Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
File:                     2b05d93a-3505-32a8-9778-a907ed424baa.roa (raw, json)
Hash identifier:          o4EfyVvU4t9571SSAzRwUKcjZvdpCkTt+lUSvzFk5JE=
Subject key identifier:   D5:76:C4:80:54:55:91:0F:BC:68:32:5A:18:84:C1:85:8D:44:0A:28
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584DC29AE0E59BDF3CB41B111900
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        209.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e0:e5:9b:df:3c:b4:1b:11:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=fe8de5e8-a3e8-4b6b-bd52-df4f9841856a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:e8:14:42:53:ad:d2:9a:a7:45:75:62:bd:
                    16:b1:64:37:a5:9e:4b:30:ca:7b:1d:8f:28:0f:47:
                    9c:26:77:e1:b3:44:02:92:e4:f4:3c:53:74:00:ca:
                    b3:5a:3b:fe:0f:b7:08:5d:10:da:7d:0e:da:c6:86:
                    83:17:0d:02:92:04:99:be:db:db:c0:5c:dc:bc:ae:
                    cd:5a:ac:3b:03:58:ed:3f:cc:69:4f:ca:94:54:67:
                    7a:19:1c:b0:6f:bb:9e:32:58:69:6c:96:0e:ad:5c:
                    ba:25:42:4f:29:58:cc:f8:8d:8c:ae:c7:1b:e5:a4:
                    a9:76:7b:be:7d:d8:ad:b8:53:44:c9:23:ab:7d:9a:
                    6d:ba:bb:44:2f:fa:92:dd:3b:86:71:5b:18:95:76:
                    02:75:91:fc:c8:83:4b:3d:ac:80:45:f2:80:7c:37:
                    9e:63:63:67:0c:30:9d:ef:8c:63:cd:93:be:ae:27:
                    3c:2c:de:2b:40:40:0c:c4:da:3a:2a:2e:34:f1:4f:
                    0d:28:12:07:d3:11:a7:a0:6f:ef:e5:95:00:9c:29:
                    f6:91:36:57:9b:ac:05:fd:d0:90:8b:79:3a:e0:b3:
                    b1:05:b1:61:e1:51:1a:f3:67:f3:fa:90:eb:0d:d1:
                    51:ed:c9:1f:f7:28:fa:03:5d:bd:c9:b7:07:8b:f1:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:76:C4:80:54:55:91:0F:BC:68:32:5A:18:84:C1:85:8D:44:0A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b5:c2:fa:9a:58:0b:c8:1d:29:a9:69:24:a8:5a:e4:06:82:
         2f:50:63:e3:4d:51:5d:df:08:4b:f8:66:4a:83:ce:16:cc:34:
         b5:62:42:c6:0c:ac:b2:e8:cd:bb:b6:f8:e4:b0:15:42:83:f7:
         86:00:36:89:7f:e8:3e:51:e6:64:7d:27:46:d8:72:24:a0:dc:
         08:a4:57:90:d7:a4:49:4c:e6:a6:90:06:b3:a9:b5:5d:94:6d:
         09:71:6b:18:32:6a:11:9b:30:ab:ba:dd:20:52:e4:95:f4:64:
         d2:58:9f:3e:20:5c:65:e0:25:70:af:e3:14:79:1e:f8:9c:40:
         4d:36:5a:3f:82:5a:fe:31:bd:cd:b6:b1:d0:26:c8:07:72:1e:
         57:df:45:5d:c6:8a:e2:8b:38:a3:75:a2:c0:1b:48:a2:67:9e:
         4f:58:4a:70:11:8e:ef:6f:f8:3f:d4:cc:00:d6:d1:84:73:cf:
         26:c4:94:a9:8c:8e:d5:7b:48:c0:a7:73:8d:4c:ca:22:51:28:
         b9:e9:bb:69:18:94:a8:10:9b:e9:da:c4:e3:96:c0:a4:3a:99:
         14:0a:9f:d3:15:08:42:1e:64:79:f4:95:cc:eb:50:7e:cd:37:
         48:26:a0:26:85:7c:5f:8d:3a:f8:83:44:7c:32:bb:41:da:8a:
         5d:fa:85:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuDlm988tBsRGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZh
OTFiMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZmU4ZGU1ZTgtYTNlOC00YjZiLWJkNTItZGY0Zjk4NDE4NTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jfoFEJTrdKap0V1Yr0WsWQ3pZ5LMMp7HY8o
D0ecJnfhs0QCkuT0PFN0AMqzWjv+D7cIXRDafQ7axoaDFw0CkgSZvtvbwFzcvK7N
Wqw7A1jtP8xpT8qUVGd6GRywb7ueMlhpbJYOrVy6JUJPKVjM+I2Mrscb5aSpdnu+
fdituFNEySOrfZpturtEL/qS3TuGcVsYlXYCdZH8yINLPayARfKAfDeeY2NnDDCd
74xjzZO+ric8LN4rQEAMxNo6Ki408U8NKBIH0xGnoG/v5ZUAnCn2kTZXm6wF/dCQ
i3k64LOxBbFh4VEa82fz+pDrDdFR7ckf9yj6A129ybcHi/Ei8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNV2xIBUVZEPvGgyWhiEwYWNRAooMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5
Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvMmIwNWQ5M2EtMzUwNS0z
MmE4LTk3NzgtYTkwN2VkNDI0YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA1OWM5NjMtMDY4ZS00ZmJhLWE3
ZDYtNjM5YzNmMzZhOTFiLzIwNTljOTYzLTA2OGUtNGZiYS1hN2Q2LTYzOWMzZjM2
YTkxYi5jcmwwHwYDVR0jBBgwFoAUWNZYCwcsYV693v/1IVy0dP6S2y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02Mzlj
M2YzNmE5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADq1wvqaWAvIHSmpaSSoWuQGgi9QY+NNUV3fCEv4ZkqDzhbMNLViQsYM
rLLozbu2+OSwFUKD94YANol/6D5R5mR9J0bYciSg3AikV5DXpElM5qaQBrOptV2U
bQlxaxgyahGbMKu63SBS5JX0ZNJYnz4gXGXgJXCv4xR5HvicQE02Wj+CWv4xvc22
sdAmyAdyHlffRV3GiuKLOKN1osAbSKJnnk9YSnARju9v+D/UzADW0YRzzybElKmM
jtV7SMCnc41MyiJRKLnpu2kYlKgQm+naxOOWwKQ6mRQKn9MVCEIeZHn0lczrUH7N
N0gmoCaFfF+NOviDRHwyu0Hail36hYo=
-----END CERTIFICATE-----
Generated at Wed May 13 14:35:34 2026 by rpki-client