Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/d126f209-0363-3cb8-9c85-a865421e968b.roa
File:                     d126f209-0363-3cb8-9c85-a865421e968b.roa (raw, json)
Hash identifier:          u6bGbVbViZNFKhmYYwO9cYnkyi/srbLHI1UdnjCRYQI=
Subject key identifier:   52:A5:99:2A:09:1F:3C:F2:88:9E:CD:F4:60:6F:1C:DE:03:E1:7D:62
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584D394E25D6F91B94B871B21080
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/d126f209-0363-3cb8-9c85-a865421e968b.roa
Signing time:             Thu 19 Mar 2026 20:40:07 +0000
ROA not before:           Thu 19 Mar 2026 20:40:07 +0000
ROA not after:            Wed 17 Jun 2026 20:40:07 +0000
asID:                     54980
IP address blocks:        104.167.254.0/23 maxlen: 23
                          104.167.254.0/24 maxlen: 24
                          104.167.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:4e:25:d6:f9:1b:94:b8:71:b2:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Mar 19 20:40:07 2026 GMT
            Not After : Jun 17 20:40:07 2026 GMT
        Subject: CN=ed00e8ad-795a-4ea8-98c2-ea330f759f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:03:f3:f9:71:35:8b:a9:a8:d5:64:93:8c:
                    d1:20:10:b0:3e:c9:3d:0c:2b:9a:2f:62:07:38:7a:
                    51:ba:b7:18:13:eb:a9:69:f5:c1:4a:41:6d:9b:de:
                    c8:4d:68:60:ff:a0:a8:59:26:2a:e5:65:bb:d2:4f:
                    30:5c:c6:a0:5d:09:a7:8b:78:d7:52:d7:55:f0:ab:
                    5b:f1:e8:ff:2a:b5:cd:92:69:f2:d0:36:08:fe:12:
                    9a:e4:83:ee:a5:eb:ad:4b:05:73:a1:a4:da:91:70:
                    de:e1:d9:31:9e:1e:71:ae:3b:ba:eb:49:f1:5e:98:
                    2f:fa:4d:1f:05:62:44:c9:49:a5:9f:d5:fe:3b:bb:
                    07:94:63:dc:01:aa:05:09:5e:06:2a:4d:52:e5:59:
                    9d:7b:9f:5e:f4:00:6d:dc:54:94:8f:52:a5:24:3a:
                    3a:44:30:d7:9c:b7:9e:55:06:93:a5:2a:18:bf:8f:
                    d9:dc:d5:f5:2b:8f:bb:1c:c2:c0:db:8d:a5:35:7c:
                    0e:65:9f:cf:63:fc:fd:b3:81:0d:ce:b1:54:6d:81:
                    f9:00:41:22:3b:f7:bc:25:5f:b9:98:0d:75:de:fb:
                    77:12:8b:80:24:d9:55:2d:33:6c:ea:d4:8d:65:bb:
                    da:13:8a:c0:23:0b:3d:d4:1f:ef:49:65:ae:ee:1b:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:99:2A:09:1F:3C:F2:88:9E:CD:F4:60:6F:1C:DE:03:E1:7D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/d126f209-0363-3cb8-9c85-a865421e968b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:6f:a4:d4:ec:59:5d:de:c6:17:b7:65:dd:8c:af:4c:d3:
         0c:15:54:0c:ae:b3:51:11:a1:94:49:d7:ce:82:d0:ee:89:62:
         23:fd:d9:15:dd:8e:d6:40:b5:1f:a8:d7:b6:57:4a:3d:88:fa:
         61:5e:da:68:c0:b8:a2:10:c2:19:7a:7e:79:64:80:57:aa:52:
         f8:64:eb:2f:bd:40:59:71:73:97:5d:bb:ff:fa:d1:e8:e4:f1:
         d6:01:ab:95:51:d8:6e:73:26:f2:38:25:9a:a7:b5:e0:1b:3b:
         c8:bc:e3:9c:39:4b:9f:e8:15:3a:3b:bb:f5:56:cb:90:bd:10:
         05:86:6e:3d:9f:b2:70:af:5e:9a:a1:0c:01:c6:93:50:9f:fc:
         dd:20:b1:d6:5b:c9:c9:a1:1d:9f:8d:c5:90:4f:81:c3:93:fa:
         01:2e:84:d4:47:7e:b7:01:1c:bd:9e:2f:85:98:a9:93:00:0c:
         c6:ed:fa:b7:f9:f2:4e:a6:28:f7:78:43:34:1f:7c:61:45:99:
         29:2c:78:a9:48:48:1b:16:cd:a7:67:fe:8b:4f:c5:54:8e:b1:
         c0:5f:a9:80:ab:fc:79:c0:1b:57:50:8b:d9:5f:c9:26:4f:3d:
         cf:ea:a4:d0:d0:fc:ac:b0:29:b5:08:7a:95:98:54:81:2a:51:
         01:2f:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:25 2026 by rpki-client