Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
File:                     596c1584-3a09-38b4-9548-b028b4455bfe.roa (raw, json)
Hash identifier:          gcsK/fPrup+piAk2RYqiqmbHin47HtrfihpNmEj6cQw=
Subject key identifier:   0C:BD:56:B1:C8:63:F1:E9:5D:F8:70:21:44:3A:98:9A:38:D8:0E:6C
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F4328584D746FD90917BDE13C16207CE0
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     5065
IP address blocks:        208.99.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d9:09:17:bd:e1:3c:16:20:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=413018c2-17f2-481b-b8b1-ba8bc051288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3c:24:27:d2:72:9f:67:a3:df:fa:4d:35:40:
                    5a:82:c2:81:85:2f:95:79:b6:1c:89:07:4e:17:c7:
                    78:6f:eb:2b:19:d1:6f:75:d6:80:b2:bd:06:dc:c7:
                    76:75:1c:c1:dc:e4:e7:4d:79:16:99:32:8f:8d:b8:
                    21:c5:58:3c:3d:49:01:56:e0:75:68:8d:a0:fd:ae:
                    7b:e1:2d:34:d2:b3:b6:da:f5:02:a1:d8:ee:09:f2:
                    14:66:5d:71:9d:e3:e0:1b:f3:83:f0:cb:bb:12:3f:
                    31:65:a7:44:64:29:e8:fa:39:91:1b:35:90:41:e0:
                    e5:05:b7:5b:90:06:e0:d3:44:e3:d7:ed:75:54:d3:
                    24:fc:8d:d7:e1:01:38:07:e0:81:b9:76:b0:73:7d:
                    88:3a:ba:6d:f8:27:ab:a8:a6:97:ed:eb:7b:47:90:
                    85:51:15:cb:d8:73:5c:d2:8a:08:0f:e6:f7:ff:0b:
                    e7:2b:55:f0:86:8f:3e:33:e0:85:cc:8f:ce:ce:47:
                    08:7e:c1:09:d4:a3:c9:ac:b9:3e:30:91:5c:2e:fb:
                    51:48:40:a2:c2:0b:e7:86:5a:90:e8:11:dc:9b:8e:
                    ac:99:54:44:6f:c8:88:6b:e9:f2:b1:cb:50:d4:fe:
                    83:5b:7b:8b:52:f7:94:2f:8c:3a:44:7a:3c:56:55:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:56:B1:C8:63:F1:E9:5D:F8:70:21:44:3A:98:9A:38:D8:0E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/596c1584-3a09-38b4-9548-b028b4455bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:62:d6:48:db:7a:e6:06:9f:18:66:52:ac:6c:60:1b:37:
         cb:60:79:37:ef:be:50:30:9a:9b:3b:90:01:52:40:fd:c4:47:
         c0:4e:fc:ee:98:b5:88:37:4a:fa:36:74:7d:60:20:2f:bc:2b:
         30:e9:dc:e6:62:53:6e:e2:a3:84:9c:69:78:65:f7:89:9f:98:
         4b:e4:e5:af:fb:48:0e:29:23:8a:52:5a:03:05:6b:d7:fc:51:
         a6:7f:90:5c:61:d1:d7:4e:61:c5:4b:e0:f5:36:88:61:29:73:
         76:c4:38:4a:3a:83:4b:f3:5e:ea:61:af:63:ce:e6:7b:b5:bf:
         3e:98:9d:23:06:3d:4a:29:cb:c5:bf:5f:ac:ff:c1:bb:3f:a3:
         5f:7a:2f:db:0f:a5:b5:33:72:b1:3a:61:2d:53:8d:01:5c:22:
         92:ba:dd:3a:90:d6:1a:4e:e1:36:f9:e7:71:7b:7f:8c:03:23:
         6a:29:0b:56:b2:f2:0b:0b:bb:23:64:ed:56:52:d7:d7:20:7b:
         85:c3:09:d9:11:3d:31:34:4b:fd:a2:d8:57:60:2e:1a:2f:3e:
         c3:6e:6a:cd:15:be:e2:27:2c:30:60:17:4d:6d:f2:22:af:3d:
         1d:8e:22:c3:76:fa:a4:d8:2b:50:f8:b1:28:d1:f4:f7:76:f9:
         db:44:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:26 2026 by rpki-client