Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
File:                     84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json)
Hash identifier:          MSNpHVeOJTQUSY0+cBlOEUl8WpniabolECAXk202ExQ=
Subject key identifier:   D0:3B:A2:AC:1E:4A:0E:A7:7B:C3:F0:56:10:86:43:F6:B7:10:EF:20
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584D571FAD646FA7F600486A2E00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     12129
IP address blocks:        209.124.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ad:64:6f:a7:f6:00:48:6a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=9abb0ceb-da82-4a2e-a023-6f1de1904059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:89:23:44:cc:f9:bc:7c:36:c5:ec:2d:0c:
                    b6:17:84:ca:e4:17:56:69:ae:34:f6:f1:b3:ae:56:
                    1f:56:81:0b:75:74:61:e2:06:cc:f1:46:60:9d:72:
                    21:3f:59:4a:b2:e8:d1:26:59:8f:4e:7f:da:db:42:
                    5b:e9:cb:9a:70:87:80:1d:ff:d6:3f:ef:23:94:8a:
                    79:49:8d:81:60:c7:7f:33:05:88:f9:b0:b4:35:03:
                    5c:6b:ee:cb:a5:68:89:a2:c2:17:78:bc:a4:ab:92:
                    32:a2:68:82:ce:35:e4:05:2c:60:1b:3b:8d:9f:3d:
                    1e:45:f7:ff:26:02:78:91:28:9f:62:ee:da:b7:ab:
                    c2:07:a8:59:fb:f6:1f:4e:09:53:e0:47:52:66:66:
                    9d:8a:9e:55:e3:8a:33:74:fe:75:6f:9d:36:87:8b:
                    14:f9:83:5f:c5:98:d8:4b:30:4f:39:dc:f6:df:4f:
                    f7:21:80:7c:e6:e9:bd:c0:87:76:16:80:c0:bf:9c:
                    79:4f:3b:44:6d:69:e4:36:32:73:ef:9f:09:04:ff:
                    0d:7c:3b:6e:b9:4c:03:b6:34:f7:7d:fe:42:4f:3e:
                    02:71:c3:55:fe:0d:36:88:95:12:de:e5:6b:36:5d:
                    64:90:20:2a:95:6a:87:92:2d:8d:82:d7:d9:17:03:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:A2:AC:1E:4A:0E:A7:7B:C3:F0:56:10:86:43:F6:B7:10:EF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:88:12:50:43:30:07:c0:ac:9c:f2:0d:73:6a:cd:1d:da:48:
         e2:57:e7:92:46:ff:7f:31:b0:19:b5:2e:d2:e0:4c:2d:ca:e1:
         9b:2f:65:ac:2d:de:cb:ed:84:08:ad:1f:56:af:f5:4f:7a:e5:
         16:ca:4a:5a:c8:5d:15:77:07:d5:21:94:4d:ba:6f:80:74:01:
         42:7d:d7:3b:38:7d:e2:38:50:a4:c4:84:f3:06:30:45:6c:df:
         9c:93:83:4f:92:94:fb:18:fd:16:ef:47:d5:0b:d6:83:88:c5:
         aa:72:56:98:1c:90:47:c0:e7:b6:df:54:87:32:54:01:68:05:
         6f:93:cf:80:c5:4c:8b:af:5d:2e:37:14:3e:85:5e:f6:02:47:
         85:9f:df:a3:be:c0:02:95:ef:23:bb:96:ff:3e:7b:b0:2e:44:
         02:cd:6d:a4:43:cc:66:13:b2:cf:c8:0d:34:83:e1:cf:72:7b:
         16:bc:aa:55:88:0b:01:5e:d8:9f:51:75:7d:6d:11:9a:21:df:
         f9:69:62:7d:af:78:1c:40:4a:46:77:46:44:af:d2:4a:d0:f6:
         0c:b6:32:84:96:96:99:24:01:9e:90:f7:83:8d:84:1b:a6:d4:
         e7:3a:e0:0d:29:c7:3d:94:d1:86:d2:82:f4:b9:d6:5c:23:28:
         ff:bd:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:09 2026 by rpki-client