Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/59280dbd-d1c1-34a0-8a5f-155da870dfb3.roa
File:                     59280dbd-d1c1-34a0-8a5f-155da870dfb3.roa (raw, json)
Hash identifier:          Pgg17KbtY/1XwZk3PvL3wSlbJfAaJeBBYdsZFBHDKnc=
Subject key identifier:   8C:9E:B2:D8:47:7B:83:4B:5F:8E:52:42:D0:45:69:C0:0A:C6:58:72
Certificate issuer:       /CN=aed01dad-662c-4720-aaa5-ea3d024bad07
Certificate serial:       010D0C9F4328584F8F3DBC529C94BDCBF8FD4000
Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/59280dbd-d1c1-34a0-8a5f-155da870dfb3.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     834
IP address blocks:        207.174.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:bc:52:9c:94:bd:cb:f8:fd:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=a287aa78-543a-43ea-86da-c46565dfa8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:e3:50:9d:99:3b:06:7f:50:54:31:4f:6a:
                    1a:82:2b:82:ec:78:ec:26:e1:3d:a1:3c:03:91:c8:
                    3d:7c:21:0e:9f:23:c7:12:db:63:cd:4c:62:8f:2b:
                    5f:35:a2:e5:9c:a4:40:54:bf:8e:e8:10:8c:35:9f:
                    70:6c:23:e5:84:73:3a:7b:69:ef:43:26:56:e1:a3:
                    e0:26:25:2b:d0:1c:2e:bf:ec:dc:a4:ef:bc:8f:09:
                    b9:34:8e:a5:1d:23:ae:cb:d0:87:13:10:cb:e9:dd:
                    22:fe:9f:4e:90:4a:50:84:dd:a7:f2:ac:c2:38:78:
                    b7:bb:62:8a:00:e7:5c:80:82:6c:21:23:11:50:26:
                    e0:b4:91:24:be:f5:61:09:34:30:b2:de:35:fc:e3:
                    84:32:18:01:70:8b:23:3c:2f:d0:89:63:c4:54:ad:
                    44:55:39:6e:78:a9:93:ab:3b:3a:8b:78:1b:45:1f:
                    60:ac:71:6e:76:5f:3d:ce:18:46:b2:60:84:9b:69:
                    50:fa:fd:0e:f4:2c:30:d7:42:d1:86:cc:d8:f3:b7:
                    eb:9d:85:4f:d9:65:4c:3b:2e:f3:da:eb:48:5d:26:
                    10:73:53:74:3e:ca:3f:85:63:04:4d:69:03:b1:cd:
                    73:93:64:97:0e:df:d1:e8:bf:de:5e:cf:7a:8d:c4:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:B2:D8:47:7B:83:4B:5F:8E:52:42:D0:45:69:C0:0A:C6:58:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/59280dbd-d1c1-34a0-8a5f-155da870dfb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl

            X509v3 Authority Key Identifier:
                keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d4:66:2c:2b:6e:42:70:d7:1e:9b:39:c9:2c:ad:d3:e9:9f:
         ef:35:c8:90:bd:2d:bb:e6:ce:72:ea:18:d3:06:28:c2:81:6f:
         c8:e9:0c:2c:99:4a:b7:d9:0c:cc:7e:ac:3b:fd:90:bd:db:ac:
         2a:46:7f:7a:b3:65:75:2b:1e:09:2b:b0:e3:db:51:d2:84:3e:
         9f:8b:7c:cb:f4:5f:3c:08:94:92:0a:13:7a:66:99:48:45:a1:
         dd:ee:05:5c:17:52:a6:02:bd:76:0b:af:93:18:55:24:36:54:
         2b:17:20:00:58:c7:f4:f1:b2:89:4d:af:3b:55:47:8c:b3:4f:
         48:3d:95:77:c3:20:03:58:38:be:e8:3f:2e:55:72:41:ae:26:
         2c:9c:ae:b1:e1:3b:fa:d5:0b:fe:8c:aa:ed:47:af:ec:65:88:
         91:71:bc:70:0c:22:98:25:be:60:7e:e8:5a:02:88:53:37:89:
         a4:9c:6a:16:d7:2b:ba:f1:5c:89:26:0d:86:d8:7e:2a:ba:8f:
         be:39:5d:c9:25:35:7c:55:81:e7:02:8e:d1:44:d2:58:24:43:
         fb:6c:35:4a:8d:6d:44:ef:d4:6a:0a:df:c8:6f:cc:2c:da:64:
         27:3c:39:13:31:83:6b:34:ed:b0:8a:71:6a:e5:0a:49:8d:07:
         1d:95:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:25 2026 by rpki-client