Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa
File:                     d97fe973-812f-3261-88cc-3d44e14e1f31.roa (raw, json)
Hash identifier:          uPNW2Xt0GAmF3WwLr0vqaxWB20+mPeSBDN/aa55zbB8=
Subject key identifier:   3F:EE:C9:94:EF:C6:A0:AB:A3:F7:87:8E:B3:26:E0:F7:04:25:EA:33
Certificate issuer:       /CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca
Certificate serial:       010D0C9F4328584DE84B5CB4C09A74FA17038480
Authority key identifier: CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     62581
IP address blocks:        148.59.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5c:b4:c0:9a:74:fa:17:03:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289876d1-6f64-46d8-b9fd-5cffbc9848ca
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=0b0c7d5f-8910-4a9a-b13f-a29c654f5500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:ab:7c:64:e8:c9:b6:c3:26:d5:19:0c:65:
                    13:0b:67:c5:c8:73:ad:be:fc:9f:aa:11:8c:e3:10:
                    62:70:79:52:f1:11:e2:96:d1:c4:9a:d4:cd:17:4e:
                    f9:dc:ee:c6:74:91:f6:1b:8b:14:79:8d:ca:7f:fe:
                    92:15:6b:3a:47:33:00:a9:5f:de:0b:b0:32:de:73:
                    30:78:6e:92:9c:85:36:c5:8c:b4:8c:d8:c9:69:0f:
                    92:f2:9f:8b:4c:a5:9d:b5:82:45:b4:68:20:af:f5:
                    a2:1f:ba:f5:e1:f5:a8:c6:f5:9f:4e:b9:73:45:4d:
                    cd:3a:5e:e8:6b:c1:cd:89:f4:ad:92:b7:af:8c:f2:
                    1b:bc:2a:8f:8c:77:5c:c8:0c:73:9d:35:6a:9e:3a:
                    df:c9:d5:b1:d3:59:c9:63:13:cd:de:18:92:ee:08:
                    45:d1:07:59:16:cb:96:74:c6:55:1c:13:e9:0c:e8:
                    80:4e:1f:d7:5d:42:5f:52:8c:2b:27:0d:15:12:6a:
                    05:86:f9:ab:0c:9b:26:0c:60:14:e4:f1:60:3e:f3:
                    0b:a7:0b:58:ac:c9:96:22:fb:f6:f9:d2:5d:29:0c:
                    55:98:7c:b3:2b:72:a0:1d:f9:a4:07:fb:9c:39:2c:
                    27:67:83:f5:94:53:89:cd:67:47:e2:cb:a8:3b:a9:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EE:C9:94:EF:C6:A0:AB:A3:F7:87:8E:B3:26:E0:F7:04:25:EA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/d97fe973-812f-3261-88cc-3d44e14e1f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca/289876d1-6f64-46d8-b9fd-5cffbc9848ca.crl

            X509v3 Authority Key Identifier:
                keyid:CF:7E:59:2E:4B:EE:CC:3B:2B:E7:EA:FE:93:D8:2C:4A:09:55:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/289876d1-6f64-46d8-b9fd-5cffbc9848ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:57:bd:ff:f1:6a:44:5b:60:5b:e7:52:e0:a8:e9:90:e9:5b:
         d6:63:24:f1:43:46:85:81:75:2a:ba:4d:3e:62:f8:88:fd:94:
         14:e9:cf:e7:29:68:4d:35:57:24:77:c3:1f:29:fc:e9:2d:24:
         70:f7:37:09:15:45:47:9f:88:03:ca:2b:28:df:29:31:85:42:
         4c:8a:f2:52:c4:01:d0:61:41:f4:38:2d:72:80:cf:84:67:41:
         84:ea:81:39:0d:f4:12:c5:be:91:22:2b:7c:c5:9a:52:67:23:
         51:71:15:28:f0:9c:9f:fc:3f:82:13:0a:65:a5:e7:b9:33:85:
         c9:85:73:d1:f3:74:79:12:e0:ee:11:ca:a1:bd:e8:4b:45:ac:
         19:e0:81:68:d4:c4:7b:0a:1c:d2:b7:7e:41:68:6d:6c:7f:c6:
         69:3a:09:7f:0d:6e:fc:c8:71:54:f1:59:63:c5:2d:2a:5d:0c:
         10:9c:7d:8b:be:8b:19:a9:2e:62:7f:27:e9:a0:a9:df:e5:ad:
         07:45:f6:54:8b:b3:25:39:42:27:f4:08:45:18:40:1b:8c:d8:
         6c:0b:5e:1a:b2:5b:7c:9c:51:e9:7c:a2:0f:98:aa:6a:ee:e8:
         bc:b6:02:03:e5:6c:88:3a:f0:21:69:c0:4d:85:db:24:0d:f1:
         db:27:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:06 2026 by rpki-client