Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ead23495-4dcb-3fce-94d2-2d7271447b97.roa
File:                     ead23495-4dcb-3fce-94d2-2d7271447b97.roa (raw, json)
Hash identifier:          KNi0EBeqXT8UhMV5F02YfbvTTkZMXGvD4BvehMMLDsk=
Subject key identifier:   2C:6C:BB:3F:D6:74:4A:38:9E:DD:71:41:FB:D2:10:09:04:4E:7D:C5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DBD05C3BA770CFEC5C0CDA8C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ead23495-4dcb-3fce-94d2-2d7271447b97.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     397230
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:c3:ba:77:0c:fe:c5:c0:cd:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=8dd0fd44-f2bc-4d48-a1e3-d5ea5892008f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:85:93:09:a3:01:28:93:e0:33:d5:03:ef:
                    51:6d:4d:fd:ba:f9:97:66:08:77:d0:39:17:8f:4e:
                    a5:e6:1f:7a:6b:2b:32:e3:4e:f7:53:90:37:c3:79:
                    20:9e:d7:34:23:fa:40:c9:f0:06:a9:ce:e9:f0:61:
                    bb:3b:90:c0:fa:5a:d9:e2:a5:a7:a8:68:53:47:4b:
                    d9:06:fa:0e:dc:16:b8:bd:1b:61:4f:8c:b9:d0:df:
                    4b:98:91:e8:61:bc:22:ef:97:70:7f:5d:81:97:fc:
                    bb:79:7e:f2:6b:ba:32:f6:84:70:57:23:15:0a:e9:
                    86:ce:9f:23:5d:0b:6f:b5:36:6e:ef:3c:5d:77:8b:
                    e2:f9:10:e7:b0:60:82:4e:9d:63:a0:52:92:14:d7:
                    e2:b6:ec:8b:e2:e5:9c:25:38:40:5d:91:7b:cf:5b:
                    97:37:d0:ac:be:27:40:24:95:5e:31:46:92:1e:ed:
                    86:7b:c4:4c:91:09:29:c4:25:bf:90:47:13:cd:ed:
                    b6:1c:7c:52:60:81:04:94:51:50:b4:52:47:c4:12:
                    3d:b3:6e:4d:7b:3f:32:ad:84:74:d6:fd:80:75:66:
                    b2:9c:bb:6b:d6:7f:03:88:33:3a:ec:c9:10:8b:5f:
                    46:8a:e9:64:21:48:7c:6b:8f:b4:9d:32:9c:58:04:
                    f8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6C:BB:3F:D6:74:4A:38:9E:DD:71:41:FB:D2:10:09:04:4E:7D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ead23495-4dcb-3fce-94d2-2d7271447b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:44:e1:1d:a1:c8:cc:2a:a8:43:10:cd:7c:8a:50:e8:39:
         9e:c4:06:9c:80:76:8b:1a:fe:2e:6c:ed:c1:54:7f:2f:51:b3:
         71:46:59:ea:df:ae:ad:c4:d3:43:94:6a:1e:99:64:76:c6:2b:
         9c:19:c8:ba:66:10:27:a6:5e:69:2a:b5:58:57:9a:bf:4e:08:
         54:12:aa:60:fa:25:0b:c0:3c:25:8b:61:e7:1c:e7:57:6e:f9:
         06:0d:f6:50:e3:8d:55:5b:b6:c7:ce:cd:29:9a:4e:1d:54:c8:
         60:53:c4:02:b9:df:75:6f:2d:92:df:55:6b:ac:17:79:cb:30:
         e1:31:f9:ba:1e:6f:1e:2b:ac:3e:01:59:cd:74:17:5b:d7:df:
         d0:c1:6e:06:c2:89:58:e7:1c:37:5e:9d:0c:d1:6b:aa:1c:41:
         09:a7:d2:ab:65:6a:9b:a8:a1:3a:54:55:ff:d7:2b:c7:23:42:
         d0:c8:a1:b1:5f:bb:db:53:41:be:56:ba:e8:b2:b1:45:2a:17:
         da:6e:45:4c:b2:62:c9:8e:8f:59:91:e1:dd:0b:05:b3:34:2b:
         fc:d6:87:81:ca:5f:75:07:0a:84:3a:47:9b:42:61:7f:ed:0c:
         39:9e:ab:89:8a:e8:b5:9d:69:f9:a7:4b:8b:67:26:3c:24:5b:
         15:39:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:28 2026 by rpki-client