Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/73aa53fd-abf7-338b-bd20-d2b05da88353.roa
File:                     73aa53fd-abf7-338b-bd20-d2b05da88353.roa (raw, json)
Hash identifier:          yPhcIGFOg7lwHcDWRBPrQGukUOThlpBNZYNGyrkLu6s=
Subject key identifier:   1D:72:50:77:D9:8F:BB:CC:32:B1:6E:87:3F:07:35:7B:29:50:FA:1B
Certificate issuer:       /CN=d25d2fbb-43b0-4aff-a009-be6f71990354
Certificate serial:       010D0C9F4328584DBC46F0EB005842737B5E8640
Authority key identifier: 01:E3:E1:4E:E0:E7:5A:A7:06:E4:99:1A:CA:1F:C6:28:41:5E:FC:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/73aa53fd-abf7-338b-bd20-d2b05da88353.roa
Signing time:             Tue 05 May 2026 18:36:29 +0000
ROA not before:           Tue 05 May 2026 18:36:29 +0000
ROA not after:            Mon 27 Jul 2026 20:57:18 +0000
asID:                     243
IP address blocks:        192.52.224.0/23 maxlen: 24
                          205.142.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/d25d2fbb-43b0-4aff-a009-be6f71990354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/d25d2fbb-43b0-4aff-a009-be6f71990354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:46:f0:eb:00:58:42:73:7b:5e:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25d2fbb-43b0-4aff-a009-be6f71990354
        Validity
            Not Before: May  5 18:36:29 2026 GMT
            Not After : Jul 27 20:57:18 2026 GMT
        Subject: CN=70ce9c00-1c8b-43da-b039-b240d89842a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c7:63:8c:8b:d0:cc:4e:4e:d2:9a:46:fc:86:
                    86:62:fe:91:a1:ec:32:03:1c:72:20:e0:67:f5:20:
                    95:09:3a:ae:8a:1d:fd:da:8d:eb:a0:9e:58:61:f3:
                    84:85:ea:0b:7f:8e:2b:ca:22:8b:e9:a2:2c:9c:5a:
                    3b:2d:5b:7e:b0:94:59:d5:ea:7e:c2:b8:4a:b1:8a:
                    83:8a:12:b0:87:ce:dc:ac:3e:9f:0d:a6:e3:31:2e:
                    c2:ef:b5:6b:81:9c:71:66:c4:44:1c:00:b4:fa:dd:
                    22:83:d8:a8:3b:60:b8:53:92:84:12:c8:3f:cc:bd:
                    b2:d5:1d:78:ee:b5:02:aa:12:1a:14:19:95:dc:9c:
                    ed:52:fb:82:d3:68:2d:2d:3e:fd:e1:c7:33:9b:60:
                    04:61:35:34:65:34:68:a0:5a:17:ac:41:85:fc:c1:
                    5e:4a:2d:17:b2:d7:ad:c4:81:32:44:f6:3e:82:f8:
                    c5:3b:ae:36:eb:89:1c:dc:d2:54:c2:8f:cb:77:52:
                    cf:ae:5c:e6:78:be:65:49:db:f4:7a:b8:23:ed:f2:
                    64:25:55:44:b7:de:d8:f2:0e:9b:5e:67:b6:6e:22:
                    b2:32:ba:93:91:99:a0:02:3f:42:29:9e:03:89:fb:
                    13:b9:e1:65:ab:4d:70:31:e7:98:d0:60:cd:e3:fa:
                    98:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:72:50:77:D9:8F:BB:CC:32:B1:6E:87:3F:07:35:7B:29:50:FA:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/73aa53fd-abf7-338b-bd20-d2b05da88353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354/d25d2fbb-43b0-4aff-a009-be6f71990354.crl

            X509v3 Authority Key Identifier:
                keyid:01:E3:E1:4E:E0:E7:5A:A7:06:E4:99:1A:CA:1F:C6:28:41:5E:FC:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d25d2fbb-43b0-4aff-a009-be6f71990354.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.224.0/23
                  205.142.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:92:be:0e:6b:86:14:2e:36:18:7e:1d:4b:18:7b:fe:a0:
         ba:b3:a5:21:c2:59:9a:f6:70:37:51:34:2c:29:e8:06:82:2b:
         18:42:c7:b5:60:e8:86:eb:cc:d2:93:c1:46:06:b8:cc:df:41:
         9e:58:5e:87:de:1f:91:2d:96:2a:8c:7e:f2:5c:da:d8:93:75:
         cd:c8:03:a9:95:0f:20:b4:b0:e3:d0:eb:6c:f9:bb:ed:be:b1:
         a6:6a:19:96:bf:df:18:e1:51:79:14:64:f5:ac:81:86:e0:fd:
         32:eb:84:1e:bc:0a:98:5f:d8:25:13:f4:db:ca:21:55:61:5b:
         2f:bb:58:e4:1f:ed:ca:89:f6:25:c5:e1:d4:69:8a:ee:06:0c:
         61:46:ba:d8:a5:82:05:3b:e8:5e:c8:78:1f:67:5e:2b:1a:be:
         1e:b8:63:b0:ab:b1:24:41:a8:22:53:aa:2b:2f:61:a7:4c:fd:
         df:13:34:8b:44:78:e0:33:4f:49:fd:4c:a4:a9:ec:c0:8c:48:
         c4:2c:d0:90:4d:4e:fe:f6:2f:dc:7b:1b:1a:04:ca:8f:3a:af:
         bc:e1:3c:77:f8:0e:b8:fb:ba:3d:7f:ef:2f:b6:76:69:30:33:
         db:95:90:5f:71:3a:f8:92:32:a6:f3:76:4e:06:6f:0b:a1:6d:
         30:c4:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:25 2026 by rpki-client