Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa
File:                     99c1ce01-1f7c-33d7-a936-a9f228586f15.roa (raw, json)
Hash identifier:          QpI5zR8E5M3kKWGjUNgzxqRhHItFskln1Xvzn3oqQuw=
Subject key identifier:   22:D9:C7:C3:6F:22:3A:A7:E9:7F:62:A2:C1:9C:A4:E2:62:0D:37:A3
Certificate issuer:       /CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
Certificate serial:       010D0C9F4328584F225D09494485CADBA672A0C0
Authority key identifier: 69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     4785
IP address blocks:        167.88.182.0/24 maxlen: 24
                          167.88.183.0/24 maxlen: 24
                          167.88.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:09:49:44:85:ca:db:a6:72:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52cd663-63ec-4bd4-8516-40b4bfe624c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=b9732058-45f0-4ad2-8e94-b61e8df6017a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:37:72:2d:86:3e:e4:71:0b:61:63:ce:40:
                    79:94:19:ef:c7:81:fa:09:48:7f:86:4a:97:4a:d8:
                    d4:6b:b7:90:c1:28:1e:d3:3b:fc:a2:cd:a8:1f:10:
                    3d:35:8c:f5:bb:02:3c:6b:3d:af:19:40:6d:43:70:
                    fc:2b:2d:2a:00:fc:6d:68:35:18:40:a2:2a:b0:1e:
                    9d:36:70:e9:88:ce:91:22:fa:2c:81:cc:dd:f7:0e:
                    a5:8b:9e:e1:fc:f9:b0:3a:0f:72:e7:dd:cb:ab:68:
                    e9:30:4e:0a:d1:02:c5:7d:4b:45:07:08:69:69:30:
                    ec:b2:13:ab:d4:f4:34:76:9e:36:3d:e6:9e:0b:07:
                    1f:59:e5:5e:f3:f9:73:6f:4a:0c:6f:28:c1:42:82:
                    dc:43:79:69:35:28:ae:12:db:85:11:57:ed:3b:b9:
                    17:49:de:fd:0f:a4:33:97:30:de:6c:5a:a5:52:a6:
                    14:f4:08:88:4a:93:67:75:f6:70:d4:63:bf:61:cf:
                    48:a1:53:72:6c:a2:ba:c7:37:48:aa:d8:25:99:67:
                    b1:f7:41:3e:1d:e7:a1:38:25:9a:bb:44:b6:41:47:
                    44:5f:6e:e6:e1:0b:a2:7d:cc:9e:80:df:ea:60:f4:
                    be:d9:e2:c4:6e:12:f7:3e:19:c8:be:22:45:e5:7c:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:C7:C3:6F:22:3A:A7:E9:7F:62:A2:C1:9C:A4:E2:62:0D:37:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/99c1ce01-1f7c-33d7-a936-a9f228586f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2/c52cd663-63ec-4bd4-8516-40b4bfe624c2.crl

            X509v3 Authority Key Identifier:
                keyid:69:58:46:39:7A:D5:9A:8C:FA:65:B4:9A:C3:C5:F3:77:C1:0A:D2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c52cd663-63ec-4bd4-8516-40b4bfe624c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.182.0-167.88.184.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:0f:b4:38:a9:24:5f:fc:bc:73:29:00:9c:23:ec:d9:6a:
         46:c2:cc:dc:77:bb:ce:3b:3a:d7:09:1f:99:44:c8:da:95:96:
         c7:68:df:25:0f:20:18:6d:a1:c0:fb:37:68:7e:ae:a7:0d:55:
         bd:00:f4:2d:a8:b9:ff:41:dc:99:8b:b2:7c:22:51:5c:ad:38:
         4b:08:4a:1c:57:e2:bc:b7:4c:98:c0:e3:1d:de:80:c1:21:b8:
         0c:ca:ce:f5:cc:e9:44:45:da:b5:91:a4:62:bd:c7:19:1e:ab:
         2e:e2:d2:72:4e:89:09:78:58:d3:c0:9c:f7:58:a4:83:21:50:
         4e:cf:fd:97:52:d2:f1:71:a3:13:12:66:70:fa:be:4e:87:4a:
         46:86:5b:fb:32:ce:ca:ff:22:a2:7f:5b:fe:3d:73:2e:05:aa:
         f7:54:87:3d:b1:cc:0b:d5:15:af:3c:bc:7d:e4:e9:62:91:c7:
         64:bb:a8:4e:37:21:7e:a0:42:a1:d3:60:78:67:7a:1a:29:58:
         41:b5:7f:d4:e0:0c:e1:35:9c:66:61:b2:82:cd:2f:4e:e4:f7:
         4f:04:fa:46:61:8d:29:c5:e9:0a:74:f9:b1:87:a2:81:81:f1:
         49:b3:a4:3f:d1:e8:2c:9e:b9:07:98:05:c3:ee:d5:a9:00:bd:
         b0:e7:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:05:06 2026 by rpki-client