Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
File:                     51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa (raw, json)
Hash identifier:          Wuw1OQ2HNJsdXZPZEFuktYWSlalEeU3EPgTHV5U79+o=
Subject key identifier:   EA:73:65:EC:3B:31:11:F2:C4:00:8D:30:87:3E:44:5F:0A:0D:7C:E0
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584DBFD07C1A5F4DC204EC49FEDC
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     11325
IP address blocks:        172.85.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7c:1a:5f:4d:c2:04:ec:49:fe:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=e01a97a9-b384-43d2-acc0-07a3ae74f099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:29:9f:e1:44:59:52:d0:81:e1:5a:0d:0e:
                    e3:c8:0a:4c:e0:27:fe:75:55:21:ac:0b:e0:44:89:
                    c6:7e:d5:3c:42:71:b0:f5:a0:5f:3d:2f:18:d8:7e:
                    bc:ef:be:61:e0:fe:c4:e5:83:e2:3a:61:c0:26:e3:
                    d1:e7:47:82:ba:51:90:1b:cd:ee:a5:29:11:94:2f:
                    18:28:23:f5:44:dd:b3:e5:e4:cd:ac:d3:2d:c0:f6:
                    3b:9e:3f:41:21:e5:0a:9e:e3:fe:14:74:20:9f:3f:
                    82:23:09:84:41:ea:b5:eb:73:05:b6:59:b4:79:8f:
                    58:ee:70:06:e3:6f:b0:0c:9a:ba:3d:5f:2d:1b:21:
                    ee:db:77:19:84:7c:b5:76:41:f7:68:8f:9e:93:7b:
                    7e:a3:7e:48:de:4e:4d:a4:37:87:44:9c:9b:cb:20:
                    90:e9:4e:6d:96:64:8e:60:bf:b4:44:24:eb:6d:85:
                    55:ae:a9:8d:b2:92:75:4b:4e:c2:89:36:50:d8:c3:
                    e4:0e:a3:66:9a:7d:9b:d8:53:0a:e7:59:1f:15:2e:
                    f1:11:ce:4a:ea:97:a0:b2:27:61:6f:01:be:38:02:
                    2e:f0:d0:c8:f8:8e:e3:9a:6c:d0:7f:78:d6:7a:c8:
                    b6:16:fa:07:e0:33:7f:df:93:91:12:2a:99:f6:28:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:73:65:EC:3B:31:11:F2:C4:00:8D:30:87:3E:44:5F:0A:0D:7C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:0c:1e:da:4a:a3:3a:5c:ad:7d:62:33:ff:21:0b:01:83:50:
         d3:c4:7d:b6:eb:6c:a7:c9:bc:26:51:2c:20:cd:8b:a0:bf:3b:
         41:88:52:74:9c:98:23:0d:30:d7:04:fd:46:58:72:73:6e:cf:
         2b:92:d3:1e:18:43:5f:3c:08:fe:b5:05:50:85:4c:0f:eb:c7:
         d0:76:56:9d:7c:84:19:65:f0:e3:5e:f5:ca:21:4a:ed:d5:ea:
         5c:1b:d8:5d:9d:df:e1:8e:1b:3a:c6:97:50:51:bb:14:78:be:
         17:0c:bb:97:99:3d:c9:fa:71:bd:d8:9c:ac:03:da:dc:f4:b5:
         d5:23:7a:7e:14:97:6d:62:71:b5:04:8a:16:ed:c9:cb:e7:c8:
         bd:53:df:02:30:ef:e1:83:fa:cb:2a:f0:a2:d1:ba:4f:e2:9e:
         2c:27:88:01:57:75:26:ac:52:bb:e2:e2:51:e4:3e:f6:e2:22:
         05:c5:43:19:d8:db:18:95:3d:65:9b:54:8b:a1:c0:f7:2a:93:
         f6:7f:fb:a9:9a:3f:c8:f0:b2:51:02:33:4d:fe:39:13:2e:d4:
         d8:88:d4:7f:eb:b8:76:05:42:a0:3a:7a:9b:6c:1b:37:a9:45:
         98:f2:fd:5b:64:ff:8d:1f:bf:40:f3:50:9e:85:11:75:cd:42:
         20:75:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:15 2026 by rpki-client