Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
File:                     2b05d93a-3505-32a8-9778-a907ed424baa.roa (raw, json)
Hash identifier:          pShP9fpaIgvvVEnTGoW6VNFS90Hi4lemiL+NSik2bts=
Subject key identifier:   52:71:58:8E:49:F0:11:A4:1D:80:24:FF:FC:72:F4:69:C0:1A:2C:4A
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584EA2DFB869A2CACB7D4B100780
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        209.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b8:69:a2:ca:cb:7d:4b:10:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=f657bf21-0aa5-43cf-a7a0-79697aab8fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:29:1d:20:0e:7a:af:12:c2:c4:d6:42:83:
                    a7:c0:d2:63:36:74:2b:33:78:22:ba:04:84:1e:7e:
                    78:2e:c4:05:d9:08:84:a4:21:73:25:4c:20:f5:85:
                    41:c1:7d:a4:c1:60:2a:8f:e0:86:a2:4f:a5:c1:62:
                    2a:86:fd:56:23:98:60:c2:92:36:2b:86:1b:00:d1:
                    55:ba:90:27:fb:a1:59:8e:bd:ff:33:cd:13:83:56:
                    c9:12:26:e9:fe:87:7c:0b:b4:80:07:44:50:2a:8d:
                    38:e5:23:b5:b5:0c:ba:0c:f3:21:36:77:ec:85:69:
                    30:87:96:d6:df:eb:9e:81:7e:94:ad:09:13:64:f4:
                    15:ff:54:87:1a:d0:75:d7:ab:23:38:a5:39:2e:8f:
                    db:12:80:c2:af:0c:a4:b7:e8:97:1c:79:ec:5d:61:
                    ca:ac:b8:93:d9:7b:46:14:b4:02:d4:f5:c8:3c:84:
                    ed:71:eb:58:31:57:ce:7d:a4:4b:c3:57:15:0d:cf:
                    44:7f:ba:08:7d:7d:eb:a5:69:8f:85:27:35:47:32:
                    49:fd:7f:1b:d8:7f:0c:37:a1:02:be:92:11:a2:c9:
                    c6:dd:e3:ac:e0:fa:ce:22:f3:a2:02:d9:7b:a4:54:
                    bd:90:2a:52:a7:7f:3d:a7:98:d6:af:a9:b0:86:1d:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:71:58:8E:49:F0:11:A4:1D:80:24:FF:FC:72:F4:69:C0:1A:2C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2b05d93a-3505-32a8-9778-a907ed424baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:ea:1d:07:a6:48:3a:c7:d8:e9:bc:01:dc:9c:ee:e8:f8:
         96:83:6e:b0:cf:a6:16:f2:f3:06:ca:00:2d:53:1f:cf:6b:79:
         78:6a:29:e8:b1:cb:b8:43:5f:ee:c2:be:a8:00:47:2d:86:5e:
         2e:ac:0c:20:51:bf:3c:ba:54:99:62:06:31:70:05:2d:a0:01:
         32:3b:48:cd:ab:85:fc:9d:8f:f4:3e:aa:01:6e:c8:54:21:16:
         97:be:95:be:ce:93:c6:2f:2b:36:f4:d2:e9:f6:5e:42:1e:b3:
         4f:e4:8b:ca:a5:e1:83:fd:7d:d6:51:07:bc:09:25:18:d8:e8:
         b7:da:32:df:c5:80:fa:5c:3a:eb:2e:d1:24:64:ba:a7:20:65:
         96:0e:ac:8d:89:16:d7:7e:96:0d:77:03:d8:99:e9:12:14:01:
         3f:0e:73:fb:a5:0b:05:58:ec:f5:2c:f3:af:7f:ef:47:6d:4b:
         5b:a9:0a:3c:95:f2:7f:a3:d2:1b:8c:2e:7e:8f:9b:b1:af:17:
         5f:ca:31:a4:46:35:f5:84:d4:b1:46:2f:c9:b7:21:a3:ee:7d:
         6e:ac:ff:1b:29:d8:1e:60:fd:69:aa:01:8a:9b:30:9e:00:f8:
         36:58:5a:a8:4e:82:ae:6b:a5:b6:6a:66:74:05:75:5c:58:64:
         e8:05:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:01 2026 by rpki-client