Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a68f62-9877-3f16-99bd-b646f3b3c769.roa
File:                     59a68f62-9877-3f16-99bd-b646f3b3c769.roa (raw, json)
Hash identifier:          4Hs+eO6vtPWohZ2VoSf66ImEwcPIxtG1YkQOrnf6GrU=
Subject key identifier:   61:B9:6B:CD:70:8B:D6:2E:CE:D8:53:F8:CD:84:C6:6D:76:18:7A:E6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CEFF24CFA3A529681F5E87280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a68f62-9877-3f16-99bd-b646f3b3c769.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     12008
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:4c:fa:3a:52:96:81:f5:e8:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=80c079d0-71a3-473d-be2a-70f848beb6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:e1:27:84:96:ed:da:96:de:ee:d6:16:94:
                    21:65:35:9f:c1:62:3f:07:13:ac:0b:d2:27:31:57:
                    3a:4d:6f:34:b6:af:e8:40:f9:0c:0a:1b:1c:23:1b:
                    c9:36:77:b8:c7:a7:59:b3:cf:a6:a9:9f:98:40:e0:
                    fe:b6:a9:f0:59:34:cc:a0:8c:a4:e8:5b:6a:59:cf:
                    de:18:d9:2d:30:28:8d:82:d2:98:f9:c0:61:2e:d6:
                    d5:28:99:7e:c3:a3:b7:e3:64:bc:9a:0d:ee:69:ef:
                    ad:6c:f2:39:62:21:26:6a:e7:78:d7:c2:df:5d:36:
                    a9:4b:fa:d7:45:9e:fd:75:7e:63:ed:1e:53:86:47:
                    2c:7b:2a:3a:98:9c:e8:48:c3:8c:87:3d:26:b0:82:
                    76:64:cb:b9:d0:4c:0f:da:be:7f:86:72:83:0c:cd:
                    89:d6:f8:8b:c4:7b:18:52:1d:6c:2d:1a:91:25:da:
                    0f:eb:ef:ed:bc:17:77:f0:e0:a7:1e:e4:07:53:94:
                    33:fe:43:e5:cc:94:24:59:8f:f8:71:b0:2e:74:0e:
                    c3:43:27:52:cd:98:bf:2b:4a:b7:24:fb:e3:e0:12:
                    58:7b:26:21:59:69:ab:79:04:33:2a:5f:e7:03:71:
                    e1:17:b9:e9:c0:3b:3a:bf:f9:67:09:8c:95:81:d0:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:6B:CD:70:8B:D6:2E:CE:D8:53:F8:CD:84:C6:6D:76:18:7A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/59a68f62-9877-3f16-99bd-b646f3b3c769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7f:99:6e:45:99:46:a2:02:9d:95:e2:b1:79:ec:29:7c:c7:
         f2:9b:5a:50:7b:6b:59:cd:0f:90:21:01:34:6e:f2:c2:50:15:
         ad:3b:66:03:47:f7:42:20:21:9f:a9:d7:f8:c8:57:22:a4:71:
         f2:6f:5c:1a:b3:82:5e:b4:d2:88:a9:8d:89:92:0a:b0:2a:04:
         36:05:43:53:38:73:ac:08:7c:e9:46:3e:66:0f:08:03:0c:2b:
         8a:6f:5d:92:73:ef:56:b7:9c:21:83:ff:34:e5:66:b7:a3:43:
         21:89:7b:03:9e:86:10:11:c1:b0:0d:57:af:9e:a4:07:37:44:
         f2:3e:51:60:eb:a9:4f:b4:07:6d:a3:bb:e1:65:85:df:2d:34:
         e6:45:ae:22:c2:80:3b:c0:7e:61:82:b5:9e:73:ee:71:f7:5a:
         45:d1:11:bf:85:9c:3d:13:a2:d8:a8:42:2e:5d:f6:f0:05:60:
         f7:a5:92:32:49:e2:79:45:0c:12:54:d4:ec:9e:80:74:f4:34:
         80:b0:7d:14:c4:ef:4e:52:78:08:ce:73:45:ea:55:af:a0:a9:
         d5:9d:85:8d:1f:b7:3d:01:97:6f:bc:fd:b1:38:cd:51:bc:24:
         d3:39:61:69:31:ed:ea:6b:63:e1:20:c9:b5:bc:98:04:be:dc:
         9d:2c:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:30 2026 by rpki-client