Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa
File:                     d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa (raw, json)
Hash identifier:          qzmIq2U/yNQR6dmu2RYcZvc4A5JLFJewIOd7oqKn3i4=
Subject key identifier:   56:09:A0:FF:D1:B3:64:39:DF:98:70:3D:F8:9F:8F:D5:30:A5:27:BA
Certificate issuer:       /CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
Certificate serial:       010D0C9F4328584E2AD44D037394796E9DA4B860
Authority key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     401734
IP address blocks:        209.92.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4d:03:73:94:79:6e:9d:a4:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=f9064f45-0595-4667-b31b-b017987be84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:b8:ec:af:92:6d:9c:af:65:b7:3e:da:56:
                    e9:d7:2f:d7:3c:69:8e:bf:3b:68:05:d6:15:84:90:
                    38:9e:08:71:0c:8d:7c:a3:01:0c:7a:77:8e:66:81:
                    e1:50:4c:e2:c7:9a:14:5b:16:93:f5:59:31:bd:d3:
                    7a:e6:99:40:22:14:56:c9:51:ef:01:95:3a:ea:64:
                    ab:04:ee:d4:2b:92:17:80:05:a1:4b:58:23:ef:98:
                    dd:b5:6a:d1:07:a9:0d:af:c2:6b:f7:44:d9:e8:69:
                    2b:ee:93:2a:ec:36:1f:4f:1c:b8:24:eb:da:af:f8:
                    d1:52:d1:f2:e7:e9:9a:76:5f:99:b7:83:61:48:61:
                    e7:0f:c9:c3:af:9d:b4:de:84:d7:c2:3a:53:de:47:
                    de:f1:42:7a:01:5f:ce:0d:14:9a:55:76:17:98:6b:
                    9c:17:87:8a:ad:e2:68:0a:26:cf:39:25:f7:b3:f9:
                    10:0a:d0:51:ae:4d:2d:bc:49:3e:ce:33:b3:9f:58:
                    d7:09:8c:ce:4e:fe:01:d1:6a:fd:c9:74:0a:8c:d6:
                    a9:31:42:b7:cd:2b:19:3b:a7:8e:fa:ea:8e:c0:25:
                    cf:33:92:61:cc:22:a8:db:a3:82:71:19:e2:c2:dd:
                    7e:8a:26:46:e4:a9:f3:99:e4:05:b6:20:04:24:82:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:A0:FF:D1:B3:64:39:DF:98:70:3D:F8:9F:8F:D5:30:A5:27:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl

            X509v3 Authority Key Identifier:
                keyid:E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:2d:13:73:cd:df:16:69:54:0f:8a:fb:0d:07:b2:49:f3:
         e5:bf:0e:30:f6:0e:82:b9:7f:8c:99:85:f4:01:e4:43:01:93:
         57:48:fd:78:67:9a:12:e1:c0:30:5f:6a:03:a2:1a:56:01:6b:
         64:6b:d3:22:58:f0:5b:aa:58:e1:37:4b:a6:94:99:5e:f8:e5:
         4c:1d:29:1c:32:e8:eb:26:d4:a6:c0:37:fd:8d:01:12:e9:81:
         74:df:03:95:ac:7f:be:87:18:7c:da:0f:fb:fa:a8:4d:c7:2b:
         26:eb:6a:ec:03:19:bc:76:3c:41:b4:e6:91:56:d2:45:ee:c7:
         b5:80:64:8d:24:b0:80:fb:e0:a4:5f:ef:4f:01:df:2a:f9:5a:
         f0:67:d2:cf:77:f6:58:38:3d:55:f9:76:f1:0c:fe:f5:32:d8:
         ca:45:97:93:97:e4:1a:21:5b:57:19:11:98:a7:12:b6:69:bd:
         2f:f9:d0:f4:29:1d:dd:76:92:04:ac:c2:bf:a6:30:18:08:3c:
         7c:2d:4a:38:90:50:16:64:4c:fb:bc:82:40:1f:94:4a:02:5a:
         bb:d4:c8:65:a8:08:43:32:74:ba:3f:83:91:f4:c2:48:59:7a:
         8e:7a:4c:22:29:22:89:dd:38:c2:fd:37:9e:02:b2:f4:cf:20:
         5a:78:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:41:01 2026 by rpki-client