Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b13c55c1-9e6d-36c5-a149-efda9fc657dd.roa
File:                     b13c55c1-9e6d-36c5-a149-efda9fc657dd.roa (raw, json)
Hash identifier:          Vd+U+7TvWUAM+6n4qzEm/xHYuNPGGIjkVHSYndKhbZs=
Subject key identifier:   F5:C8:3A:38:C8:38:D5:A2:57:3C:47:8B:44:29:26:C8:83:CE:D7:88
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D43C06725D2413A7C4D92E840
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b13c55c1-9e6d-36c5-a149-efda9fc657dd.roa
Signing time:             Mon 23 Mar 2026 14:28:24 +0000
ROA not before:           Mon 23 Mar 2026 14:28:24 +0000
ROA not after:            Sun 21 Jun 2026 14:28:24 +0000
asID:                     12025
IP address blocks:        205.235.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:c0:67:25:d2:41:3a:7c:4d:92:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 23 14:28:24 2026 GMT
            Not After : Jun 21 14:28:24 2026 GMT
        Subject: CN=ccecf376-3828-4774-8acb-741bf064aef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:5a:8c:bb:25:b1:cd:06:75:82:b6:40:d8:
                    a8:8b:76:04:ea:e2:b8:57:30:69:f0:da:e1:3b:71:
                    ed:9c:cc:38:d2:34:d6:20:60:2e:ab:03:f8:6d:c5:
                    57:78:b9:de:b8:aa:3c:f1:7f:38:d7:e0:74:0f:57:
                    39:ee:83:4b:e0:78:03:e9:11:00:c1:45:c1:1a:83:
                    08:8e:d3:e9:d7:ea:7e:c6:b7:85:9e:e7:fa:35:da:
                    02:8c:71:41:97:44:70:c6:3a:fc:8b:80:6f:bf:28:
                    d0:7f:3b:20:b5:e0:87:7e:2e:39:2e:52:11:41:e2:
                    8d:92:d5:6e:89:ec:ff:f1:95:4b:42:84:41:16:42:
                    55:a3:24:bb:d1:68:6f:d0:1f:eb:c3:05:c1:ee:b1:
                    6e:2f:1e:41:45:64:7e:3a:12:a6:72:60:b7:ec:06:
                    b1:fc:af:fb:2f:78:da:f1:c9:53:f4:94:39:59:7d:
                    b4:7e:db:35:8d:fc:d0:6f:72:d0:24:c3:bd:5b:39:
                    77:28:52:d5:49:a3:98:43:b5:77:81:10:73:c4:95:
                    34:c0:ea:81:d3:47:0c:79:71:d4:00:8b:1e:4a:b9:
                    3c:7a:e4:33:8f:52:21:97:43:3b:46:d1:9b:ed:2d:
                    96:3f:a9:74:63:78:a4:62:1f:3c:d2:88:4f:74:fb:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:3A:38:C8:38:D5:A2:57:3C:47:8B:44:29:26:C8:83:CE:D7:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b13c55c1-9e6d-36c5-a149-efda9fc657dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:cb:94:a5:d4:2b:a4:39:14:86:81:88:e4:62:92:bb:cd:
         45:da:76:d4:72:62:ce:19:3e:4b:2a:3d:06:59:9f:6b:08:aa:
         92:a8:6f:68:01:ed:3c:62:24:fb:26:7c:63:f1:d1:cb:6d:7c:
         e9:aa:79:a9:6f:19:9f:f8:ed:6f:a7:ee:f1:79:8d:4f:6f:1f:
         b0:5f:e6:dc:16:1c:4f:1a:4f:75:fa:e6:29:1c:32:09:99:1a:
         67:f6:af:1c:3b:8e:50:3d:fa:f3:d6:16:c7:85:53:ec:0d:20:
         4a:63:b5:67:6b:29:c3:39:1d:74:04:23:7a:2f:89:a5:20:8e:
         f2:a2:70:eb:fe:c8:7c:aa:c6:fa:a2:12:b5:53:cf:9f:08:a7:
         30:6e:70:17:bb:2e:07:5d:d9:17:74:03:2d:56:71:0c:48:e9:
         90:75:1e:06:bb:c2:86:63:ed:fd:55:e2:6e:53:bc:0b:38:00:
         30:d0:6c:01:6d:b1:00:84:92:6f:40:dd:d4:b0:73:0d:63:bd:
         7c:68:b1:65:31:62:46:4e:f6:42:28:3f:01:42:08:02:6e:fb:
         dd:4c:9d:d4:ea:1e:d6:d7:b6:30:0d:c0:40:1a:e0:17:35:02:
         c7:97:bb:13:d2:5d:76:0b:9b:e8:3d:1f:50:af:b3:29:28:b3:
         29:1a:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:57 2026 by rpki-client