Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
File:                     52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa (raw, json)
Hash identifier:          q3lL3SnUuLv/VfhK8XPei3CXKrMbsixMQb5frjSd114=
Subject key identifier:   1D:5C:7F:21:43:F4:4B:7E:A3:10:B7:CA:D8:6A:FB:4B:04:00:81:0F
Certificate issuer:       /CN=cf6e862f-83c2-4143-b47a-74db6f210162
Certificate serial:       010D0C9F4328584E2D9F20492111E52F30A651C0
Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     400034
IP address blocks:        165.140.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:20:49:21:11:e5:2f:30:a6:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=685c318b-4d74-4c3c-9086-8369507e64c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:95:61:e8:dd:8c:24:5e:76:11:e8:a0:8b:
                    87:4d:df:3b:2d:1f:72:cd:bd:2c:c6:b7:1b:1a:36:
                    a2:e8:b7:6e:ba:91:34:4c:e6:c7:b1:c2:34:55:c9:
                    0f:93:78:02:70:1a:63:0c:cf:1e:56:17:20:56:d8:
                    da:dd:e2:9f:3f:72:38:42:dd:d1:13:b3:3a:bc:f5:
                    43:21:2a:e8:91:39:64:78:50:c3:6e:a7:51:29:30:
                    6f:a7:c3:b3:72:7d:1e:91:59:3a:2a:5c:84:7a:e4:
                    a7:58:50:a4:0e:5d:ab:a0:97:4e:d8:55:6a:5e:29:
                    e7:c6:36:91:2f:41:77:4b:2f:83:da:6c:2b:0e:b5:
                    69:06:b7:4f:a1:28:72:bc:c2:1d:95:b8:fe:f8:ae:
                    8d:c9:73:bb:ac:4d:cb:54:11:4a:d4:eb:41:00:86:
                    c5:2c:da:35:34:20:5d:06:4c:1d:92:d7:bb:0b:49:
                    81:17:01:da:7c:ea:88:04:6d:53:40:31:6c:7f:99:
                    9c:cd:67:3b:1e:d8:7b:01:c4:a7:77:b1:59:07:41:
                    e4:44:ea:ca:40:b1:1e:28:ab:5a:db:d3:f0:da:30:
                    97:14:67:c9:90:29:96:72:b7:40:38:be:97:29:ce:
                    71:9a:51:39:f9:3c:1d:b5:45:ca:aa:e8:78:ea:22:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:7F:21:43:F4:4B:7E:A3:10:B7:CA:D8:6A:FB:4B:04:00:81:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/52b0c26c-9fd5-3df2-96ce-105ee94f94f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:8c:16:d5:54:58:f0:c6:59:39:b2:fd:9a:b4:80:47:61:
         45:48:34:0c:d1:ae:0d:6d:03:5c:02:0f:9e:4b:72:cd:96:51:
         24:1c:9c:67:fd:0a:52:a3:e6:00:65:b1:a9:75:6d:38:8f:06:
         46:1e:1c:d7:62:fe:48:42:fc:ef:c0:da:98:e0:c7:98:a6:3d:
         6e:95:76:cf:d4:29:14:d5:ea:af:d2:34:f3:ac:6b:2a:e0:42:
         a6:70:19:e5:55:23:f2:ef:99:8c:25:e3:19:8c:4a:a6:fe:57:
         d0:c5:22:bd:b9:25:08:d6:c5:39:89:a1:97:c3:32:c4:1e:d8:
         4d:85:bb:2a:5e:4c:5a:14:4e:9d:6f:d0:52:26:40:ec:dc:de:
         2e:e9:49:54:2e:da:ed:2e:f5:f0:69:fd:d8:5d:65:98:15:0b:
         96:ce:a2:d9:6f:11:04:2a:65:7f:e3:be:a5:7e:44:68:a7:2d:
         72:06:f9:bf:df:33:db:86:92:87:9b:48:4b:0f:82:12:3b:1a:
         4e:24:66:87:1d:94:3a:00:69:db:21:4b:93:af:46:5c:7a:a6:
         b7:9e:05:0e:3d:ac:5f:8d:fd:b3:38:fe:e3:4d:ac:c2:21:ea:
         b3:39:d6:43:3e:ec:b7:aa:01:ad:db:a4:94:7b:72:5b:5e:6b:
         c6:df:de:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:09 2026 by rpki-client