Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa
File:                     d438aedb-0354-3ba4-8499-42d292caee71.roa (raw, json)
Hash identifier:          B3cgcgXyfFrVHKYaSacwZjtTUMnQaylQr0RGZjvF9KI=
Subject key identifier:   F7:23:A6:56:35:C6:8A:84:FB:F0:1C:7E:7B:E1:5C:A5:07:98:BA:D0
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F4328584CDDCCF5F27D789B2594A27E80
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     396982
IP address blocks:        69.87.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f5:f2:7d:78:9b:25:94:a2:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=bad5740a-6846-4678-b309-e156b174d06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:9d:ef:37:60:5b:29:c6:14:00:10:89:82:
                    7e:eb:bf:44:89:a1:98:0b:79:30:30:50:ca:82:c6:
                    cc:8d:51:59:6a:68:27:01:42:f6:2e:5f:ad:e0:f2:
                    47:1b:8b:09:33:77:c2:fa:9f:03:67:75:cb:6e:df:
                    b1:13:6d:2e:a1:2f:b6:20:81:dd:fb:57:82:21:46:
                    b3:9e:ed:08:73:c7:8b:c7:6c:fc:74:9b:49:81:ba:
                    c2:74:4b:67:a4:4a:2c:fb:fa:19:1d:84:8a:f1:28:
                    cb:f3:ba:93:7f:43:f0:72:fd:63:4d:23:76:e4:92:
                    c1:94:dc:9b:06:c3:db:0b:e9:b2:af:7d:33:f3:1b:
                    9a:53:74:f7:d1:5c:86:45:69:ca:c5:f3:e0:77:34:
                    5a:70:ac:5c:0f:e7:69:cd:57:8a:cc:26:c0:65:d9:
                    1b:db:eb:44:ab:91:b6:4a:23:14:64:75:77:bb:6e:
                    ff:eb:09:07:18:c5:b5:0a:7b:0b:35:89:79:9b:9d:
                    7b:40:72:e8:34:6a:91:8c:9a:7b:c3:86:36:ae:9f:
                    c1:0d:16:8c:a6:9f:ad:c1:04:15:11:ac:a5:32:be:
                    5c:d7:99:38:49:41:31:5f:7c:bf:bc:97:9d:ff:9a:
                    9f:bc:c0:6f:49:95:42:c5:23:f4:44:dc:4d:45:ee:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:A6:56:35:C6:8A:84:FB:F0:1C:7E:7B:E1:5C:A5:07:98:BA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:57:da:f7:18:28:21:9e:45:1f:d0:49:6a:5f:ba:87:00:9c:
         6b:6f:87:09:fc:7c:f8:93:eb:a5:2f:1b:31:91:f1:01:41:63:
         75:12:c4:e9:7c:e4:93:10:3c:9f:e7:fe:03:1a:02:2f:01:95:
         91:1d:87:9f:de:5c:2e:33:3c:a8:bd:1a:38:99:e3:6b:b9:53:
         0e:26:73:bf:1e:36:9e:fd:d6:24:cc:17:4c:fb:b7:a3:1c:86:
         0f:3f:a1:b8:9d:d8:a4:d5:eb:5a:9b:a0:21:a4:78:ac:7b:75:
         88:3a:d6:7b:9b:9a:fc:3a:2b:40:08:2d:ef:b0:5a:41:30:2c:
         2c:53:33:3d:eb:03:c6:c4:f4:47:7f:ac:0f:e6:b3:c4:d9:71:
         c0:5b:9f:52:18:fe:64:f9:1d:bb:24:db:b5:29:62:d2:67:54:
         4b:a5:1f:a9:0b:11:04:73:7f:d7:18:d1:fc:bd:e5:9b:61:ff:
         52:d1:c6:16:dc:2d:65:a8:98:2f:5f:49:27:b5:3d:ff:5d:6d:
         7c:98:d7:df:05:d0:6f:b2:fd:0d:d6:f9:1e:d5:4d:82:27:51:
         1c:3c:c5:d1:70:d5:43:36:a6:34:04:b7:0f:be:81:46:a8:ef:
         af:ff:19:11:d2:5e:29:ee:c6:57:14:44:91:8d:69:6f:9c:24:
         f2:66:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:55 2026 by rpki-client