Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
File:                     ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa (raw, json)
Hash identifier:          /+/5GUY+ahK+A0DA41g1cMFS2ijqGuTY8zCpUhsZcQA=
Subject key identifier:   27:C3:15:38:B3:AF:A3:93:08:FE:06:A2:ED:5F:DD:F8:D9:8E:04:B2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5E62DE140483327E94677580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     64267
IP address blocks:        209.59.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:de:14:04:83:32:7e:94:67:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=825d4895-08dc-4b71-a90b-d8db113baf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4d:06:46:fa:a4:94:c1:83:ca:b8:d3:3c:93:
                    9f:57:86:67:4f:9a:ff:64:f7:6c:bd:7a:7d:37:e0:
                    01:e1:fd:99:d1:b4:97:47:20:da:ea:cf:64:46:fd:
                    75:04:30:d3:c1:4f:e9:18:62:93:a0:89:68:e3:e7:
                    cd:40:b0:d5:d3:46:de:6b:ab:83:e2:05:2a:64:20:
                    73:c9:15:49:3b:5d:0d:45:ec:d6:b2:25:db:9a:e2:
                    c6:88:ee:04:d0:8a:73:e0:a0:e1:72:32:9e:af:3c:
                    d2:75:79:b6:8e:b5:35:c5:6c:70:37:8e:c7:46:ed:
                    e6:10:5f:0c:a5:30:d2:ea:30:85:33:86:9c:8e:dc:
                    df:e1:9c:a7:9a:c3:ee:b7:5f:8b:50:5b:f1:a3:46:
                    35:34:6a:15:94:a5:c4:ef:c4:b6:75:03:59:05:79:
                    93:38:58:fd:75:0d:54:94:1e:d5:d1:bf:7e:ab:02:
                    dd:2f:38:a9:c0:b2:3c:60:74:b9:ac:ee:fd:e2:ea:
                    fd:94:50:ae:2e:9e:ac:29:0d:81:bb:a6:f2:5a:f3:
                    42:3a:54:d2:b0:22:f0:ef:a7:0d:9f:7c:4c:a9:ea:
                    52:ea:87:03:2d:d9:e7:c8:31:a1:79:5b:98:ef:43:
                    b2:97:df:cc:f0:81:d2:17:00:28:38:6e:36:4d:2e:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:15:38:B3:AF:A3:93:08:FE:06:A2:ED:5F:DD:F8:D9:8E:04:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ad5ee85c-bcf7-3477-ae1b-b6d6edaa9325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:3b:9b:56:00:71:a5:df:f3:5a:77:c7:5e:41:db:b0:5d:65:
         26:cf:84:7c:71:79:b4:6b:a3:9b:20:01:4c:54:e6:b3:22:3f:
         87:6e:ca:cb:9c:81:ac:9f:be:bf:5c:ab:e9:e7:de:48:9e:3a:
         9a:28:66:06:12:33:be:d2:6b:74:e4:16:d4:d0:ca:04:82:59:
         dd:98:7f:08:f7:61:74:0e:f6:fa:51:a6:03:1a:8b:84:5e:ce:
         f2:74:50:24:6c:48:78:04:d3:79:04:94:62:0b:7d:93:05:fa:
         c3:98:a4:d5:c7:9a:46:dc:77:08:13:9d:2f:7d:4a:26:97:57:
         7f:4a:60:83:0a:51:8d:e7:f3:93:c9:28:5b:d3:a6:8f:ac:f2:
         02:11:04:7c:9b:4e:b7:d1:c7:09:84:ba:16:92:ca:d4:64:3c:
         4e:03:13:d6:15:81:65:c7:c3:0c:07:c5:d5:b8:ac:68:6a:51:
         71:a3:66:2c:34:9d:b6:b2:03:e7:07:74:5c:97:e3:b3:05:2b:
         a0:68:02:dc:66:59:35:c4:da:19:4e:90:4c:f7:70:05:fd:16:
         c6:48:ac:b0:5f:c4:94:f9:40:e0:a3:6f:a9:80:44:89:b7:eb:
         8a:90:9b:60:4d:63:bd:cf:50:fd:b9:bf:66:8b:71:7f:e8:bd:
         d9:e3:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:39:35 2026 by rpki-client