Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa
File:                     c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa (raw, json)
Hash identifier:          Za6P2xKETB76WqeNo6YOywEZN38nXHYVbPt/dIeQrmg=
Subject key identifier:   0E:06:A1:7A:01:80:6C:65:70:EE:9C:4A:84:1B:E4:34:A1:DB:D4:89
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584D59EA780DEDAC0CF6B5065BC0
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     399275
IP address blocks:        172.81.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:78:0d:ed:ac:0c:f6:b5:06:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=755282b0-ba79-4fd6-a6ba-dceac8eba541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:4a:1f:bb:12:ed:48:88:7f:ad:6a:1c:e3:
                    5e:8d:f3:48:01:83:b6:66:51:91:5d:bc:e8:e6:de:
                    a8:6a:a6:67:15:79:12:41:9c:f5:37:f3:28:73:aa:
                    a1:98:bf:9c:61:7e:af:cd:7d:76:5c:4d:b2:63:01:
                    0f:50:c4:c4:55:16:66:7d:3a:f3:7d:e2:ff:a1:bc:
                    f4:d0:71:83:f9:b8:90:30:4e:4f:41:91:1d:01:a9:
                    21:32:e8:10:67:5d:0f:98:4b:88:ca:fd:0d:46:86:
                    5b:09:12:90:e4:0f:49:e7:92:c4:a1:4d:3a:df:78:
                    c5:e6:28:bf:ff:dd:f3:b5:83:e6:7f:a8:c2:6e:93:
                    37:b7:67:5b:b5:ee:f1:11:de:c7:6b:04:9f:ee:eb:
                    16:13:5d:e8:73:37:13:7c:2a:08:33:17:58:c2:4a:
                    49:67:a2:22:40:b5:8e:cf:d2:68:6a:30:ff:79:f7:
                    32:49:da:71:29:03:08:f9:08:9c:73:49:2f:26:5c:
                    71:d2:8a:e9:77:30:cc:97:6d:21:1c:b6:fc:14:6b:
                    b2:27:d7:55:99:79:33:7d:8e:10:f9:f3:83:f6:d0:
                    3a:a4:b7:82:c3:70:14:4b:87:33:92:e5:aa:ae:39:
                    a2:2d:9b:1d:4d:cc:a0:73:69:7b:ea:8b:28:62:38:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:06:A1:7A:01:80:6C:65:70:EE:9C:4A:84:1B:E4:34:A1:DB:D4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/c5a88b8b-cbc0-39df-8792-ceafacc463a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:da:50:bf:db:15:99:f7:cc:f8:3b:0f:40:7c:af:95:f0:
         d4:07:f3:27:fb:5f:59:ff:10:e9:ce:85:31:48:64:ff:f4:0d:
         04:cc:d1:dd:69:4e:b5:92:12:73:5d:23:63:1c:65:c2:26:c9:
         81:63:20:3c:73:ed:5a:04:a4:8e:6e:e1:15:07:ef:19:05:fb:
         94:84:2c:08:3c:f0:84:e1:5a:07:17:d4:03:14:1c:53:6d:28:
         dc:b8:92:eb:31:11:2d:d6:03:27:31:21:7a:5c:2b:eb:c5:40:
         5a:89:41:f8:df:f8:76:38:dd:05:e6:8d:99:fb:c2:26:37:a9:
         38:0e:76:77:e0:dd:5a:65:a7:ef:b8:2c:b1:c0:6b:fb:c5:da:
         9d:65:97:76:c8:85:b2:50:2d:67:0f:ba:a4:54:99:7f:cb:ec:
         31:9c:28:2c:3d:ae:0c:60:0b:fd:d6:fc:d4:43:83:92:d7:dc:
         3e:55:f1:dd:4e:52:37:09:53:db:bc:73:f6:be:be:16:7c:51:
         39:4b:2f:24:00:0e:32:37:40:3b:e7:ce:98:4e:05:81:87:e5:
         a1:1b:fd:11:45:44:e8:bb:5d:80:08:3c:c6:05:6b:45:ac:64:
         33:42:a1:c9:01:6b:a1:a8:36:d7:7f:4e:c1:1f:f0:a9:b7:d0:
         5a:90:b0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:23 2026 by rpki-client