Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa
File:                     a9cd02b8-2365-3281-9012-ab50278bf591.roa (raw, json)
Hash identifier:          Mtl9WbRSjQAnoO0AZtoVBxIt13lN8bqn1yz/GFQjHF4=
Subject key identifier:   7C:28:E9:1B:4E:87:18:91:AE:83:6B:7A:D7:D0:7A:9F:87:0B:00:D9
Certificate issuer:       /CN=2059c963-068e-4fba-a7d6-639c3f36a91b
Certificate serial:       010D0C9F4328584EA2DFB858459D9FD6EECA4800
Authority key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        209.126.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b8:58:45:9d:9f:d6:ee:ca:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2059c963-068e-4fba-a7d6-639c3f36a91b
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=7c08f877-c669-4ff6-a45f-a590d264e771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:47:18:c9:b7:21:2d:e0:05:9c:b9:a5:e3:6d:
                    5e:8e:05:4f:72:02:e2:cc:51:3d:dc:1a:7a:8c:4e:
                    15:5d:c8:5b:19:90:69:80:fd:0f:f4:32:59:b4:bf:
                    0d:2b:92:f8:8d:ae:8b:22:f7:2e:a8:3b:1c:33:5e:
                    dc:3d:24:42:ad:8b:05:b6:c2:47:0f:9d:f5:56:7b:
                    6c:b7:75:1f:b3:30:49:0b:54:a4:e2:cf:0b:b9:23:
                    18:cd:fb:03:4e:87:7d:5f:77:88:4f:3c:bc:9f:98:
                    52:89:4b:35:07:74:60:8e:b1:cf:b0:97:fc:13:77:
                    fe:32:30:fc:77:1b:3d:92:67:e9:f8:3e:11:a1:6f:
                    21:1d:0b:af:85:f3:28:b3:89:5a:9d:22:a2:5c:09:
                    64:1e:b5:ee:70:44:99:d4:66:ab:84:9e:47:cd:62:
                    7c:45:b6:d4:09:a9:12:03:5b:7a:63:16:94:06:42:
                    71:39:51:d8:6d:83:4c:c3:50:6c:e0:e4:75:aa:0f:
                    9d:86:d4:94:bb:f1:de:05:64:b4:90:b0:ce:a8:dc:
                    f3:51:8b:07:84:8f:c5:bd:0b:04:a0:54:5c:50:02:
                    55:f2:2b:de:29:48:e2:d2:6b:d0:70:38:67:5d:8a:
                    aa:c3:0a:b2:30:e6:92:60:21:5f:31:9f:20:4d:0a:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:E9:1B:4E:87:18:91:AE:83:6B:7A:D7:D0:7A:9F:87:0B:00:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/a9cd02b8-2365-3281-9012-ab50278bf591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.crl

            X509v3 Authority Key Identifier:
                keyid:58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:22:20:1a:5e:ea:a0:99:da:8e:4a:6f:6e:6e:02:3f:2e:b8:
         b4:a4:da:e8:cc:b9:00:5b:cd:3e:ab:c0:51:ce:6b:89:73:72:
         60:b0:d3:bf:e2:1d:f4:e5:b6:93:d9:f9:65:88:eb:e1:0b:47:
         ab:d4:52:dc:c9:3e:df:50:4a:d3:d7:8e:ed:34:1e:3d:ae:14:
         4b:1d:b7:b3:0e:54:ab:16:be:dc:6d:4f:20:96:38:65:96:14:
         78:40:73:01:ac:90:07:c6:55:f0:f0:7c:7e:af:a1:d7:0a:12:
         e6:fa:79:13:18:43:70:36:f7:60:6b:a6:0e:d5:8d:a4:08:68:
         2e:28:06:e0:17:24:0c:61:e5:07:72:a8:1a:2c:7f:2f:65:24:
         43:49:8f:a0:ee:d5:f7:3d:e4:cf:2b:99:23:e5:82:58:39:75:
         be:e2:73:cb:ea:f6:3e:a5:47:e0:08:97:b8:18:dc:30:54:82:
         ad:84:a1:d1:6f:52:f8:67:f9:3d:b0:54:97:45:1a:33:60:23:
         64:6f:4a:7f:43:1e:aa:7f:e1:68:f3:68:3d:f6:79:85:2a:1c:
         ee:37:14:96:07:fb:0c:de:e1:a9:68:14:a0:bb:15:ce:95:f8:
         52:ad:b8:de:23:a6:ce:62:f5:64:60:ad:6f:db:4f:e6:58:1e:
         41:ff:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:16:21 2026 by rpki-client