Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa
File:                     58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (raw, json)
Hash identifier:          EO/95qPKdxlzninoiEszKhCwmh7nNha2Qkw5eLwivCA=
Subject key identifier:   06:AF:DC:50:AF:2E:7A:AE:08:CA:92:E4:24:97:01:3F:B4:7F:CB:F4
Certificate issuer:       /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
Certificate serial:       010D0C9F4328584DA81587E8512A719CB58BFE80
Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     271
IP address blocks:        199.9.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:87:e8:51:2a:71:9c:b5:8b:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=c155c8ea-14ac-4cfa-bb64-21e2d1ad8ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:c8:72:55:9a:71:43:39:03:0f:a6:0b:f0:
                    2e:c5:42:21:d4:c5:f5:e9:96:6c:4b:26:29:06:3f:
                    ec:4f:dd:9f:3b:b7:fb:2c:c8:2d:fd:7c:1e:ce:bf:
                    4d:fc:bb:fa:c0:27:0c:22:50:74:71:27:2d:8e:db:
                    f6:3f:e9:5b:67:cb:f6:1f:6e:02:76:4d:99:e5:f1:
                    37:c6:d5:d0:60:8a:f0:f2:07:ff:b2:c1:40:4e:c0:
                    58:10:7f:49:bf:33:75:0c:05:02:41:74:ee:65:c2:
                    43:4a:a7:57:42:81:6f:fa:98:d8:14:55:03:2b:e5:
                    36:68:91:7f:36:cb:45:f1:db:4a:8d:ef:d7:64:ab:
                    04:72:30:dd:89:bd:2e:d3:70:0d:b1:f9:0f:8d:f1:
                    03:fd:cc:b9:d2:43:58:b4:85:ad:89:43:cf:6e:4a:
                    f6:d4:c9:b4:14:b1:43:d6:38:39:45:18:32:40:23:
                    99:b2:92:fb:60:b7:d8:ee:8b:4a:81:90:68:4b:ca:
                    80:41:99:fc:f2:60:40:1d:ad:f4:40:53:ff:34:29:
                    63:70:0c:36:ee:d0:6e:e1:b2:ca:0b:66:0f:41:a8:
                    f8:ba:79:f6:8e:6b:42:63:6e:bb:67:05:0f:18:dc:
                    72:2d:b6:ef:df:40:a4:ca:a5:c1:5f:4d:a2:ad:32:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:DC:50:AF:2E:7A:AE:08:CA:92:E4:24:97:01:3F:B4:7F:CB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl

            X509v3 Authority Key Identifier:
                keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.9.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:fd:b2:4e:a9:36:5a:c9:cb:54:ea:e7:11:37:77:61:bf:
         30:0c:c8:bd:e1:f3:b0:b7:0c:03:43:63:cc:48:c5:18:a0:93:
         d8:45:93:3a:7c:31:ab:07:1c:bc:76:8e:df:6e:c4:14:87:ea:
         35:73:3e:c9:26:5b:19:99:b8:36:71:f3:f9:8a:f6:ff:14:7f:
         82:9b:53:ad:65:b3:5e:91:c7:65:2c:2f:49:7f:e7:02:6a:51:
         82:a6:43:2d:0a:ef:06:93:06:4a:cb:cc:27:36:d9:00:01:4b:
         45:e5:2e:23:55:31:81:14:c8:2c:85:aa:c8:28:9e:c4:71:1a:
         cf:94:0c:a0:10:dc:42:56:b3:6e:6c:f7:33:ca:43:36:1b:e5:
         23:f0:57:fa:4c:0a:1b:8b:89:0c:56:50:c2:ce:99:09:ab:d3:
         4a:b2:86:62:e4:7f:81:14:78:a4:cc:87:ca:54:47:62:94:e4:
         87:0b:ff:bd:a7:ad:19:54:d2:09:29:fc:e7:c7:eb:22:cf:f0:
         d6:4f:e2:38:6e:99:bc:85:6b:c7:fe:c5:96:49:c2:6e:3a:40:
         0f:ae:de:23:6c:8d:5a:fd:e5:69:e0:7c:48:88:12:bd:ae:43:
         4e:f9:1a:70:9e:96:68:82:37:14:3f:26:79:8e:05:ad:d6:b7:
         55:98:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:39:37 2026 by rpki-client