Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa
File:                     2c9974af-b158-3f00-9524-929bb28e921e.roa (raw, json)
Hash identifier:          +MK697V+9pfEOK8Ae9kTMjY8+rdh7tteu84gCgwQy3I=
Subject key identifier:   9B:79:BE:65:18:E0:73:AA:52:80:4E:02:83:C4:1A:1B:5D:4A:E1:3A
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584DB4A57B428FB9F9975738D380
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        209.126.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7b:42:8f:b9:f9:97:57:38:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=c0342ef3-6343-4983-90f5-6ab7d3898909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:ad:d8:73:3a:01:5d:5d:fc:88:05:a8:14:
                    2d:4a:e2:7d:6d:d5:be:df:22:e1:4c:f0:a4:c4:be:
                    5c:d4:61:53:f6:ca:57:67:c8:8d:ef:ad:10:1a:ff:
                    c1:7d:8d:a2:1e:96:f5:30:b4:4b:d6:56:db:c1:e9:
                    27:72:40:8f:84:c3:d6:34:c8:96:57:a9:f2:9f:95:
                    aa:02:df:f2:02:fc:45:8f:5a:f2:37:2c:a7:34:43:
                    dd:c4:8f:33:5f:90:37:a7:8b:5d:99:2c:db:51:5e:
                    53:b7:f5:3c:35:3f:79:ef:87:89:19:76:ff:89:b5:
                    c2:19:a3:98:5a:16:05:19:ae:50:96:f3:00:6a:ab:
                    60:c7:22:2e:ca:6c:d1:e2:8b:18:68:00:05:0f:be:
                    f6:0e:db:43:78:d7:35:cc:c8:a3:b1:97:ba:a6:93:
                    61:d9:bf:1d:10:b4:bb:44:b0:a0:d3:8b:05:61:d0:
                    70:f1:be:95:6a:d7:80:e0:de:b6:f4:1d:3e:44:74:
                    26:4c:73:86:c0:d3:4d:e1:7d:5f:0b:b9:84:31:28:
                    7c:c1:d6:98:18:38:95:ec:21:ed:cf:0a:98:57:06:
                    86:4f:75:6a:32:a7:d3:52:52:0e:f7:b4:98:97:bb:
                    48:fc:30:ad:4b:9a:8c:83:90:f4:83:78:01:3b:c5:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:79:BE:65:18:E0:73:AA:52:80:4E:02:83:C4:1A:1B:5D:4A:E1:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2c9974af-b158-3f00-9524-929bb28e921e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:e5:7d:b3:9a:82:0c:8d:4a:31:00:e7:7a:48:09:0d:a6:
         b6:3e:58:ff:8f:a7:20:0f:a5:41:39:30:79:b3:b6:de:1b:a6:
         48:b9:1d:54:7c:eb:c1:eb:43:0a:5f:76:2f:72:77:1c:19:7e:
         2f:5e:0f:95:9a:7d:c9:22:00:55:39:50:a8:df:93:ab:21:2d:
         8c:40:d3:ed:21:87:48:3c:10:a6:9e:69:3b:a6:4a:a3:3d:95:
         bd:87:e8:97:86:3a:4b:4a:c0:f9:8e:98:45:41:61:b1:16:de:
         c9:8b:ac:70:c2:d3:bd:91:11:6e:66:a4:a6:62:ee:f4:db:60:
         f7:05:71:09:d3:fc:cc:2b:e7:22:89:9a:c6:e5:93:6a:5e:54:
         97:cd:5b:13:fc:e7:7b:e6:44:d3:6a:36:06:c7:f5:29:53:52:
         c0:19:13:07:83:63:74:4d:e7:2a:43:8a:7d:59:c2:e0:45:30:
         4c:38:d5:ad:86:e7:67:7e:bf:9c:9d:52:d9:72:29:58:ac:26:
         d9:d6:a4:72:8a:82:47:fd:46:e3:3c:a7:d3:89:5d:cc:07:0e:
         54:99:b2:a1:55:74:05:ab:6b:86:50:98:48:1a:76:b0:cd:f2:
         92:f9:36:89:bd:47:b7:63:e7:44:d3:b3:b4:64:af:9a:1d:fc:
         59:87:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:38 2026 by rpki-client