Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa
File:                     5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa (raw, json)
Hash identifier:          lJ3zQ34xaK9QZZtuentJxZjaZKY9e4q4yToU2N8BIQ4=
Subject key identifier:   12:9D:05:83:97:A0:86:9B:2D:F3:D6:DD:BA:D0:6E:45:D0:87:98:E3
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584DCC60658BA0E24321E2820380
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     46265
IP address blocks:        208.52.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:65:8b:a0:e2:43:21:e2:82:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=f531922e-cbb7-411e-bcea-138d1d8b5630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:96:e2:67:c4:7b:4a:9a:87:92:14:27:65:
                    91:a9:49:93:38:9d:38:ae:54:35:f3:85:8f:02:c7:
                    3c:7b:80:d3:92:8a:09:de:82:ff:d2:53:d1:ed:69:
                    64:a3:5b:54:3f:b5:0e:67:71:6a:47:d0:9f:49:d5:
                    b6:7e:7b:f8:83:23:7a:ea:70:dc:97:51:8d:b4:14:
                    40:f7:45:c0:7f:ba:30:5d:57:bf:bd:be:96:2d:56:
                    d3:eb:51:37:81:71:d8:3b:61:72:f4:c0:2f:bf:88:
                    6d:c3:e0:6c:89:e9:34:18:3c:53:42:bc:67:a4:1a:
                    31:24:1c:51:d0:ab:e1:5b:6a:27:a7:49:31:12:68:
                    3b:50:6a:b6:a0:56:da:61:c7:95:2b:5b:b7:c2:a3:
                    95:66:70:97:ff:9a:02:78:d3:a2:2a:99:42:dd:b2:
                    a3:e9:7c:ea:bc:44:62:7f:40:64:18:3d:c1:7f:5a:
                    a5:88:03:e6:72:9b:eb:42:0e:fa:56:5c:bf:1a:01:
                    a1:1b:fb:17:6f:4c:24:08:b1:ee:e1:1f:f2:5a:b0:
                    56:8e:17:cc:6e:67:8a:87:13:3a:e5:7d:e2:ad:3f:
                    76:03:89:7e:b4:26:26:91:c9:8b:93:cc:19:a3:e8:
                    e2:60:03:32:94:57:45:5d:11:00:d1:be:c9:d5:50:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9D:05:83:97:A0:86:9B:2D:F3:D6:DD:BA:D0:6E:45:D0:87:98:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3b:7c:84:9a:90:12:82:70:97:21:37:6b:18:97:59:7c:5d:
         c7:f7:aa:f7:03:09:7e:2e:62:eb:64:33:f6:ef:e8:d1:47:3d:
         1c:54:62:ba:a7:25:8c:65:0d:b1:23:23:4f:ad:e7:95:10:a0:
         52:b7:7c:af:8d:c7:d0:01:39:05:e4:04:ba:ba:a5:56:f4:be:
         05:20:a5:be:6c:88:e6:c9:18:a6:a0:b0:d1:b8:09:cb:55:89:
         3c:3f:a2:66:33:55:50:0e:cc:b6:5a:ef:74:b5:e5:0e:4b:15:
         03:c4:6b:8d:0a:77:f6:d9:d9:52:5d:e7:5d:20:fa:15:66:4a:
         43:eb:c1:e6:1a:96:c9:81:22:0e:34:f2:ed:10:ba:5c:be:5d:
         2b:30:9a:15:ed:e7:24:0a:78:6f:68:b4:03:6c:f0:e8:fb:8f:
         d2:d6:58:7b:58:76:2c:0b:c0:46:44:2d:9a:b9:83:dd:0d:f7:
         2e:89:ad:61:40:30:b1:3e:92:a0:08:8d:cf:f1:f1:0a:21:63:
         50:11:a5:bf:aa:2a:92:13:98:0a:2d:1c:3e:57:a4:7e:d7:44:
         0e:fb:47:79:5c:bb:e3:16:2b:49:46:ea:61:c5:98:26:1d:c3:
         6e:28:a5:88:22:9e:cf:f9:19:78:2a:d3:5c:18:19:13:be:52:
         b4:14:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:04:56 2026 by rpki-client