Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
File:                     1ed11bba-2055-382e-ae61-183dfc3956d0.roa (raw, json)
Hash identifier:          4FJBuSo9oEPvxtX/cgwzrAWZCYvNOB0wSduF7vE8bOY=
Subject key identifier:   66:9B:7F:9D:AB:9B:6B:16:D2:3A:23:23:3A:EE:76:79:01:CB:A0:23
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F4328584DB1DAC9AF4E8BBF5150EF4FC0
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     35860
IP address blocks:        63.133.208.0/22 maxlen: 22
                          74.119.52.0/22 maxlen: 22
                          192.149.254.0/23 maxlen: 23
                          192.149.254.0/24 maxlen: 24
                          192.149.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:c9:af:4e:8b:bf:51:50:ef:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=5651d8dc-04e6-42a7-8434-6268bbadbf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:98:77:dc:d6:45:c7:1c:77:d3:a3:27:66:
                    7a:90:50:20:55:f0:db:60:6b:71:da:77:c8:98:c4:
                    4d:0e:68:e2:c9:0c:df:29:00:8a:ee:d6:57:94:e5:
                    3b:ef:98:40:37:76:8f:a4:cd:a5:7e:16:1f:42:c2:
                    63:33:1b:96:38:31:9a:71:89:7b:8d:91:59:5b:7f:
                    7e:48:44:85:51:55:74:64:dd:9b:ff:7a:e7:62:8b:
                    ae:34:fd:81:19:bd:b0:c2:26:4f:a5:ea:7e:44:24:
                    20:57:ad:00:3a:67:ed:cb:72:eb:0a:f6:2f:eb:cc:
                    6f:de:b2:03:e6:f0:63:20:03:84:3b:16:9f:73:61:
                    2e:ec:31:1d:ad:a2:95:6b:56:94:e4:0c:25:76:25:
                    01:b4:0b:75:92:e5:4b:be:cc:98:9b:79:f4:81:f5:
                    0f:dd:93:c2:c0:ed:82:a7:b6:1b:a9:89:7e:35:aa:
                    c1:a1:1d:f9:db:b9:c3:91:e1:9d:30:29:8a:7d:f6:
                    73:74:1a:3b:e3:02:d5:d5:b4:5e:9d:f4:94:69:5c:
                    84:7b:cb:9b:91:6b:e6:46:05:cf:9f:68:9f:1c:8b:
                    cc:b8:10:2d:35:cd:e4:65:e6:6c:45:02:c8:b6:bb:
                    81:65:87:72:e6:66:77:4a:ea:84:47:f5:73:95:fb:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:7F:9D:AB:9B:6B:16:D2:3A:23:23:3A:EE:76:79:01:CB:A0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1ed11bba-2055-382e-ae61-183dfc3956d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/22
                  74.119.52.0/22
                  192.149.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:18:47:db:4a:03:1d:47:02:71:b2:25:85:a1:77:b8:7b:
         b2:2a:19:95:cb:48:a3:2d:52:fa:d9:6b:2c:fc:2a:2d:ad:ac:
         45:7a:c1:5a:0e:17:3b:0d:4a:96:e4:a3:7c:72:74:61:3d:3b:
         dc:da:1b:59:69:cf:53:c7:5a:76:d8:22:49:cc:d1:7e:65:1f:
         b9:bf:97:d3:bd:12:9f:0b:ef:5c:fd:c4:60:72:06:7f:47:2b:
         33:d5:0a:b3:16:33:12:6a:e3:08:16:10:6a:de:c7:f3:fc:5d:
         dd:d6:1e:4a:b4:28:19:aa:60:e8:a9:46:eb:32:e8:a7:51:5a:
         4d:6c:1e:7d:9b:b2:4d:91:99:13:6d:3a:24:cf:57:37:35:38:
         44:cd:ca:dc:ad:45:91:fa:ef:fa:aa:c4:0b:1a:cd:b4:9a:9a:
         4b:35:fb:27:a6:c7:d3:3e:6c:30:c3:8c:b4:aa:8a:97:27:17:
         7f:e5:c2:2f:67:50:0d:82:e7:ad:b2:8a:f8:e1:02:cb:0b:a1:
         70:45:5f:7f:7e:43:53:d9:b9:12:7e:18:e2:a4:50:06:f8:83:
         cd:82:02:ae:d2:5b:10:bb:3b:7b:83:31:ca:60:a2:e3:8e:d5:
         c4:67:7f:77:5c:16:fa:c9:ef:1b:f8:cf:8f:1c:db:7a:c1:7d:
         c2:9a:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:49 2026 by rpki-client