Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa
File:                     f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa (raw, json)
Hash identifier:          T23d9QcohJ7G/SRCORPDxQqy+3W92DVuNV0O5R/iVPI=
Subject key identifier:   52:EA:C7:C7:27:06:B4:44:DE:11:0A:52:61:90:74:6A:EA:96:FB:0A
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584DA11ABE9BD03976E44C4FA880
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     399275
IP address blocks:        172.81.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:be:9b:d0:39:76:e4:4c:4f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=450fde35-64ae-45a5-baba-afbaded6a7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:c1:a1:6e:77:39:17:08:ca:e7:fc:a1:d7:
                    4e:e3:8b:6c:22:d1:2f:5f:5f:55:a4:f0:52:d3:1c:
                    c7:25:a7:21:d1:c6:85:b8:e4:74:a6:dd:bf:77:2c:
                    d3:e2:ee:5f:ee:a6:45:82:29:bb:33:55:e3:88:1e:
                    b2:82:43:e4:a1:13:68:f9:44:05:f2:0a:d8:08:6c:
                    21:6e:a3:51:02:2a:fb:51:04:aa:82:3a:77:08:2c:
                    b8:2c:b5:20:91:8e:e0:b7:83:1a:75:2b:26:20:ae:
                    dc:58:36:a2:f6:c1:f5:b9:7b:62:bd:47:ea:5f:f1:
                    b4:49:68:19:34:79:d4:ca:dd:12:56:88:f5:1a:86:
                    ed:8a:d7:04:0d:79:9b:cc:59:5c:9b:4e:2a:ed:ee:
                    be:d8:67:a8:de:c7:9a:f9:a0:74:94:19:4c:d3:e0:
                    d6:70:49:9c:ad:18:e5:76:f3:65:20:54:9d:c4:da:
                    a3:d3:46:e9:38:5b:24:a8:b8:d8:37:16:f5:28:15:
                    a8:6b:46:45:83:ce:06:ec:6f:b0:c8:40:21:d9:82:
                    c1:eb:6b:0a:9e:e6:6f:49:06:01:5f:ed:ed:f3:0f:
                    e8:5f:7c:67:04:be:de:d7:7b:3e:ca:a1:7d:fd:61:
                    66:e5:a1:55:ee:c6:e5:23:bf:e9:30:e7:ff:8c:5e:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:C7:C7:27:06:B4:44:DE:11:0A:52:61:90:74:6A:EA:96:FB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f25bff96-ecfb-3faa-943a-2e09d0bb0c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:fe:06:5b:b4:97:fa:f6:2e:44:06:97:0a:da:b3:5f:5f:
         7e:a3:08:67:1a:16:40:f8:28:3c:4c:e5:83:83:5f:17:7d:99:
         3e:18:5d:aa:34:72:56:b3:cd:5c:e3:00:4e:c2:fe:3e:02:f9:
         cf:aa:6e:d7:e5:52:70:cd:60:1e:18:35:54:6b:f4:60:50:aa:
         98:53:b5:0e:94:1a:61:8d:16:66:55:25:10:20:5c:7b:af:e3:
         a9:0a:09:73:10:15:90:70:77:99:aa:45:3a:a6:7c:ba:ec:27:
         f4:d5:a5:4f:74:ba:8e:e6:83:eb:69:a9:f5:07:39:66:62:ab:
         9f:72:8d:f8:00:d8:e8:c0:58:89:8f:00:16:af:82:11:8c:51:
         46:15:85:8e:d9:a1:13:17:ab:26:71:b5:a5:68:b4:63:98:48:
         15:d4:69:ef:00:fd:73:1f:a6:cf:f3:00:24:6b:a3:14:b8:16:
         da:bd:9d:35:23:b0:a0:70:9e:bc:44:03:b8:6b:0a:0a:e5:16:
         2e:ca:c7:6f:0b:71:0c:b9:33:1e:0a:4a:94:ea:6a:30:46:67:
         c5:d7:6a:7e:4f:a5:6f:0b:b2:49:43:c0:f3:61:a6:b0:39:0c:
         97:de:a7:9d:da:96:45:6d:b7:74:cc:3f:2d:6f:16:14:4d:be:
         26:6b:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:28 2026 by rpki-client