Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa
File:                     eb65dedb-cd27-3616-b956-0f11da7cf19e.roa (raw, json)
Hash identifier:          dj1BAI3rgUd/XsKnuDGVkDftf1yhhdauh4psp2UA/Go=
Subject key identifier:   B7:04:84:A3:6B:90:03:E0:8E:56:CA:60:30:AD:15:A7:5C:19:71:DC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D746FF1881D44926B5AE52480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397225
IP address blocks:        209.173.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:f1:88:1d:44:92:6b:5a:e5:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=dab84f4b-2390-479f-b9ef-05131ddd69f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:62:5c:9f:f2:0f:1b:6b:9d:58:54:31:c6:
                    46:84:5a:22:12:79:44:cb:35:72:d8:3b:a2:ac:49:
                    02:64:03:ea:95:9a:0a:8e:35:81:8a:a6:4d:45:34:
                    04:3a:51:32:96:27:28:55:95:0b:f6:0d:4f:c7:51:
                    6c:db:f6:ee:4e:03:f5:b0:fa:25:98:63:6f:6e:63:
                    25:f7:ff:e9:7f:d6:1a:8d:5f:15:11:d2:13:2f:30:
                    96:9d:21:bb:c2:04:9e:a0:1b:ee:39:33:6d:75:05:
                    e8:67:cc:f3:18:c9:e8:45:94:de:0a:29:dd:69:b8:
                    a8:f9:81:79:8d:7c:7e:46:92:9d:fd:4c:64:fa:cd:
                    f2:ae:69:6f:71:97:e6:5a:c3:b5:88:ec:da:3d:52:
                    75:46:cc:8c:09:36:0a:b8:cc:f8:c3:d5:a1:ed:48:
                    e2:82:ab:a0:a3:4b:1b:91:62:f0:ff:d8:b2:43:e8:
                    c1:ea:62:ae:8b:ff:99:fc:d6:d5:08:cc:41:ed:f1:
                    94:db:6b:79:7e:ca:fb:87:1f:0b:d1:42:71:74:a2:
                    26:c5:e2:33:78:a9:71:3b:00:21:e2:54:17:fa:d4:
                    41:d5:3d:08:fc:06:c0:cb:3c:13:4d:fd:ea:4c:13:
                    8a:24:c3:5a:36:a1:6f:63:0a:ed:3d:f1:1d:d5:dc:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:04:84:A3:6B:90:03:E0:8E:56:CA:60:30:AD:15:A7:5C:19:71:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/eb65dedb-cd27-3616-b956-0f11da7cf19e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:26:dc:eb:fa:ed:e4:88:8d:24:cd:e1:82:c3:2d:0f:7a:2f:
         05:37:17:1a:51:2e:33:cb:5f:ae:44:6f:4a:7d:90:14:db:ce:
         e5:23:a1:21:ba:b7:13:07:ef:f3:9f:ec:30:12:6c:f8:d1:11:
         09:ad:0a:e2:63:b1:f1:0a:2e:c2:38:fe:ef:c5:7e:7d:15:bc:
         5a:cf:ef:4c:ec:1f:24:df:ed:61:7d:38:af:43:c1:eb:65:cc:
         12:78:a6:a6:2e:33:96:84:3d:ad:02:35:63:4f:9f:29:2f:8e:
         91:0b:24:4c:d2:60:d9:22:b7:02:c4:1f:8a:19:76:7b:ff:96:
         62:0f:23:6a:f4:40:bc:59:48:59:f4:7d:96:90:4a:02:1c:35:
         fa:7f:0f:f8:17:1e:b9:f9:ac:14:03:1b:62:de:8f:71:d5:bc:
         88:bd:81:a4:65:f0:1a:bd:b8:81:3c:ca:56:bd:02:bd:6d:62:
         06:f0:9a:cf:9e:48:ba:0e:96:50:15:d9:c5:15:37:01:16:8a:
         c5:cc:80:d7:91:9b:69:e9:78:f1:d9:a9:fd:9a:20:92:d9:f9:
         c4:a5:32:a1:80:ee:90:9f:77:cd:4e:20:14:86:7c:02:b6:60:
         25:ab:2c:11:56:d6:57:aa:f1:e6:2a:47:43:a2:8f:41:ec:4e:
         8b:65:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:14:58 2026 by rpki-client