Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
File:                     ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa (raw, json)
Hash identifier:          JQjSN6UkTToRnmSkTrymyFWV0S2UnMHoZbYIlHtyWtU=
Subject key identifier:   63:3F:A7:97:80:D1:E5:22:61:50:42:ED:50:EC:EB:E4:7F:E8:84:2B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D39CF77E92907019AEFB17480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        209.59.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:77:e9:29:07:01:9a:ef:b1:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=45531a1c-66d9-4e3f-8728-06b5d6f0557b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:d2:f5:d2:51:8b:0b:f2:18:5e:6e:5a:6e:
                    8e:2e:40:49:f4:f1:59:f2:f7:d1:14:ad:a7:de:c0:
                    b4:2b:07:63:85:f8:00:27:34:a4:03:1a:d5:a0:a2:
                    ec:04:dc:ed:74:7c:85:f7:30:c6:18:80:21:5d:f2:
                    5b:90:8b:f0:98:74:41:9a:49:13:fb:46:10:90:98:
                    67:65:02:15:8c:d5:fc:18:6d:ff:ea:57:10:16:34:
                    97:f6:7e:46:9d:6a:8c:3c:5c:67:53:51:f4:e6:29:
                    d2:28:3c:a3:7e:54:d8:09:c1:84:e5:d5:d9:45:66:
                    3d:86:d4:7a:88:c6:ad:08:ad:d2:d2:4f:5f:be:6f:
                    c8:16:7b:1e:75:ed:26:35:9c:07:34:13:1b:08:1e:
                    b4:f0:68:ab:31:59:bf:11:be:55:0b:b1:b6:d1:c0:
                    3f:75:e9:c5:cf:2a:0b:25:09:f7:17:8f:d6:94:38:
                    c9:55:82:d8:a9:6d:6e:13:b5:e4:18:b5:05:a5:0b:
                    61:21:6e:5b:5f:e5:26:01:6c:60:27:98:a1:1f:6c:
                    1f:94:85:2e:32:32:74:dc:7f:64:98:a1:b1:19:3f:
                    dc:b4:f6:ff:0b:44:52:c1:fd:a1:97:a8:d0:d4:31:
                    29:93:00:1b:17:f6:14:87:09:64:92:bf:fc:67:33:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:A7:97:80:D1:E5:22:61:50:42:ED:50:EC:EB:E4:7F:E8:84:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:69:41:47:ab:4b:15:24:8d:cf:98:56:66:b7:eb:7f:a1:d1:
         87:91:2c:ac:df:de:20:38:c2:c0:65:6f:cf:4c:15:b6:7a:c0:
         3f:c5:32:3f:ae:d7:c2:af:59:4c:37:3e:55:4e:4d:5d:c9:da:
         f1:30:0f:4c:42:e6:2b:6b:89:c3:60:c2:77:f2:61:34:a1:a2:
         4e:de:1c:2c:82:46:ff:b6:6b:ff:2a:e7:7d:4d:5c:10:1f:ff:
         d9:b2:e1:b6:d7:b1:7c:4c:0f:af:e6:b8:f8:b4:d6:03:89:9f:
         a5:5f:7c:04:70:e3:01:e9:cd:88:09:11:be:cb:65:74:c2:f5:
         89:b9:84:2a:88:83:be:1e:01:41:e4:40:af:4d:64:52:b3:1e:
         c0:00:2d:0b:2e:16:81:08:4a:35:c3:1a:ac:59:eb:63:c4:54:
         bc:fd:52:92:d9:10:47:2e:f1:b5:7a:7f:87:7c:d8:de:1a:9d:
         1e:9f:3a:92:bc:64:8a:8b:e2:ad:c0:b8:67:26:d4:fb:c1:43:
         40:64:bb:12:4d:bb:06:5d:99:72:26:ea:04:45:61:01:d6:88:
         80:e4:30:13:eb:7d:fa:37:8f:4d:a6:0e:bc:1d:f4:aa:85:4a:
         0c:2e:34:e2:d1:3a:d4:19:0d:fa:2b:4d:62:b6:59:5c:03:20:
         41:c3:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:48 2026 by rpki-client