Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa
File:                     52f7b9e6-df79-3baa-ac0e-2834076abe44.roa (raw, json)
Hash identifier:          7Fak0Frwe8tw2X7YQ9JXzYpxJNR1wf/nMcyW9fB0guU=
Subject key identifier:   A1:F6:B9:6B:F3:60:97:1B:F1:77:90:F7:EC:ED:50:52:65:38:06:07
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F4328584E5A49FFD8DEDF19623F19C000
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     23188
IP address blocks:        199.102.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ff:d8:de:df:19:62:3f:19:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=86e74fc0-ba47-4312-9012-4833af44533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:c8:f6:3b:39:28:90:ad:89:49:68:5e:99:
                    3a:1d:b4:4a:1c:1d:78:09:e3:2b:e7:ae:0b:30:de:
                    7e:09:e7:97:71:6b:fc:88:5d:56:51:1a:c7:fd:ca:
                    c1:62:fe:9d:ff:12:54:fb:c0:e1:81:66:e2:0f:b6:
                    be:a9:cc:a6:29:b3:43:8b:8a:59:8a:39:8c:4a:5a:
                    5b:ae:c7:df:f5:ce:0a:17:97:c5:ed:c3:08:d9:2a:
                    cc:cf:44:16:be:d4:39:de:61:82:86:9a:a2:3b:e4:
                    7c:17:78:03:5a:9f:94:34:ba:a7:37:a0:b1:b9:4f:
                    bf:40:65:19:7d:f7:09:df:82:9f:7d:7e:d8:51:56:
                    18:ba:12:b6:f1:86:09:07:58:c7:66:09:39:04:08:
                    5d:a4:34:2a:c3:3c:15:a0:ea:c4:72:aa:13:76:29:
                    e3:92:87:f3:f6:20:36:8a:66:a4:a1:9c:22:b7:86:
                    2c:68:0f:a0:ea:ca:78:41:b3:8a:2b:83:34:3b:aa:
                    37:71:fa:b5:71:57:59:33:66:7c:97:e3:53:45:d1:
                    22:89:02:9a:14:2e:f2:18:f0:ef:fa:7f:03:6a:46:
                    4f:1d:bd:3e:36:f1:23:3f:d3:5c:e5:fc:b7:e7:44:
                    5c:ef:04:f4:f5:16:fb:70:a1:35:6c:59:c2:81:a7:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:B9:6B:F3:60:97:1B:F1:77:90:F7:EC:ED:50:52:65:38:06:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/52f7b9e6-df79-3baa-ac0e-2834076abe44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:14:af:94:8f:6d:13:1c:4c:ee:9d:11:99:93:90:1d:e2:e5:
         02:07:82:75:b4:74:d3:c9:10:a0:86:65:3f:fc:5b:33:8a:18:
         a8:8e:26:12:55:e6:c7:17:09:1e:3f:03:02:61:d5:18:fe:87:
         2f:2c:b3:e9:ba:e4:c8:2c:e3:69:fc:44:0e:d6:50:3f:81:de:
         a0:22:97:19:9b:5b:f4:a5:df:22:e2:de:7e:62:e3:de:b3:fa:
         e7:b3:15:3d:c0:68:aa:43:00:23:a3:70:ae:f1:11:dd:21:64:
         01:6a:0e:de:a3:5e:c1:cb:d0:35:d1:5c:b9:c5:8a:42:74:dc:
         84:c8:31:5d:3b:8b:1b:c1:1c:6c:80:95:c9:95:7d:40:e0:9b:
         eb:df:7f:48:fe:c5:5e:30:ab:c9:bd:7b:c6:85:1f:22:03:9f:
         ad:5b:30:e8:a5:52:79:a7:e6:ed:b1:84:83:29:25:3f:2c:89:
         13:18:3e:bc:df:26:f8:06:ae:68:d9:89:59:34:d4:ab:b2:4f:
         f4:5e:f6:dc:bf:ec:e0:f8:6a:cd:f7:3f:e8:e2:d9:ac:a0:1a:
         a9:a4:92:f2:89:a3:ab:5a:d2:41:73:44:50:ee:8d:5a:52:0c:
         77:e4:35:9d:4e:6f:dd:07:a0:35:37:3d:72:c5:aa:67:e9:e6:
         53:60:10:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSf/Y3t8ZYj8ZwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj
MzI1MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
ODZlNzRmYzAtYmE0Ny00MzEyLTkwMTItNDgzM2FmNDQ1MzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNvI9js5KJCtiUloXpk6HbRKHB14CeMr564L
MN5+CeeXcWv8iF1WURrH/crBYv6d/xJU+8DhgWbiD7a+qcymKbNDi4pZijmMSlpb
rsff9c4KF5fF7cMI2SrMz0QWvtQ53mGChpqiO+R8F3gDWp+UNLqnN6CxuU+/QGUZ
ffcJ34KffX7YUVYYuhK28YYJB1jHZgk5BAhdpDQqwzwVoOrEcqoTdinjkofz9iA2
imakoZwit4YsaA+g6sp4QbOKK4M0O6o3cfq1cVdZM2Z8l+NTRdEiiQKaFC7yGPDv
+n8DakZPHb0+NvEjP9Nc5fy350Rc7wT09Rb7cKE1bFnCgafyDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKH2uWvzYJcb8XeQ9+ztUFJlOAYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx
M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvNTJmN2I5ZTYtZGY3OS0z
YmFhLWFjMGUtMjgzNDA3NmFiZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1
NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy
YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez
NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2aYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgUr5SPbRMcTO6dEZmTkB3i5QIHgnW0dNPJEKCGZT/8WzOKGKiOJhJV
5scXCR4/AwJh1Rj+hy8ss+m65Mgs42n8RA7WUD+B3qAilxmbW/Sl3yLi3n5i496z
+uezFT3AaKpDACOjcK7xEd0hZAFqDt6jXsHL0DXRXLnFikJ03ITIMV07ixvBHGyA
lcmVfUDgm+vff0j+xV4wq8m9e8aFHyIDn61bMOilUnmn5u2xhIMpJT8siRMYPrzf
JvgGrmjZiVk01KuyT/Re9ty/7OD4as33P+ji2aygGqmkkvKJo6ta0kFzRFDujVpS
DHfkNZ1Ob90HoDU3PXLFqmfp5lNgEHY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:33 2026 by rpki-client