Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa
File:                     b63804df-db1b-3db2-b74d-017430b1cdcf.roa (raw, json)
Hash identifier:          AMi7lo+A9NZNSWDDgNNHMP8q1DiKCOVzf4eMRpUa7dI=
Subject key identifier:   6A:47:4C:F9:A4:80:CF:4B:BD:98:02:04:F7:06:9C:C8:A3:24:23:B4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49763D01A9410A9472AB6580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     64267
IP address blocks:        52.124.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:3d:01:a9:41:0a:94:72:ab:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a8c60919-5be2-4574-8004-a041dc531885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:fe:68:e9:d0:a7:c3:50:72:51:89:20:23:
                    d9:cc:4f:00:e5:f1:1a:f8:0f:55:44:02:b8:d0:db:
                    ef:ce:00:68:a2:10:62:be:e3:46:28:25:34:4b:2d:
                    fb:a1:41:55:f8:39:09:c7:01:95:62:dc:67:1e:f7:
                    46:b0:fa:1e:41:c8:c6:1b:2f:a8:ed:d8:ee:0f:7f:
                    5c:51:fe:48:8c:37:ac:a9:04:67:67:c3:ae:b6:aa:
                    3d:3b:35:4c:6d:7a:1b:70:f6:16:4d:b9:76:1d:79:
                    06:fa:fe:67:ce:fc:06:71:8d:a6:0c:17:c7:36:b6:
                    be:f2:d9:95:a3:f3:bd:50:b5:f6:10:23:24:4e:74:
                    c1:ce:51:a7:a2:36:a1:04:d1:9a:b5:34:28:85:28:
                    31:a7:1d:bc:27:2c:c7:de:f9:10:c3:68:eb:f6:6b:
                    9f:31:ad:d9:a8:1a:7c:4d:a7:73:24:7d:c2:68:d3:
                    0c:eb:12:26:69:13:9e:49:e1:0c:dc:f5:63:a3:dc:
                    1d:33:20:54:74:f8:0f:23:5e:54:ef:24:63:01:1f:
                    67:bd:23:d7:a1:fa:e5:0f:84:93:46:37:01:05:6e:
                    4f:af:70:2e:02:15:9a:7a:10:99:ba:b9:52:c4:98:
                    18:11:04:0a:28:59:d7:40:68:59:50:19:13:c1:92:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:47:4C:F9:A4:80:CF:4B:BD:98:02:04:F7:06:9C:C8:A3:24:23:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:cf:2f:8b:8a:7e:12:e3:a7:2d:71:65:40:e8:9d:52:33:64:
         96:fd:8a:a1:70:c8:2e:ee:97:dc:3d:e0:0d:3e:29:43:58:76:
         3e:80:e3:33:71:73:f5:ea:14:23:31:4d:5e:27:44:48:58:77:
         c0:4b:2d:07:53:fb:b0:51:fd:45:2b:85:c3:9d:78:89:c1:8d:
         b3:31:e2:68:7f:8d:6e:2e:af:e9:c8:d0:cb:01:e4:90:b9:56:
         aa:0b:cf:bb:cf:3f:07:64:4b:b8:18:7f:2f:16:0d:5c:17:3f:
         01:b3:86:70:8c:e0:a5:53:e0:e1:76:67:d7:58:c0:6c:ac:10:
         00:f1:08:a2:ea:18:92:98:02:b1:51:8b:4d:6f:e5:43:3d:a9:
         75:96:16:27:55:d1:7f:29:57:c2:33:0c:64:f0:73:5d:29:cc:
         ab:48:49:bd:95:19:b9:18:6b:6a:50:f3:10:0b:86:35:9e:fd:
         f2:b3:31:7d:ac:7b:22:26:a2:74:2d:3b:62:29:3f:27:33:4b:
         de:08:ad:d1:99:b2:bb:62:22:35:d7:14:76:5b:30:b9:ea:55:
         25:29:a8:44:b7:bd:70:82:28:cf:ab:f5:18:75:9e:20:f4:a0:
         d2:88:f6:90:38:17:04:bb:d5:e6:f8:a4:1f:ea:3a:b8:48:c8:
         05:c4:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:57:38 2026 by rpki-client