Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa
File:                     4a2880a2-399c-391a-b0ff-17a565b54dce.roa (raw, json)
Hash identifier:          PfeUqQVJBzMM/53E6Rn9NCGYpCVESExzu/Ngy1ibuco=
Subject key identifier:   1F:02:49:EA:3F:BF:77:91:C5:E3:ED:E1:3C:2D:69:91:2D:87:7F:AD
Certificate issuer:       /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
Certificate serial:       010D0C9F4328584E15E46BBA44358D662AD01A80
Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     26554
IP address blocks:        67.59.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6b:ba:44:35:8d:66:2a:d0:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=8117a6e2-473e-4e66-9df7-4462c3a3e941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:84:a5:df:af:81:08:1a:0c:69:01:a4:7a:
                    82:e8:9e:45:a0:ed:91:01:37:6e:ad:a6:df:c4:af:
                    7d:89:81:81:94:80:d4:58:98:cc:c4:0a:69:ac:c4:
                    83:0b:e1:b1:14:8b:ba:1c:f9:b1:65:a4:19:6e:7f:
                    60:ea:fb:c2:3e:f1:fb:d2:dc:6d:47:ab:e8:e6:7e:
                    28:ee:bd:8f:92:1e:78:ee:44:c9:c0:00:56:86:65:
                    68:8f:ac:26:bb:e3:cf:23:59:4d:82:38:33:47:91:
                    a5:c8:8d:ce:6e:35:d9:5d:c0:3d:76:15:64:ac:1e:
                    86:bd:77:36:91:ca:aa:76:8b:f7:48:61:59:d2:1c:
                    f6:36:85:55:1a:b1:f0:3c:0e:1b:f5:ce:a2:65:0f:
                    d5:f9:f1:33:c2:07:1a:93:5c:cf:9e:4a:6d:58:7c:
                    23:1f:13:7b:55:9c:0f:25:b6:28:1a:4a:42:c6:9b:
                    0a:76:10:ed:05:8a:6e:d8:87:5a:24:e0:26:42:05:
                    0b:04:1b:f5:9a:76:66:3a:f2:e0:cd:2f:78:58:48:
                    d9:54:8a:a8:cb:6a:51:ce:15:62:81:63:93:00:dd:
                    87:96:62:1a:e3:6d:c7:1b:4e:c9:85:86:b9:30:20:
                    14:6d:7c:86:42:48:64:5b:60:bf:02:08:75:be:64:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:49:EA:3F:BF:77:91:C5:E3:ED:E1:3C:2D:69:91:2D:87:7F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/4a2880a2-399c-391a-b0ff-17a565b54dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl

            X509v3 Authority Key Identifier:
                keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:12:6e:2e:d5:ea:0a:9b:92:f4:64:ae:eb:66:a6:be:26:2c:
         f4:8e:50:a0:16:6e:17:7b:c6:e6:ea:38:a4:75:fc:6d:5c:55:
         75:c7:dc:43:74:46:48:1f:a5:91:d8:80:54:7d:b7:95:c9:87:
         66:1e:50:b0:7a:df:5c:b3:5b:c7:51:d5:f1:43:1e:d2:3e:92:
         6a:8e:1f:49:78:f2:a6:c6:c4:21:40:b5:02:17:ea:3e:5b:19:
         f9:53:58:e0:cf:10:2d:a6:54:9f:22:38:c6:e6:4c:25:3f:66:
         69:3f:cf:73:0f:7a:9c:6c:56:cc:ab:e4:34:6a:53:59:aa:85:
         39:13:ef:49:2a:b2:95:81:4d:42:a1:99:65:5d:33:92:ef:d2:
         7b:cc:2b:92:20:17:28:ce:c5:99:e5:b5:d8:66:9a:fb:3d:c6:
         88:73:c7:ad:db:55:41:d7:e0:12:52:10:ee:95:6b:f5:64:3b:
         09:7d:c6:a6:b0:d6:ca:a7:75:cf:b3:ea:a3:26:9d:38:64:71:
         46:41:72:e4:7c:06:e8:bb:7a:88:b9:25:50:1b:04:5a:1d:1a:
         e5:a7:e3:69:07:c4:40:95:a1:09:c4:b3:06:79:82:21:52:19:
         45:20:32:63:b4:ec:90:5d:2c:aa:4d:29:9b:5a:9a:3c:c7:57:
         14:70:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:40 2026 by rpki-client