Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
File:                     2b05d93a-3505-32a8-9778-a907ed424baa.roa (raw, json)
Hash identifier:          I2J1WM7FQzKvxCUQl4WqPYrzEma240lVurpgr6BX0X0=
Subject key identifier:   A3:C6:F2:37:5D:CF:7A:C7:2A:3B:8A:F9:FC:EF:EA:F3:A8:E1:A0:65
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584B21CC16D8696E75D89D91C480
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        209.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:16:d8:69:6e:75:d8:9d:91:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=16cb86d3-18e0-4016-b32d-d9e8ee425a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:1b:8a:f3:a5:b4:ef:ac:a5:09:76:86:22:
                    a8:4f:be:4c:8f:95:5d:32:13:f9:bb:43:59:b5:fa:
                    19:8d:c6:cb:7d:64:28:3d:26:65:75:dd:9c:b0:be:
                    99:5f:d2:bf:6e:a9:70:09:84:7d:03:b2:18:7a:cc:
                    d7:db:37:88:1f:10:b8:cc:2f:82:d2:e3:41:73:28:
                    33:e4:58:28:91:71:0e:eb:83:4a:a4:25:5e:c2:d1:
                    2f:39:11:0a:cb:af:22:16:7e:27:e3:a0:c7:3a:cf:
                    61:a9:2a:75:2e:bd:eb:0b:8c:34:4d:a2:b0:44:c8:
                    eb:27:45:20:bf:c0:7e:88:84:1a:4c:f2:df:79:83:
                    40:a7:10:17:43:e2:5d:1d:17:f5:0d:f2:78:3e:c8:
                    ef:37:77:16:e2:60:31:4f:e0:69:6d:6b:7c:a1:2c:
                    78:d3:a0:5f:e8:cd:92:2b:bd:4e:40:12:88:32:81:
                    cf:d2:fe:6f:a4:8c:03:4d:43:3b:5d:84:a6:83:1d:
                    f5:b6:7e:7d:3a:08:78:2f:6e:85:7a:24:0e:11:f1:
                    9c:3a:08:0f:b8:c3:a7:6d:66:7c:ba:46:7a:ec:45:
                    2b:72:6c:f3:31:a4:d4:4e:62:fc:de:b1:3d:e3:1a:
                    a2:a7:6b:7f:0d:50:90:a0:ac:76:df:db:26:83:ef:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:F2:37:5D:CF:7A:C7:2A:3B:8A:F9:FC:EF:EA:F3:A8:E1:A0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:61:af:45:25:fb:63:64:43:a4:e8:43:9b:a5:39:d6:24:7d:
         35:75:a7:4b:cd:c1:31:6c:44:32:68:3d:ea:73:6b:d7:09:69:
         09:ea:a4:df:7a:2a:0f:70:a1:89:a3:d3:d5:95:04:37:6e:48:
         a0:c4:24:4a:13:7b:af:4d:87:e0:b6:d0:eb:4c:f0:1b:5f:f9:
         ee:38:f0:ff:56:ea:f9:96:c1:d4:a5:c7:59:95:61:a7:81:57:
         40:d0:36:4a:5d:32:c5:93:bc:5a:fb:55:64:f2:b9:f1:7c:21:
         f4:11:8c:67:42:92:9d:70:15:9c:01:9d:24:a1:7c:58:90:fd:
         e4:8b:b8:14:76:70:42:60:a5:a8:f6:5a:86:61:d3:b8:1c:3b:
         4b:b5:71:7b:4f:69:f1:2e:70:0f:2a:fb:fd:9e:23:be:f9:fd:
         b3:68:8d:32:f3:de:56:c1:a0:00:34:95:a7:93:21:9f:93:e7:
         ee:8c:56:d3:33:b7:01:68:c7:9f:2d:a4:a1:33:6f:f1:14:93:
         34:11:20:fe:72:a2:0c:a9:cc:7b:28:56:f8:90:88:5f:f1:20:
         f5:71:15:1d:b7:34:1b:78:c6:ad:3a:b5:49:dd:14:7e:2d:43:
         52:5d:55:71:4d:87:7e:38:66:57:38:91:33:ee:db:d3:96:d4:
         fa:b1:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:18 2025 by rpki-client