Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
File:                     4a4129fa-4096-36d7-890e-24309443f711.roa (raw, json)
Hash identifier:          MLN/9DFpg1pSh9bnj4YmeSmQAIPdDUmmQKszZv+OAOg=
Subject key identifier:   98:CE:EC:2B:3E:B1:8A:2A:D2:B5:E2:5B:2E:0D:C1:A1:22:62:35:64
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584D52435548A466C471AD1B1260
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7794
IP address blocks:        206.131.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:55:48:a4:66:c4:71:ad:1b:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=0ba94522-1621-49c0-8a27-30feb7a021b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:9a:b5:6b:0e:da:1e:8d:6e:c4:ca:5a:ea:
                    39:ed:d3:b5:23:bc:44:82:c3:41:73:9a:ff:13:1f:
                    bf:15:5a:58:a1:dd:4f:c9:62:dc:d6:61:0c:b9:18:
                    ee:c8:3c:33:ea:53:85:c0:8a:20:71:89:a8:1b:b3:
                    6f:66:15:68:88:ba:39:49:26:59:6a:f5:9e:82:35:
                    ef:89:d1:27:29:55:70:3b:bb:68:15:04:77:67:73:
                    b6:f9:07:18:a5:3d:cc:cd:59:56:77:ee:24:52:85:
                    f6:f9:f9:8e:58:e9:0f:2a:0d:a3:4d:5c:78:69:a7:
                    9b:2c:93:54:0c:1b:0b:ee:24:2c:69:1e:c9:a3:55:
                    2a:3b:8f:55:09:f2:f2:c9:28:20:2d:28:15:85:e6:
                    cf:e0:fe:54:07:56:71:bc:dd:3b:76:bc:32:b4:ac:
                    41:f9:86:a7:7c:c1:d4:30:ab:80:bf:0f:89:1c:2f:
                    73:21:75:fc:01:6a:ca:4f:0d:ff:9b:28:59:81:01:
                    23:ad:77:41:e9:37:13:6f:50:86:e7:17:f7:44:1b:
                    c5:5e:6a:58:28:ad:b3:0c:8f:2a:f1:d1:7f:ef:4d:
                    d1:2b:2c:48:f0:ce:ed:0c:7f:a7:7e:5b:cb:99:ca:
                    78:d6:fc:b4:7e:78:06:17:ae:80:08:93:2c:8b:15:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CE:EC:2B:3E:B1:8A:2A:D2:B5:E2:5B:2E:0D:C1:A1:22:62:35:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/4a4129fa-4096-36d7-890e-24309443f711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.131.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:10:ec:a8:03:3d:88:62:8d:5b:14:10:16:f5:2f:1a:69:6b:
         3f:f5:c3:19:7c:fb:74:2c:82:e8:c8:00:a9:0f:33:c3:f4:ac:
         d7:22:9b:74:94:84:8d:b2:63:9f:cc:a6:aa:f8:80:f9:86:1b:
         69:8f:a3:c3:91:95:6c:f3:9b:cb:af:c0:11:c1:f1:09:dd:a3:
         0e:22:27:00:02:3b:a0:03:93:f1:24:3f:07:45:40:44:e3:d2:
         ca:bf:86:00:5d:c3:e6:86:f0:47:8a:72:70:9a:ee:b2:23:65:
         3f:d7:fe:9b:b4:02:35:d7:7f:ac:92:9c:e3:5e:b7:e5:06:e5:
         63:dc:da:d0:72:90:50:a6:1d:9c:9c:79:af:75:3b:63:ba:71:
         2c:69:a1:9a:12:e2:79:b3:f5:61:35:5d:08:17:27:cd:8f:4f:
         91:99:16:7e:50:ae:06:32:9f:91:43:de:3e:21:7a:27:12:2c:
         fa:53:ba:d4:b7:e2:1c:cd:09:47:ea:bb:9d:d5:27:8e:e1:90:
         8a:cc:1d:d6:43:ef:78:ee:c3:e5:dc:55:d4:45:4c:b9:c9:fb:
         45:72:8c:47:aa:79:6e:7c:4e:b2:e0:4d:21:94:f6:41:be:7e:
         bc:bd:5d:d0:e8:ac:e1:44:fe:91:5c:72:9a:c6:89:7f:40:0e:
         94:dd:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:56 2026 by rpki-client