Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa
File:                     59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa (raw, json)
Hash identifier:          aOS3uK97c2xTiQRCbo52QhXPzcX8igcdPObfthfaTzE=
Subject key identifier:   2F:62:B8:B6:84:98:3E:D0:7B:2B:F3:8E:AA:C8:59:EF:03:95:41:82
Certificate issuer:       /CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
Certificate serial:       010D0C9F4328584D00B2724231FD8BFD0C444880
Authority key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     395176
IP address blocks:        208.92.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:72:42:31:fd:8b:fd:0c:44:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=cc52f0b5-44cc-44ac-8e5c-03ee7c9704ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:63:41:f4:51:1b:9c:e3:2d:e8:ea:70:a0:
                    d9:ef:eb:0f:c3:74:42:16:88:20:0a:84:40:52:01:
                    f0:65:e0:da:19:88:b9:e3:2e:c1:44:c2:f8:18:25:
                    f4:36:9d:31:8d:05:7e:72:aa:1b:d0:3b:7c:82:0f:
                    c4:6f:33:aa:cb:d8:eb:0a:57:6e:d4:51:00:0a:a4:
                    9b:c5:77:2c:12:56:a9:f6:72:a0:26:13:f7:4a:f0:
                    5a:75:f7:f2:e6:4b:84:88:8d:14:7b:ba:25:aa:1c:
                    55:da:a7:17:55:81:f9:80:c0:88:36:19:ba:a6:29:
                    98:a1:25:40:1b:8f:db:e3:f4:54:bb:ef:aa:5e:4f:
                    f9:33:b3:9e:7b:dd:60:8b:81:9c:80:1d:b1:70:42:
                    06:52:3f:44:6f:07:d5:b2:ee:64:4b:b9:3c:48:b0:
                    21:da:b9:6d:02:be:06:6f:1a:e8:52:11:0d:56:ff:
                    e1:1f:da:27:d6:6d:f2:22:8f:72:bc:b4:02:2c:d8:
                    91:11:ce:0e:0d:dd:44:88:ac:d3:82:4e:dc:b9:2c:
                    63:40:91:fe:3f:84:99:07:d8:a5:6d:a5:b5:20:df:
                    b6:f8:5b:51:08:5c:a7:83:01:d3:9e:15:27:d7:ce:
                    e5:43:30:c8:50:f5:6b:1a:8a:48:e4:5e:9f:6c:18:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:62:B8:B6:84:98:3E:D0:7B:2B:F3:8E:AA:C8:59:EF:03:95:41:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl

            X509v3 Authority Key Identifier:
                keyid:FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:af:3f:8e:68:d6:83:f6:74:15:21:12:7f:dd:2e:0d:96:
         d2:f6:9b:da:57:ad:6e:a1:ff:62:95:3f:5d:15:aa:f2:00:51:
         62:48:3c:01:df:f3:ff:00:5a:e4:86:23:ea:a3:eb:cd:cf:74:
         04:4c:83:95:b7:14:bb:e4:b8:00:08:84:55:13:d7:06:fe:08:
         8b:7f:5c:ec:85:a0:60:c6:83:57:c6:23:b5:aa:97:8b:1c:25:
         9a:bf:9d:f5:ea:54:5b:40:c2:71:dd:af:f6:25:b4:af:98:0e:
         06:41:e5:72:66:c5:51:a5:ef:fe:49:54:47:4b:ab:16:21:70:
         72:66:a7:3a:cd:55:42:cc:ff:9b:25:72:a0:e0:bf:d4:8f:f6:
         88:b9:bc:56:ea:0c:b1:40:1e:b6:33:34:83:d4:2e:ce:4d:ac:
         20:6f:09:7d:10:ff:e2:9c:91:6f:77:52:2e:32:08:90:dd:e4:
         bf:15:0b:38:91:43:bd:bf:43:0c:ae:d6:85:2f:f2:55:4f:38:
         10:d9:ca:5f:9e:c2:ad:4f:37:a4:36:04:f8:c8:91:ec:8e:6d:
         da:f2:6e:06:b0:2f:25:00:36:78:41:f4:3e:be:b2:7f:32:0f:
         81:ae:9a:bf:98:2e:f3:55:c5:97:e5:68:1a:7e:74:b6:11:dd:
         06:bb:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:03:56 2026 by rpki-client