Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/efdab307-2bf0-3e6f-9311-9b9f93a9f608.roa
File:                     efdab307-2bf0-3e6f-9311-9b9f93a9f608.roa (raw, json)
Hash identifier:          1vf+B6BAnnIr73S0FyhyOXs0d81YhID8p8Tvte4jRM4=
Subject key identifier:   73:B5:7E:E9:B6:E1:9B:9A:2B:4B:EA:3E:CD:E3:52:C7:93:8B:70:12
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4858D86BAAC81E6593012820
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/efdab307-2bf0-3e6f-9311-9b9f93a9f608.roa
Signing time:             Wed 25 Mar 2026 05:58:47 +0000
ROA not before:           Wed 25 Mar 2026 05:58:47 +0000
ROA not after:            Tue 23 Jun 2026 05:58:47 +0000
asID:                     12025
IP address blocks:        199.48.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:58:d8:6b:aa:c8:1e:65:93:01:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 25 05:58:47 2026 GMT
            Not After : Jun 23 05:58:47 2026 GMT
        Subject: CN=7dce550c-7640-4714-808d-d5dfe5d82358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:81:dc:93:22:5e:55:20:3f:4e:2b:20:dc:
                    4b:d9:b1:e2:ef:8f:28:a9:c2:e2:71:d4:98:b0:2e:
                    d8:5a:4a:b0:d7:04:59:a2:ff:8b:ff:7f:a3:ca:f0:
                    5e:79:36:71:a5:01:a7:09:5d:ba:52:a4:f7:4e:18:
                    ff:47:8b:13:40:09:6b:78:f3:ee:b7:3b:6b:8d:73:
                    0d:67:0d:b9:7d:fa:02:96:b9:a5:c1:3c:56:55:72:
                    d9:12:8d:04:f6:b3:54:fe:9f:fd:e3:3a:a1:5b:50:
                    f1:d8:ce:f2:3f:55:99:20:dd:1d:b8:08:64:c8:0e:
                    a2:dd:c2:22:93:4c:86:c6:1b:8d:d0:6e:bb:b5:3a:
                    63:ee:d0:6b:b9:15:14:ce:e7:af:64:dd:c7:d4:1e:
                    bd:ed:9a:7f:77:98:16:77:98:28:94:cf:00:cc:72:
                    0b:cd:82:43:26:3d:cf:44:e7:28:3f:4f:bb:8d:bd:
                    aa:72:b3:92:4b:9b:52:9d:11:37:cc:2a:f7:a6:33:
                    0d:fb:48:1f:f3:f6:32:89:0a:fa:3e:fb:ee:db:92:
                    e3:b5:7c:6d:af:4e:9b:9f:de:83:15:ed:3e:54:ff:
                    28:f4:40:00:5c:29:68:bd:f4:08:ad:eb:94:f7:b4:
                    f4:f9:48:b0:fe:6f:3c:08:6e:1d:2c:60:58:65:fb:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:7E:E9:B6:E1:9B:9A:2B:4B:EA:3E:CD:E3:52:C7:93:8B:70:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/efdab307-2bf0-3e6f-9311-9b9f93a9f608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:09:14:70:3b:17:3c:89:05:af:f4:d5:d5:de:47:02:b5:
         de:dd:bb:56:33:c1:ab:74:12:83:50:ab:38:a0:d0:dc:de:dd:
         0f:d5:ce:84:7f:76:99:bb:08:78:e6:60:4e:08:81:8f:ca:6d:
         7c:fc:3c:f4:6d:a3:ae:12:bd:28:98:17:34:db:67:23:61:95:
         5c:4b:0d:74:8d:a7:9d:f4:9f:08:c3:c8:e1:a1:58:1c:4b:af:
         fe:fd:20:16:c4:a3:70:53:e1:89:82:10:be:99:07:99:8c:bc:
         75:40:b3:07:b1:04:52:e2:ac:aa:8a:5f:74:64:26:3d:13:4b:
         eb:e4:0d:b6:3a:fc:27:e0:35:fe:8d:51:89:ff:97:1f:d1:6e:
         56:dc:0e:57:ee:2e:5e:c3:21:2b:b2:8f:21:c2:b2:7c:ea:cb:
         ee:9b:11:d5:1b:5f:d0:81:05:b1:76:19:9d:74:09:2e:45:4f:
         26:e2:4d:32:78:ec:d1:03:44:3f:72:84:9c:25:bd:4b:a8:6d:
         fe:21:1c:4a:ef:bb:80:ee:9f:bd:78:d9:f3:a9:e9:f2:75:d4:
         a0:b4:9a:7e:a5:eb:9f:5f:3f:74:6f:01:84:f6:07:49:70:a4:
         07:c2:39:17:83:b8:9d:65:9e:25:47:c1:32:ee:95:65:e4:23:
         5c:28:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:39:50 2026 by rpki-client