Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
File:                     059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa (raw, json)
Hash identifier:          97AMIxC9/W/5QFyS6NpyUBNrbH0BdIFLZ5UG/Ya8D/k=
Subject key identifier:   72:1C:CF:6E:32:B7:38:C5:C3:58:82:A8:B9:B4:B8:4A:78:9F:C6:F5
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584EA793B9289820FED9ED21B300
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26831
IP address blocks:        209.124.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:b9:28:98:20:fe:d9:ed:21:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0fe1a455-f6ea-48fb-846a-d731d89b6db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:f4:d4:ff:1a:a4:fd:7d:9c:bd:aa:ff:11:
                    10:c7:03:27:68:d4:77:4f:26:2a:08:df:0f:a9:56:
                    30:5d:83:36:3e:02:ca:95:c3:ca:44:4e:58:1e:ad:
                    cb:62:43:56:f9:87:b3:68:66:ce:da:15:4b:97:d2:
                    2e:21:71:86:bb:a1:cb:63:73:e3:66:93:87:aa:2b:
                    6b:e1:1f:d2:48:3c:ed:ac:d2:12:d6:53:db:d6:cf:
                    92:c8:a9:57:2f:c3:6d:36:4a:a0:2a:d3:40:eb:6e:
                    30:61:bc:23:e0:6b:fd:62:f7:3c:5b:d7:8b:cf:88:
                    65:6b:9a:42:d8:09:17:af:3d:31:04:8e:64:ce:32:
                    73:dc:d2:c5:da:f1:0d:c5:a2:07:85:1a:c8:81:4d:
                    20:31:26:64:57:b3:f2:ba:88:1e:41:c1:15:51:42:
                    c6:ba:9c:ac:12:b5:78:9f:9a:22:e8:15:7a:d4:3e:
                    85:17:33:16:ec:2c:91:f5:bf:ba:ba:bc:c1:fb:93:
                    4b:5a:c6:c5:a2:9e:2d:05:34:69:5c:89:71:e4:fc:
                    91:90:f3:28:c7:67:5d:02:30:b0:59:fc:7a:f0:2e:
                    73:3a:6c:0c:bb:62:e0:65:67:8c:b1:40:b4:69:d1:
                    a1:af:01:12:59:18:d8:c1:32:b7:7b:a8:f6:c0:23:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:CF:6E:32:B7:38:C5:C3:58:82:A8:B9:B4:B8:4A:78:9F:C6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/059ce6cb-6a5b-3225-905b-4092dbeac2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:a7:6d:4c:c2:cf:05:15:c2:ea:33:af:d6:1c:59:29:f3:
         77:aa:16:8d:49:f9:b2:02:24:5f:44:47:a2:ce:3c:4c:20:24:
         ee:d7:52:8b:84:de:bb:3c:fe:63:82:12:9e:a4:a9:98:05:4a:
         99:08:ed:8b:d3:45:85:2a:4e:fd:f3:c0:f7:43:57:8c:3b:d9:
         6f:10:93:c3:89:64:6b:60:32:33:4a:dd:53:77:d2:af:cd:78:
         44:be:0a:f3:2c:46:db:a8:d5:39:f3:e8:d0:6a:a2:20:f2:88:
         27:5c:95:03:36:92:66:21:bf:b8:85:9b:2d:2f:a4:76:41:a1:
         79:80:f7:cc:a8:24:b5:68:28:43:51:39:32:7d:be:85:04:fa:
         4b:b7:0f:15:1f:72:c5:12:31:e3:ba:d3:4a:df:cf:a3:7d:bb:
         50:b5:30:bb:dc:f5:b1:f3:db:d4:dc:c8:61:7f:0e:04:6d:52:
         37:70:e1:61:2d:71:18:d3:2d:54:97:15:d0:df:bf:6e:63:9c:
         b4:4b:52:28:90:67:e9:40:cd:9e:c1:8a:2c:85:af:94:9d:59:
         62:d5:a6:39:69:d9:0d:6a:f7:b2:61:2d:38:8d:12:de:ad:dc:
         84:35:ea:cf:c4:f0:f8:94:f0:cc:24:44:06:92:92:00:3c:6a:
         c2:22:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:53 2026 by rpki-client