Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa
File:                     4d983f32-c282-3d5e-a0d3-f5c04628889d.roa (raw, json)
Hash identifier:          QoE0G6uddV72iq9lZJQEoVCrkiNrxoSR1QzYgCWoLqU=
Subject key identifier:   C9:18:1D:37:5A:A6:FD:EF:6E:79:45:61:37:31:73:F3:24:ED:75:F8
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584D3DFFAA268C4A2F4E4F404480
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        208.52.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:aa:26:8c:4a:2f:4e:4f:40:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=6f59a0cf-f856-4827-bd6a-17b91de8e9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:c1:80:a4:12:51:07:2e:97:42:04:c5:e8:
                    61:a2:ed:60:58:09:a4:48:8f:b7:8f:fa:e4:fa:1c:
                    b9:98:46:c8:9d:9a:ba:30:d3:a9:d0:c0:0c:d0:c9:
                    84:35:86:f6:95:90:ea:23:8d:3d:b7:e1:25:aa:85:
                    27:16:e0:42:24:8a:b9:db:78:d1:d3:9d:ad:5c:1f:
                    c9:18:d3:60:ef:36:c7:a0:6f:ca:ae:a5:19:07:cc:
                    6c:1b:ac:9c:92:f3:2f:19:4a:d7:bc:02:c8:09:f4:
                    4e:1f:dd:e4:11:09:94:e3:9f:58:fa:4a:1f:9b:0d:
                    79:b5:a1:5a:e9:c7:77:d9:51:e9:b7:82:f3:6d:f5:
                    e3:16:c6:3a:f5:cf:96:10:6e:cc:c4:7d:93:f1:1c:
                    07:5d:82:f3:27:d8:6f:d4:5e:74:2e:36:bb:d0:a4:
                    fd:ae:79:ce:bc:38:e4:ce:55:8d:7d:7e:f0:7c:f7:
                    54:07:ab:5b:3d:05:89:19:17:9e:d5:9b:c2:67:76:
                    70:cc:5d:ab:e1:ff:cb:45:89:fc:ff:43:d7:55:2a:
                    b0:1d:d2:42:fc:b5:91:a0:ab:77:d6:8b:e9:f0:f7:
                    99:61:72:f7:9c:f0:28:1d:26:d2:1a:81:b4:40:e4:
                    d9:6f:09:55:55:7e:c2:0f:70:8d:ae:32:80:4e:c2:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:18:1D:37:5A:A6:FD:EF:6E:79:45:61:37:31:73:F3:24:ED:75:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:0a:ed:ce:df:de:05:39:4a:72:8c:db:e4:8f:74:d3:d8:
         01:da:4e:99:47:74:36:69:38:e4:56:a8:0e:ed:3f:aa:08:b2:
         77:03:71:f1:44:77:4c:0e:52:c4:b5:c2:9a:a5:e4:20:69:a3:
         da:c7:13:81:98:d8:76:d1:fb:a5:72:f7:ac:a1:6f:71:74:87:
         07:1b:0f:84:cb:00:4b:eb:2a:23:d3:ea:9c:8e:49:da:c2:5a:
         61:7a:a9:bd:6e:d4:f6:a2:71:e4:14:f1:a6:65:5f:97:55:84:
         17:e8:a9:0b:36:7e:f4:c0:02:34:df:a9:a5:75:d5:04:60:20:
         11:b9:d2:98:c1:68:1e:83:03:71:e6:16:d0:2c:e6:f2:7a:7d:
         e1:64:39:71:33:52:c8:71:fc:f4:db:bd:8b:5b:3b:63:09:2b:
         9a:fc:28:49:93:bb:aa:6f:c8:e4:19:d2:de:49:43:e8:8d:b6:
         18:2b:5a:e9:33:aa:ff:2c:8d:ba:e7:26:be:48:5e:12:9e:79:
         02:ba:be:59:e6:b3:7e:ed:d5:50:85:4b:72:e4:3d:6c:cd:0a:
         04:4e:2f:dc:b9:37:5f:4d:c7:5a:14:32:88:d2:97:71:74:82:
         d6:67:f6:75:c0:df:03:a4:a5:92:94:4f:7b:9a:79:f6:9f:3e:
         f7:c4:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:57 2026 by rpki-client