Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/51f27de1-ca38-3ced-99a7-67bd2a6deeb8.roa
File:                     51f27de1-ca38-3ced-99a7-67bd2a6deeb8.roa (raw, json)
Hash identifier:          d1yutCR1IsqLUel3+CuXYASBy5kJG4W79EZWykltwEI=
Subject key identifier:   DD:81:82:62:E3:9E:D4:8D:F8:4C:A4:F1:66:A9:FB:81:DE:F4:BB:DA
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA76AAA0DD6A9B8A3565B0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/51f27de1-ca38-3ced-99a7-67bd2a6deeb8.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        157.52.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:76:aa:a0:dd:6a:9b:8a:35:65:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=3bed4c7c-82ee-4b02-ab78-fe56581d3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:de:6d:37:21:f0:2d:d8:de:49:23:d0:6d:
                    ab:a2:29:d2:ef:cb:40:a6:9d:6e:3a:51:68:08:24:
                    6f:b4:26:a7:91:72:b8:bc:a9:0b:84:f1:70:6f:08:
                    8a:c7:9c:43:ad:27:44:0a:47:4c:fa:48:d6:9e:c0:
                    96:ea:4c:3a:7c:2b:f5:2b:df:d6:8f:a8:d9:b5:8b:
                    45:04:4c:cd:e3:b6:ba:34:7c:70:0c:24:df:a7:43:
                    99:bd:f1:89:f4:87:13:09:e6:ed:11:38:2f:45:db:
                    2e:87:df:ae:e6:ed:dd:d0:fb:c1:83:62:7a:93:16:
                    a5:4e:ee:89:98:76:c7:ab:b3:6b:3f:9d:8b:d5:bf:
                    05:0a:b8:9f:e8:05:0a:88:c9:78:8c:d7:90:c1:65:
                    27:93:23:fa:d5:f6:08:82:8e:f1:78:74:90:27:9e:
                    2a:fd:0c:1d:94:25:c8:f8:c9:49:13:38:33:7a:b7:
                    05:a7:8a:02:b8:a1:81:47:20:e3:09:03:26:1a:de:
                    32:7c:12:46:32:a8:54:3f:ac:8f:ba:0a:56:c2:67:
                    2d:0e:bc:fd:58:03:28:4e:fe:47:56:24:c9:0b:7c:
                    8d:87:ae:5c:95:25:7e:af:67:e2:24:50:23:9e:91:
                    5e:e2:13:33:21:d6:f1:4e:a1:28:c4:3b:f5:00:3e:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:81:82:62:E3:9E:D4:8D:F8:4C:A4:F1:66:A9:FB:81:DE:F4:BB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/51f27de1-ca38-3ced-99a7-67bd2a6deeb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:13:14:48:f6:1c:6b:c1:6e:00:87:02:40:9f:ae:db:ff:
         a9:a4:03:ba:1d:0a:55:06:0e:3a:32:04:c2:38:5d:33:3e:a5:
         11:12:d6:50:f3:6a:19:06:73:36:d9:ad:3c:3a:2e:4a:2f:bc:
         89:d7:a6:4f:a2:e8:0a:1f:10:f7:65:e2:09:14:d5:1b:62:54:
         2e:3c:a4:22:f2:0f:7a:fb:9c:b0:7c:9e:af:d8:d9:a3:7d:e4:
         2c:34:87:ed:c0:4a:b5:9b:26:ba:2c:ce:1e:56:bf:4b:06:2c:
         9c:e7:8e:13:88:c2:a2:49:65:2b:6b:45:7a:87:da:ba:d9:31:
         db:f6:b5:aa:47:2a:80:4c:29:f5:09:72:96:a6:4a:81:a9:b7:
         e2:84:29:b3:2a:84:5c:d4:d8:95:5b:0a:47:93:33:40:18:d3:
         67:97:94:8d:0a:c2:53:a8:6e:e4:fa:ba:ea:d9:34:f5:5b:3e:
         82:ec:0f:04:4f:b8:35:7f:89:df:fc:ab:d2:34:8d:87:5b:f4:
         4a:bc:5c:a0:28:22:78:b4:8f:1f:05:ed:cf:67:7c:95:66:45:
         a1:49:ef:f6:44:98:37:60:24:a6:6a:59:27:59:b2:2b:4c:c4:
         e4:5f:fa:20:2f:31:93:d1:19:50:1d:b0:42:00:90:48:54:2a:
         39:c2:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:50 2026 by rpki-client