Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa
File:                     65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa (raw, json)
Hash identifier:          Yo2y1gPIpbHfaTMx7R+aWEQRdlGHTv20ezCAcUJvPFE=
Subject key identifier:   47:55:EC:A6:3A:32:2B:CA:E6:E2:67:00:7E:9C:FD:61:F8:77:5B:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A32BD3B69787E12B1611C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        209.59.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:bd:3b:69:78:7e:12:b1:61:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=393084f5-51bb-4225-b084-14b8d804403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:28:70:bc:3d:28:92:b8:7b:c2:68:32:61:
                    0a:66:1f:d5:2d:79:76:18:91:46:bb:f5:ac:c1:c0:
                    f7:16:45:93:57:a9:22:8a:81:00:b4:04:ba:86:a9:
                    2d:7d:76:df:c1:09:0b:6a:e2:61:38:54:3c:86:cb:
                    f7:cd:26:ba:c4:8d:31:1d:72:2b:04:19:19:d2:0e:
                    14:c2:61:df:aa:6e:58:58:a2:30:ea:fe:2e:c9:ff:
                    ab:a1:2d:c6:dd:41:1f:c7:c4:4f:f2:b1:ba:94:a8:
                    15:d9:36:ae:c5:62:01:f4:6c:0c:87:31:5c:2a:7f:
                    d9:40:8c:21:86:af:15:d7:7e:e2:5c:71:b4:c4:4b:
                    67:68:8e:3e:1c:7f:07:91:cb:62:2b:c3:31:7b:cd:
                    74:c7:ad:bc:6e:4c:fc:bb:a2:f6:a5:70:6e:dd:1d:
                    9b:b0:da:d6:38:91:42:31:97:24:e7:a2:1c:c8:8d:
                    46:5f:5a:04:5e:4d:72:13:8e:bd:3f:38:8a:e8:43:
                    c6:6a:37:df:61:03:9b:ea:e0:34:40:d8:8f:ec:e3:
                    c7:f6:c7:39:c7:90:b9:e9:de:0a:51:ca:6d:4f:61:
                    1a:2a:dc:0c:5f:fc:76:f2:73:e1:af:79:0d:82:a1:
                    35:0c:a4:3b:f5:94:c7:9c:07:ab:4f:2a:66:f5:4f:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:EC:A6:3A:32:2B:CA:E6:E2:67:00:7E:9C:FD:61:F8:77:5B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/65dc74d0-0933-3de3-b4ac-28d1f59dc9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d8:ee:dd:a7:2c:62:15:bf:d4:db:89:71:1d:b3:51:4a:9a:
         ce:40:80:55:88:b5:a3:48:e9:14:31:03:88:ce:79:05:88:19:
         3f:97:04:5e:0a:2b:77:5b:2e:bb:6d:06:1a:40:3a:86:0d:c0:
         07:74:2a:66:3a:07:83:e7:c8:90:e3:66:82:85:6a:cf:f8:0a:
         61:35:29:83:47:a4:12:fa:c4:da:56:0b:c0:8c:53:a3:68:07:
         2c:17:8f:bf:64:55:82:5f:f1:8d:ac:a2:aa:45:16:ba:b3:c8:
         82:8e:24:ec:6b:37:a5:cd:c6:cc:97:53:41:ca:84:47:56:96:
         cc:40:c6:e0:c3:9d:b5:30:e5:99:f4:8b:9f:66:91:f4:56:e8:
         bb:e2:9c:ea:a4:b4:5f:7c:b6:40:ff:e9:7d:d4:25:8e:45:50:
         4e:fa:94:82:22:e6:69:a3:49:93:6e:26:75:86:01:80:15:12:
         87:ca:91:bd:2b:08:65:b9:31:52:05:37:46:da:4a:87:9e:67:
         87:ba:1f:6f:64:50:bb:08:83:4b:60:c2:75:7b:ed:ee:69:5e:
         3c:00:3c:36:82:92:f8:24:40:b4:f6:83:0d:ae:3b:2d:9d:d2:
         f0:6a:20:07:cd:8b:6e:08:71:e6:ea:ae:c8:fe:ae:0a:c6:d4:
         b8:44:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:34:00 2026 by rpki-client