Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa
File:                     039c392c-6474-32ab-91a4-0586eea4b399.roa (raw, json)
Hash identifier:          BgjJi2QSXN9lAHkcO1rE79YGwOXdgaf4C2U2GQSQ1DI=
Subject key identifier:   9C:77:8C:54:8B:26:C9:7F:F3:F1:60:15:57:ED:BE:8A:A6:B3:3E:12
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF7178F95D99A0A88F5A545C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397215
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:8f:95:d9:9a:0a:88:f5:a5:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a67ae2bc-2348-4b62-9af2-0d56d38ba462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:44:b0:57:d2:e1:9c:bb:47:eb:cf:6b:56:44:
                    10:99:c5:22:90:36:89:3f:ce:26:97:79:8e:b3:28:
                    8e:e3:4e:c4:a9:db:5b:bd:d5:63:03:fc:d8:22:21:
                    3b:fb:69:a3:31:d9:bc:52:56:60:e5:7f:dd:3a:13:
                    0b:2d:a8:5b:33:25:3b:2d:0d:e6:0f:03:2c:a5:41:
                    cd:ee:2f:8d:4b:f3:20:55:6b:60:46:0b:26:51:03:
                    93:a4:82:61:87:4e:7e:8a:be:c1:31:2f:43:0e:14:
                    e5:47:e0:4e:bb:a9:85:32:4b:96:1f:15:e8:67:64:
                    23:3c:e1:86:ab:0d:c6:c7:35:92:30:f5:d2:ae:c0:
                    b3:09:36:ec:c0:d3:a6:54:51:4c:a0:f2:f6:9d:7a:
                    a1:85:0e:6e:2f:de:c9:32:a5:4b:9e:64:cc:a1:ca:
                    42:07:09:22:b6:69:28:10:f3:44:29:b8:18:8b:de:
                    57:7e:b8:79:32:b4:65:5d:c3:a4:06:f9:10:9e:39:
                    53:13:e9:f7:a1:3c:bf:f8:66:2b:18:a3:d5:8a:70:
                    b2:95:f0:a3:8d:d8:3e:00:ca:e0:0e:5b:bb:5a:59:
                    30:fe:e6:86:fb:1d:6f:7c:4d:01:3b:7c:0d:bb:cf:
                    0a:6e:42:0e:bd:cd:78:b0:0f:5d:c0:20:a0:ac:71:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:77:8C:54:8B:26:C9:7F:F3:F1:60:15:57:ED:BE:8A:A6:B3:3E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/039c392c-6474-32ab-91a4-0586eea4b399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:f1:d2:c0:51:6f:01:42:1b:d0:3e:99:be:7c:34:db:e6:
         11:5f:83:a1:46:cb:14:84:5c:68:22:dc:a3:0a:f5:80:a8:6a:
         a7:b1:de:54:85:e5:00:f9:4c:c7:a8:28:c5:fb:ca:cf:0b:ca:
         42:25:1e:06:27:dc:31:06:36:4d:7a:69:cc:5c:50:74:0b:b1:
         cf:c7:42:53:88:4d:1e:31:6a:fd:68:ea:c0:ea:c4:8d:08:13:
         75:7d:00:a7:15:96:29:3c:ca:78:58:b8:7a:4d:1d:cc:df:91:
         3d:fd:d7:a2:d0:34:12:72:97:5d:e3:53:6e:3c:43:4d:d3:4d:
         4f:ad:d5:c0:f0:40:09:5e:73:94:48:38:a0:7e:b0:4c:0c:a2:
         2c:dd:77:58:6e:47:d7:df:a9:86:5c:1d:9b:3c:97:f5:60:4b:
         6f:f1:a9:fb:04:a9:60:13:b5:46:03:18:dd:8c:cc:60:16:47:
         64:05:99:3e:cd:42:af:da:59:eb:f4:49:f3:9f:bd:5e:bc:9c:
         26:8b:ca:7d:51:ab:73:34:81:30:0e:85:4f:0f:1b:96:75:fe:
         b1:f2:8a:da:82:af:b6:2a:60:a4:88:87:38:a5:83:b3:72:c3:
         9c:aa:5f:86:e7:70:68:a0:4f:7f:0c:38:34:58:de:9d:6d:7c:
         c8:af:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:59:36 2026 by rpki-client