Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa
File:                     c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa (raw, json)
Hash identifier:          yktSebF1sdcKxnA35HnthPEsiLOb/8UDT5Y+qRFb1cc=
Subject key identifier:   2A:05:6E:71:14:03:15:E9:83:13:BF:AD:84:8A:FB:60:97:94:AB:E9
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584DFC69276CDA176907A77E29E8
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa
Signing time:             Thu 28 May 2026 17:57:09 +0000
ROA not before:           Thu 28 May 2026 17:57:09 +0000
ROA not after:            Wed 26 Aug 2026 17:57:09 +0000
asID:                     209341
IP address blocks:        209.124.68.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:69:27:6c:da:17:69:07:a7:7e:29:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 28 17:57:09 2026 GMT
            Not After : Aug 26 17:57:09 2026 GMT
        Subject: CN=3b5dad1d-9d4b-4e9f-9f2d-77853733d8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:b2:f5:2b:48:ff:c6:39:a4:c2:5c:b3:14:
                    be:37:9e:9b:2e:f9:8f:c6:81:fe:e2:8a:a4:2e:8b:
                    d0:ef:6c:2d:97:ea:c5:d8:8b:65:12:87:00:e4:f9:
                    52:91:7e:85:4f:e2:b0:44:a4:c1:df:e3:5e:de:d9:
                    0f:f7:e8:ab:80:58:f9:11:a5:42:5c:05:75:5e:a7:
                    e6:5c:61:29:0b:cc:a5:9c:23:01:73:43:e4:7d:ed:
                    39:3f:46:03:db:68:7d:bf:3e:5f:e3:d8:80:1b:b2:
                    da:cc:a5:8f:34:e8:41:7d:38:de:e3:d3:18:3b:2b:
                    30:e6:78:db:d7:b0:c6:cf:db:3b:27:1b:68:8c:a8:
                    00:b2:1d:52:84:5d:34:0e:3e:01:7b:7f:f5:3d:c8:
                    10:d8:f5:82:f4:4f:13:3b:f3:1a:10:10:00:4d:5f:
                    ee:64:6d:57:c1:76:41:fc:0f:9c:64:8e:a6:ad:28:
                    9d:75:70:c3:cb:7e:80:ce:c0:26:ad:15:22:6c:ee:
                    f2:38:14:1f:c8:89:56:41:cb:56:96:7f:f9:50:ca:
                    8c:5a:ea:dd:74:60:ad:93:c0:58:78:c5:82:2a:0a:
                    86:03:45:1a:98:48:5c:af:c8:cb:d7:5c:de:a8:a6:
                    d8:8e:95:34:20:5b:b6:95:13:18:cd:bd:23:08:4f:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:6E:71:14:03:15:E9:83:13:BF:AD:84:8A:FB:60:97:94:AB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:98:15:2d:eb:9d:8e:33:f7:6c:9c:c3:a8:21:fc:6e:20:
         15:31:b1:e5:e4:dd:9d:c0:87:ab:07:74:55:83:79:8a:19:34:
         97:bf:48:64:d0:0d:5e:19:ad:30:1c:6d:79:9f:f1:f1:c7:7b:
         b2:67:f6:d1:ca:07:eb:81:4c:52:98:22:73:a3:c8:e6:7a:f1:
         fc:12:20:6d:39:a9:7d:d4:33:ec:75:e1:3f:cc:e8:aa:0c:f2:
         fe:98:54:f3:a2:af:27:d6:a9:9a:15:a4:35:08:69:2b:68:8b:
         47:13:32:06:ff:b9:81:e4:a1:ad:67:c5:49:85:22:80:3a:52:
         fc:ba:21:04:3b:85:71:0c:de:a7:d1:40:11:00:d8:32:e0:24:
         be:31:ed:14:92:bd:2d:2d:02:4b:f5:fc:bc:f7:b4:8f:07:28:
         54:5b:27:e3:fa:97:94:1d:d6:2a:9a:48:b7:01:68:4d:f5:f3:
         d4:6e:e8:4c:ca:7b:75:76:b5:1e:15:ab:ee:4e:9d:b5:91:60:
         18:0d:76:79:ac:01:f8:d6:9f:f9:10:05:9f:1c:81:09:31:02:
         cb:c2:0f:91:18:f2:cb:2d:6d:95:8d:bc:d8:6e:58:88:68:bc:
         8c:55:28:2a:49:72:16:21:48:1c:b4:d7:1b:9e:03:a9:3b:82:
         5e:7d:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:01:08 2026 by rpki-client