Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/092a1adf-e13f-3db2-8351-d8972260d136.roa
File:                     092a1adf-e13f-3db2-8351-d8972260d136.roa (raw, json)
Hash identifier:          Js128z5lQurGtiFry3MFpPO8izCWsXAwALAV4xy2QYw=
Subject key identifier:   A1:B6:10:1E:63:AA:DA:6D:66:11:82:98:F7:68:E2:1E:59:B6:8D:2A
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E26A457E7F3C61D5188AB93C0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/092a1adf-e13f-3db2-8351-d8972260d136.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     12025
IP address blocks:        205.235.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:57:e7:f3:c6:1d:51:88:ab:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=da217331-72b7-4453-9f89-24422b5c4c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:e1:37:62:a3:f4:9f:db:07:cc:ae:e4:5f:
                    74:43:e5:d5:95:2c:e8:66:90:86:7c:bc:98:b7:73:
                    5c:4b:d8:6d:c7:55:b0:aa:69:e5:0e:af:49:41:d3:
                    ab:f8:03:18:4c:4d:a7:15:bb:2d:4a:40:f4:6d:a7:
                    87:99:4a:a2:16:c5:4c:ca:1e:5e:c7:9b:c4:e9:7c:
                    e0:05:88:d9:bc:a9:50:55:b9:21:62:7f:18:d3:af:
                    47:56:46:6c:12:31:ed:ea:3a:db:5f:23:9b:93:05:
                    53:a2:6a:26:36:e8:e6:1e:c4:34:3b:7f:d1:c8:c4:
                    81:66:99:af:31:35:c9:9c:d7:b2:81:e5:ec:9f:86:
                    ce:70:cb:e2:68:25:15:e8:06:28:a7:df:21:42:44:
                    8b:2b:36:6b:3c:7a:08:2c:25:e2:55:76:f6:44:ae:
                    b6:a0:c3:ff:0f:5a:d8:18:55:43:d6:c7:ce:9a:82:
                    bc:70:bf:9a:d4:2b:92:91:48:e5:86:84:09:42:cf:
                    fd:99:bc:84:85:d0:fe:50:1b:0f:4e:4e:93:e2:51:
                    aa:ee:93:c2:cd:76:88:6b:85:6a:86:2d:ab:10:94:
                    91:5f:aa:f8:f0:e8:bc:e4:ff:80:64:f8:b3:fb:9a:
                    c4:02:48:1d:bd:66:36:08:9d:e6:5f:73:17:a3:25:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:10:1E:63:AA:DA:6D:66:11:82:98:F7:68:E2:1E:59:B6:8D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/092a1adf-e13f-3db2-8351-d8972260d136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:18:9c:be:e6:d9:9d:f5:3c:bb:fc:e5:1f:35:47:94:c0:12:
         1c:e3:51:6d:b3:b7:43:c5:1e:4f:7e:e9:51:e0:20:fd:65:87:
         b3:bd:44:1c:f8:73:15:10:bb:23:0a:ec:c7:42:c8:70:0f:1f:
         86:b3:17:ce:96:68:cc:2b:b0:43:09:44:a1:8c:87:2e:fe:f4:
         47:e0:87:fd:32:04:c7:34:eb:a2:a4:3d:c6:90:07:22:d9:2a:
         c1:da:59:52:f9:03:72:94:fa:3b:5f:51:a0:b5:a8:48:49:e2:
         ec:e1:6b:e4:13:1a:82:9e:11:3f:14:f2:2a:d9:5f:38:0a:c9:
         26:ab:49:c8:e1:81:35:e3:69:d8:3a:bf:28:ae:ff:1e:13:cc:
         92:94:1a:a1:6c:c5:8d:6e:be:ac:b7:fc:37:67:12:14:87:ca:
         58:ce:0c:cb:8f:13:04:e3:b7:18:c4:96:bc:98:a5:be:dc:ea:
         9c:08:2d:40:ed:a3:d5:33:68:16:9d:a2:ba:4f:01:90:80:0b:
         c6:76:b8:18:65:1a:86:1b:2d:3a:e0:10:85:ac:ab:d5:03:28:
         7c:fa:03:59:27:58:3d:58:c5:8b:ac:7b:6f:19:d3:72:05:12:
         d7:29:f1:4c:5b:9d:e9:75:9c:e0:fe:a7:5a:f9:3d:4d:fa:55:
         5e:51:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:29 2026 by rpki-client