Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/1d521801-e44e-35a4-b457-0a266ca68134.roa
File:                     1d521801-e44e-35a4-b457-0a266ca68134.roa (raw, json)
Hash identifier:          JtZr3v9QdlI3AsFkmcwyp8MizI4RHzWypSjmTs9NvbQ=
Subject key identifier:   1F:FF:F0:35:56:8C:AB:CC:74:AC:FB:29:6F:87:5F:E1:3F:56:75:64
Certificate issuer:       /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial:       010D0C9F4328584CED27906A0A2071439620AD80
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/1d521801-e44e-35a4-b457-0a266ca68134.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     15296
IP address blocks:        204.209.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:90:6a:0a:20:71:43:96:20:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=bd3a15f6-1605-4716-af50-3c6e59afcb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:7c:f5:22:86:ba:25:af:c3:53:f3:fe:32:
                    b5:41:93:50:20:3f:ea:77:87:48:ec:6e:8a:09:62:
                    8f:df:4f:c9:79:48:44:bf:c8:db:8f:80:b3:0a:bf:
                    ec:73:ea:7a:60:e5:f5:f5:51:7d:96:63:fa:f6:89:
                    d8:3c:33:d8:eb:6e:d1:b6:26:04:7d:46:0c:9c:07:
                    6a:17:cb:91:dc:19:8a:d3:48:e3:3e:fe:d6:7c:07:
                    59:84:dc:2e:ba:64:ba:24:06:0c:5c:a5:6f:54:1e:
                    84:f5:d3:9d:c1:4b:09:3b:96:e6:9a:7c:29:ef:8f:
                    03:bd:29:b9:93:20:f2:38:36:3e:ba:a3:26:8b:c0:
                    97:91:d9:b8:82:ed:d8:22:73:5d:49:81:4b:03:c6:
                    49:f4:a9:a7:0e:b8:f4:3e:64:2d:c0:26:08:a7:49:
                    28:54:61:4c:bc:fa:70:30:7a:77:be:3a:8b:77:52:
                    98:52:47:9c:ae:45:9c:1a:a3:0b:9e:94:04:7f:e3:
                    90:1c:0d:bc:85:1b:da:f2:36:8d:71:cf:4e:0e:e2:
                    fc:fb:a7:08:16:eb:82:e3:e7:89:ba:e3:4f:e5:7c:
                    cc:a1:6b:10:68:bc:26:f8:c0:81:e3:7a:c5:a1:66:
                    9b:a4:9e:8c:3f:82:57:27:d5:f5:64:4a:ab:65:ea:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:F0:35:56:8C:AB:CC:74:AC:FB:29:6F:87:5F:E1:3F:56:75:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/1d521801-e44e-35a4-b457-0a266ca68134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl

            X509v3 Authority Key Identifier:
                keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:99:85:1d:1e:a0:db:80:08:f6:6b:ac:a6:41:1a:e9:27:53:
         e6:63:ed:f3:06:ed:f1:68:73:80:4d:47:33:2a:f0:a5:72:e9:
         c6:31:f1:ea:0a:46:1d:12:5d:64:83:29:ad:71:3d:b1:35:c2:
         55:46:a5:a3:97:e5:6b:3f:46:ce:29:84:f9:41:46:83:30:ff:
         1f:78:da:07:e4:a1:de:0c:4c:99:35:5c:00:45:2d:bf:3c:82:
         7d:a2:a1:1c:ce:56:4a:81:28:f8:5a:67:cc:fb:7d:d3:3e:8b:
         99:92:b5:f9:0e:b3:a1:4b:78:8a:82:7f:ce:00:64:b9:57:1f:
         ed:b2:c2:72:7b:62:df:83:04:39:60:94:3c:3a:ca:8b:2e:72:
         7c:89:de:42:b9:e1:5a:33:19:46:d9:61:af:ce:a4:94:e2:d7:
         6e:13:32:28:f4:4a:33:95:61:bf:eb:b4:cb:8e:1b:4a:4a:e8:
         07:ba:67:d4:8f:c6:52:9c:1c:57:3a:01:b5:38:5f:2d:a3:33:
         48:2c:8e:a2:ba:de:c8:a4:d4:43:ab:38:d4:79:09:74:54:c2:
         f7:9a:6d:56:28:d0:f9:bd:31:15:07:75:28:07:bf:90:7e:c7:
         87:0c:b7:bd:70:f8:67:ff:0a:b0:3c:35:76:86:59:57:0d:bf:
         9b:49:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:46 2026 by rpki-client