Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/c02c45fe-6719-3d1e-892b-b7aeb5d5f055.roa
File:                     c02c45fe-6719-3d1e-892b-b7aeb5d5f055.roa (raw, json)
Hash identifier:          wQmRn5fYCGTAoeh5DKpFY3O9L7ifNr8PM6Pu4KOdjjQ=
Subject key identifier:   F3:A6:B9:1F:16:1F:D1:13:F8:20:AD:ED:F4:03:4A:81:73:2F:00:10
Certificate issuer:       /CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
Certificate serial:       010D0C9F4328584D316F605428ED0B20D1C32F00
Authority key identifier: 00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/c02c45fe-6719-3d1e-892b-b7aeb5d5f055.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     41378
IP address blocks:        167.253.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:60:54:28:ed:0b:20:d1:c3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=f19907f6-9190-471f-b1fc-1ac903696fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:db:c3:a9:2c:f2:b5:bf:b0:ef:c5:87:3a:
                    14:f6:8a:a4:ed:34:66:e0:1d:89:d7:cf:92:ef:ab:
                    8d:98:92:47:83:13:5b:f3:6f:a8:26:4e:46:63:49:
                    25:2f:b1:12:56:b5:46:e7:9c:24:85:80:61:0b:87:
                    9e:44:3a:d1:14:66:97:6b:c8:6c:be:08:ab:50:e8:
                    98:88:1c:a2:71:9e:1d:d2:e5:d2:31:aa:b8:b9:99:
                    18:16:51:d0:1d:d3:77:6f:6a:e2:bf:5c:e2:f8:21:
                    85:0b:6b:ee:47:12:c4:32:42:59:c9:b6:4e:d6:08:
                    0d:f3:3b:85:b0:eb:1f:70:ec:ad:56:e3:1f:02:ff:
                    8b:40:34:59:b7:1e:a5:0d:fe:f8:e2:91:e4:8d:85:
                    e0:01:e6:d5:ea:22:43:63:5e:b0:0b:87:53:be:dd:
                    76:ce:21:ea:38:a9:6b:83:b0:35:ed:ad:92:2c:85:
                    37:45:f2:7f:42:86:6f:6b:64:bb:1c:c9:97:e9:08:
                    b8:00:27:c0:0a:86:a8:b5:9c:90:45:12:e3:dc:1a:
                    d8:8c:9b:ea:c6:60:2c:02:2f:e9:4f:50:50:50:53:
                    19:21:e6:16:e8:96:8b:d1:a3:43:cb:fa:d6:f5:94:
                    23:15:f2:67:a9:03:d8:6b:f9:9d:85:b5:33:49:b9:
                    79:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:B9:1F:16:1F:D1:13:F8:20:AD:ED:F4:03:4A:81:73:2F:00:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/c02c45fe-6719-3d1e-892b-b7aeb5d5f055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:8a:89:d8:e6:a4:5f:ad:39:05:01:ce:b9:28:05:51:d3:
         0e:42:69:00:11:ba:64:3f:11:22:2b:67:46:3c:ed:b3:f9:ee:
         54:73:ac:f5:84:fc:b5:49:5b:3a:e6:f4:13:16:29:dd:8a:5b:
         2d:33:29:53:c8:c4:01:b0:72:52:73:f2:ad:7b:c6:31:af:83:
         01:2b:a8:f1:2d:49:2b:d2:78:6b:24:74:a2:ae:66:37:f2:b4:
         a7:c3:e0:a1:3d:89:59:7c:8c:5e:cf:ea:ef:a6:69:35:3a:64:
         c5:1d:7e:4a:7a:2b:f5:28:d4:12:83:f8:8e:92:1f:4d:d5:52:
         df:f2:17:f8:aa:8e:e4:78:42:9b:b9:94:23:7c:12:9e:8c:e1:
         5e:b6:b2:9f:89:a5:20:93:bc:9c:48:28:1d:8e:df:63:28:0a:
         cf:77:a8:3e:c9:2c:84:eb:39:d4:0a:3a:41:9a:23:82:5e:44:
         3b:2d:d8:1b:a0:86:77:54:68:df:92:f0:85:f4:7d:68:c8:7f:
         c2:64:93:e3:f4:14:8c:24:08:82:59:79:b3:79:b8:af:d0:cf:
         f6:54:fb:71:cd:9b:5f:a1:8b:f9:ad:bf:0e:7a:cb:c9:fe:c3:
         59:00:55:94:0f:42:ef:58:ec:8e:0f:29:76:67:af:77:2d:b5:
         ce:c6:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:44 2026 by rpki-client