Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa
File:                     aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa (raw, json)
Hash identifier:          T0dbupJNdrxdNVDknUNP1TmN6mLDGifY8le7/+D2K50=
Subject key identifier:   D2:D6:6E:41:8F:C4:35:18:EF:34:60:4E:0A:15:D2:78:12:B8:16:FB
Certificate issuer:       /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
Certificate serial:       010D0C9F4328584E6C6F68B1C9C430257D9DDD40
Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     16509
IP address blocks:        208.75.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:68:b1:c9:c4:30:25:7d:9d:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=65f42fca-5707-4593-886f-60c98fc6f2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:6e:ca:79:e3:2f:5e:10:4f:92:dd:47:5a:
                    a2:6f:dc:7a:74:e2:50:fc:5f:34:83:98:40:dc:55:
                    2d:ec:14:5f:7d:2c:9e:a8:d5:40:83:00:1d:9a:4a:
                    53:db:f3:16:7a:59:5b:dd:a8:d3:86:0a:15:64:76:
                    aa:6c:a0:f2:87:1f:68:64:ea:8c:79:ca:12:b0:8b:
                    c6:c0:e3:02:43:c8:9d:fb:d8:f0:43:1b:ff:4b:05:
                    40:89:34:e8:a7:8b:51:7e:09:a9:60:48:54:48:4a:
                    d7:27:90:4a:67:b9:ce:59:13:2e:1e:be:aa:c7:44:
                    c2:b1:58:13:f5:9f:6c:6b:de:92:57:67:5f:16:17:
                    e0:19:ce:5b:38:86:6c:1b:12:c2:91:b3:fe:3b:75:
                    2f:9a:87:66:47:b1:a4:5c:19:f8:88:7b:b5:28:cc:
                    26:9e:bb:4c:19:bf:ae:40:b3:eb:bf:9f:40:b1:bb:
                    94:85:5a:15:ff:9d:2a:dd:ec:47:be:2b:5c:03:f0:
                    b0:ab:19:65:0f:5d:25:35:9d:7f:fd:87:b6:f5:ac:
                    1e:58:32:09:20:fa:43:3d:e1:18:36:2b:dd:ae:c8:
                    ef:3f:79:f0:39:8a:c2:06:49:1b:35:b4:7e:65:34:
                    95:ab:9d:01:0b:d9:65:93:b7:70:6f:db:7d:13:6a:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:6E:41:8F:C4:35:18:EF:34:60:4E:0A:15:D2:78:12:B8:16:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl

            X509v3 Authority Key Identifier:
                keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ca:a5:f6:85:73:bd:65:69:16:55:97:09:da:e7:34:d2:33:
         8d:dc:2b:bd:00:31:55:d9:0a:20:82:8f:9e:a4:90:d7:92:32:
         da:6a:14:d3:8b:73:95:86:fc:fa:7e:d1:a8:83:1b:2d:4a:d6:
         54:78:ed:e7:14:cd:bf:f6:b1:f4:76:f1:53:48:e8:0d:4d:24:
         9c:2b:50:48:02:1c:87:90:53:b4:f7:bc:fb:06:eb:0f:85:9f:
         d3:49:06:8f:28:95:c8:f9:05:8f:c9:f0:0c:21:01:e0:6e:f3:
         cf:e5:a7:ec:1e:b0:91:d1:c6:39:d2:22:35:5b:dc:e6:11:61:
         25:49:51:c4:ab:54:c6:7a:b8:61:a4:83:cc:f8:b7:69:42:b9:
         97:9a:92:29:b7:1a:76:50:66:7a:0f:25:b5:75:c8:d0:84:3d:
         60:f3:fb:d1:2c:dd:b6:64:93:7b:0d:63:49:d3:85:e6:5c:c4:
         fd:68:00:02:12:55:8b:1a:80:c0:a2:88:cc:28:9f:77:17:aa:
         62:9c:ab:a9:5e:79:30:46:0e:ce:61:df:ff:b0:8b:6c:4e:fe:
         ba:0c:ac:cf:76:63:2a:e5:33:ad:c1:7b:e1:4f:7b:88:35:7a:
         37:9b:e3:47:bf:8f:46:70:e6:0d:76:7d:12:e8:07:fe:31:56:
         ee:8e:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:26:59 2026 by rpki-client