15:46:2f:05:1f:48:34:6b:1d:6e:0f:16:ad:76:b1:ef:b8:
         75:ff:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:14 2026 by rpki-client