Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/53997bcd-3b15-38b6-a316-4fb993d7182b.roa
File:                     53997bcd-3b15-38b6-a316-4fb993d7182b.roa (raw, json)
Hash identifier:          ketBUYqIChWkmIAiIFOvUmAoBK3Ahw6K4sPzwPYCrZA=
Subject key identifier:   50:78:84:CC:FE:F6:E1:4D:D1:44:D3:BA:07:91:32:AB:F2:3D:CF:DC
Certificate issuer:       /CN=52f53adc-637c-4f98-858f-551878f8a6bb
Certificate serial:       010D0C9F4328584DC4005299D36D282F7AB2EA40
Authority key identifier: 45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/53997bcd-3b15-38b6-a316-4fb993d7182b.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     54458
IP address blocks:        64.72.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:52:99:d3:6d:28:2f:7a:b2:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52f53adc-637c-4f98-858f-551878f8a6bb
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=0f45c591-7664-46aa-98cd-ec8cc7cf1b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:f6:b5:d2:22:33:32:05:c7:47:cc:6b:c1:
                    98:b8:b4:1a:54:ae:4b:08:7f:75:bc:d0:db:e4:8c:
                    5b:b4:da:21:ac:8e:8e:db:e9:08:36:a5:6e:3d:80:
                    28:21:ef:40:0a:14:a2:c5:a7:a6:20:39:a4:a1:66:
                    1d:35:2b:59:67:4b:69:50:d3:7e:cd:c0:48:c3:d3:
                    e7:9d:bb:bf:ee:e1:41:2d:fc:d6:ad:2b:f7:e1:7d:
                    05:f9:f3:ad:30:bd:bc:b8:db:aa:d6:0d:dc:fd:e7:
                    9b:4a:47:91:b3:08:47:d7:79:5a:28:a8:41:ec:48:
                    58:69:60:92:0e:ad:5f:4e:6f:a5:62:e8:f4:52:44:
                    6b:fc:02:c9:6d:96:36:6c:84:f0:02:ca:4d:4d:90:
                    c6:b5:90:2a:48:60:9f:4e:00:17:a2:bb:32:e2:aa:
                    e9:21:e2:54:cc:d6:6a:9c:83:72:9d:32:56:c7:6d:
                    ea:f9:a7:b3:c7:59:e2:90:d7:60:d7:ae:f3:dd:78:
                    47:07:75:7e:d9:50:49:47:1d:12:e1:19:c7:ce:f5:
                    ed:7e:c1:5f:89:c0:80:50:4e:51:67:7b:64:ee:bd:
                    38:73:3c:f2:0b:bb:6e:f8:86:0f:f9:49:f8:00:e4:
                    30:12:73:50:68:6c:ef:3c:47:02:da:d4:c7:58:53:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:84:CC:FE:F6:E1:4D:D1:44:D3:BA:07:91:32:AB:F2:3D:CF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/53997bcd-3b15-38b6-a316-4fb993d7182b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl

            X509v3 Authority Key Identifier:
                keyid:45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:a4:3b:e6:a7:fb:cf:8a:53:70:d7:ad:dd:d3:4b:47:32:
         3d:a2:bc:64:12:cc:29:dc:4a:e2:ce:8d:69:42:12:fa:c3:cb:
         60:18:7b:67:ca:57:9e:94:89:31:d5:8f:20:28:75:62:77:17:
         2b:ba:fe:ac:e2:bf:45:66:75:43:83:4d:5a:24:ec:9c:85:79:
         bb:57:f6:82:f4:8a:f4:c8:c5:8a:d4:8a:95:0f:5d:74:ec:25:
         24:ae:da:c3:af:7e:ed:d5:24:ed:42:c0:aa:f9:2d:9a:6e:aa:
         cf:f5:db:b2:58:0a:77:fb:5b:72:36:59:ab:6b:cb:de:b9:11:
         59:ff:b6:a7:55:81:c7:63:0a:09:ff:24:08:00:38:9b:db:0d:
         9d:ae:47:d6:14:50:92:20:1b:6e:4d:c8:7c:08:9f:0b:23:fb:
         fa:dc:b1:c9:75:19:72:f8:da:dc:7f:d3:7c:16:bb:7d:63:ae:
         f5:a6:c3:44:2d:3f:b3:61:fa:77:83:63:b8:e7:c0:08:d6:15:
         99:95:9d:ae:5f:cf:25:e8:78:e9:e9:b6:60:7e:4e:31:8d:36:
         9b:95:6f:96:08:ba:ee:86:45:2f:59:25:2f:4d:f6:74:55:f6:
         c8:1d:f3:49:6d:0c:ed:8e:92:ca:ab:cd:17:ec:b8:48:e5:fd:
         f0:d0:38:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:11 2026 by rpki-client