Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa
File:                     59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa (raw, json)
Hash identifier:          bBwkMeoztMTPMH/n7BLdBi0BPF2S9NnKnrdAqnbME1c=
Subject key identifier:   E5:53:F2:52:8D:F2:51:24:16:03:CB:1F:D2:50:4E:D3:83:1E:38:6B
Certificate issuer:       /CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
Certificate serial:       010D0C9F4328584DE1507A43E91A5DAC1A5970C0
Authority key identifier: FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     395176
IP address blocks:        208.92.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:7a:43:e9:1a:5d:ac:1a:59:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac0b9fd-fc4c-47c2-ba96-0ce118621de4
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=9d6b12ef-478d-4724-b37e-f99a70eeab48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:8e:85:5b:8f:d8:7c:91:ff:21:f7:29:6d:
                    d2:a3:a1:d6:33:f3:1d:6e:ee:31:b2:b5:60:61:a5:
                    53:50:3e:cc:63:5e:33:50:14:1d:9c:22:c6:35:a7:
                    c3:b2:c5:f7:2b:fc:fd:ac:85:b3:f5:87:54:fd:53:
                    fb:f5:d1:10:28:65:5f:54:8c:08:b3:f7:83:ce:e1:
                    57:f9:01:3d:a3:41:11:aa:bb:ab:58:38:8f:09:a1:
                    82:64:1e:51:59:ef:b1:82:8e:ee:a9:4b:62:e0:a1:
                    d2:c5:81:ba:3f:44:60:9b:6b:11:cd:58:67:04:99:
                    c7:ed:25:8e:d8:97:9a:94:95:c3:df:4c:95:7e:23:
                    41:ba:3b:3d:66:80:12:ad:57:c4:cd:d5:f6:7d:95:
                    31:5c:ad:09:96:62:ff:b5:9f:f7:ca:97:fa:ee:db:
                    85:50:85:d3:c6:8f:f9:95:85:e5:db:60:97:3c:41:
                    3b:c4:e1:c5:aa:38:ad:fa:01:38:e7:d6:26:5b:60:
                    1e:c9:01:47:6f:45:59:d0:5e:2c:9c:bb:10:5d:da:
                    af:29:9e:df:74:d8:cc:42:ca:ee:46:56:20:45:72:
                    3e:dc:30:f6:95:bc:db:22:0d:9d:09:e5:dc:ec:8f:
                    44:30:96:42:87:4a:e8:41:d2:c3:96:e0:8b:57:96:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:F2:52:8D:F2:51:24:16:03:CB:1F:D2:50:4E:D3:83:1E:38:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/59a21f7a-7e6c-3a04-ad02-fe1b6bbc3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.crl

            X509v3 Authority Key Identifier:
                keyid:FA:85:8E:67:A7:9F:7B:1B:7C:F5:1F:7A:ED:A2:F8:D2:22:C4:25:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4ac0b9fd-fc4c-47c2-ba96-0ce118621de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:12:91:ba:54:5b:3f:c7:e2:48:eb:6b:6e:4c:33:2e:25:
         8d:de:29:ee:b2:9a:a3:df:f2:20:a0:40:7a:32:f1:2e:4d:c9:
         b8:7d:4a:8d:a4:9c:bd:97:05:8e:33:bb:be:06:f8:08:91:2f:
         af:79:cf:2f:d6:ca:10:79:45:39:df:fe:e1:a3:38:69:72:7d:
         b4:e3:fb:f9:06:b9:9d:11:29:0c:2d:2d:ff:28:59:ee:e6:e1:
         b2:07:1f:c5:36:fa:bb:9d:5b:85:48:3f:7e:17:2d:02:15:e8:
         02:f3:10:34:a8:bf:a5:ab:1c:97:b9:cb:08:cb:f3:8e:42:18:
         10:5d:cc:24:0d:5e:92:fa:be:53:45:58:ec:1e:2c:db:fc:18:
         84:77:05:70:b1:b6:77:a0:e0:12:a0:50:99:03:34:ad:cd:fa:
         b9:5b:6c:69:7a:aa:7f:2d:15:1c:db:94:e5:17:42:5f:ad:6f:
         54:4a:37:8b:fc:25:9f:a3:bb:a1:17:70:ec:42:6a:f0:16:b3:
         1a:4b:a2:6f:c6:f2:27:a1:42:7d:f0:80:af:73:47:63:4c:9c:
         67:90:06:ae:15:c2:0b:90:d5:e6:7b:2c:84:8e:20:31:2c:f5:
         12:b6:78:5e:99:66:1e:60:81:42:fc:56:76:98:cd:55:1e:06:
         d5:37:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:07 2026 by rpki-client