Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa
File:                     99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa (raw, json)
Hash identifier:          mA6x37mKadZ/1wGzIu5XfV6K3LuNyq2VjcnyKlCDwIQ=
Subject key identifier:   F7:19:DE:21:2C:BE:B1:65:38:D6:38:D0:0B:74:44:64:A2:9A:28:37
Certificate issuer:       /CN=4c077b20-9311-4e07-96bf-a5c414450c8a
Certificate serial:       010D0C9F4328584EE0C221EF579EB2DB6B25ABE0
Authority key identifier: 15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     852
IP address blocks:        142.52.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:21:ef:57:9e:b2:db:6b:25:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c077b20-9311-4e07-96bf-a5c414450c8a
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=49dbba7e-c96b-4efe-a340-07cd31b843fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:89:21:da:4a:15:80:8e:f2:d4:eb:60:dc:
                    65:3c:fe:ad:49:b5:87:e1:51:66:71:bd:67:ef:0b:
                    ad:c5:59:c4:75:c2:b1:41:22:85:8e:5f:9d:3b:98:
                    3e:85:d7:40:4b:18:9b:43:01:62:48:85:1a:ec:c1:
                    3b:4f:00:cc:a9:8f:3f:42:2e:1f:a0:ba:e5:ed:b8:
                    3e:b5:d8:bf:31:d6:20:25:08:d8:03:34:b3:14:b8:
                    37:97:bd:23:9e:e3:fa:db:20:de:ca:16:a9:68:50:
                    fe:7e:87:5f:5f:fa:6c:c1:93:2f:00:b7:19:9b:87:
                    29:88:ab:e9:50:fc:ac:34:68:dc:6a:1a:13:a3:68:
                    1e:86:f8:2e:df:26:70:ef:17:b5:82:17:18:d1:36:
                    b4:59:c9:5f:c9:45:6d:64:09:b0:d0:2e:dd:cb:b6:
                    c7:5b:03:0a:86:dd:e1:75:20:80:04:77:fb:b7:dd:
                    8e:c7:ef:28:a4:fb:87:70:6d:a3:ed:a3:68:ea:17:
                    24:08:d9:5b:a3:a0:4e:0a:10:61:ef:66:45:77:9e:
                    0c:f4:a3:c3:7a:17:36:d8:89:af:02:8f:c4:68:8a:
                    18:19:02:a1:06:42:32:8c:02:6d:be:d0:a6:25:3a:
                    81:6e:80:01:7a:6b:a1:01:6f:2d:60:27:d4:a0:2b:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:19:DE:21:2C:BE:B1:65:38:D6:38:D0:0B:74:44:64:A2:9A:28:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl

            X509v3 Authority Key Identifier:
                keyid:15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.52.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:72:84:7e:46:3c:3e:f7:5b:bd:1e:b6:bd:9e:b8:02:ca:14:
         87:56:2a:a8:af:52:f1:9a:25:82:3f:2a:5f:23:89:29:92:62:
         f3:16:51:d0:aa:6b:59:eb:9c:f9:90:78:eb:56:5a:e4:ed:db:
         e5:d9:38:b5:4b:c2:c9:d3:ce:05:ff:a9:4c:34:37:78:9e:d7:
         69:eb:d2:ea:20:f4:6a:a0:4c:73:c5:29:51:a0:80:5a:8c:47:
         97:bf:df:68:b4:cc:30:6d:82:41:c2:56:5a:b3:2f:f2:98:83:
         50:08:44:4e:87:93:b1:5e:72:2b:4e:43:72:04:0f:6d:cb:b2:
         c0:e7:b8:53:cb:13:7b:23:ff:f0:80:1e:b8:63:45:bc:1c:51:
         1f:58:0b:ec:d0:8d:4e:71:e5:b4:b3:9f:cb:3f:93:bd:f6:de:
         66:5c:fa:d3:3f:09:5c:b7:96:35:72:e9:5d:29:6c:3f:70:6f:
         bf:79:ef:55:32:aa:b9:88:d9:d3:55:75:dd:4c:12:49:81:01:
         1d:70:42:67:85:ac:9c:67:1a:93:90:0f:c8:31:6d:e5:a2:7b:
         bb:ba:33:bf:02:61:ee:6f:55:11:b4:0e:99:1c:de:8a:cb:7f:
         1e:d6:72:8f:54:48:79:2d:59:55:e5:b1:52:bb:5f:15:d9:e2:
         71:fa:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:36 2026 by rpki-client