Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa
File:                     1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa (raw, json)
Hash identifier:          CIDNuFnoQgBLgnKGVrVAmZAhLoCPOgbRh3K8o4ZPZ+w=
Subject key identifier:   D0:5F:0F:1A:91:6D:E9:90:3F:83:40:97:0B:41:66:0F:C8:B2:61:92
Certificate issuer:       /CN=08a6d347-5170-4470-abb6-1b99491a1406
Certificate serial:       010D0C9F4328584D143D5885C244341CF5470B80
Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     199959
IP address blocks:        192.52.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:58:85:c2:44:34:1c:f5:47:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=a07e7ef5-4977-4eac-9847-c9118f3ad7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:0b:82:00:dd:92:d8:5c:9f:62:e0:eb:d1:
                    53:1e:14:38:e4:0f:00:14:ae:24:a9:eb:a5:96:18:
                    8e:e6:9d:b5:d0:2f:bc:e9:60:f6:c2:06:4b:db:70:
                    65:7f:61:32:5f:5a:63:14:bc:03:13:6f:fa:3a:44:
                    f2:6f:a1:4b:df:9c:bb:97:04:cd:e1:69:ab:4e:47:
                    ce:ae:66:75:d1:43:27:92:c6:c4:b8:3e:6a:b9:fc:
                    69:a4:a1:6e:5b:46:c3:59:74:f0:34:ef:d3:3a:26:
                    06:e3:04:9f:f3:78:b8:5a:03:69:1a:d2:11:06:54:
                    d1:d8:50:34:e2:04:9a:85:b7:80:a4:2e:28:f0:5d:
                    23:85:3d:fc:2e:f8:19:c6:38:a6:4a:f2:f7:7d:e2:
                    ed:3c:ed:fe:2a:fa:c6:a5:b8:98:d8:a6:67:2f:7f:
                    bd:96:a7:c3:ee:3d:1c:3b:1d:60:37:1b:ee:bc:65:
                    d6:c2:d1:37:71:95:f3:ee:d1:05:21:8a:2d:62:9f:
                    9c:38:d5:a5:f5:69:37:9d:fb:4d:e2:b9:9b:2a:5c:
                    42:a7:78:79:04:ac:98:41:63:81:3a:28:fd:95:b1:
                    d0:95:c6:f9:13:46:d2:cf:f3:50:61:42:1c:31:2d:
                    0f:f9:45:72:a7:bf:21:c6:5e:4c:bc:29:86:52:52:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5F:0F:1A:91:6D:E9:90:3F:83:40:97:0B:41:66:0F:C8:B2:61:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/1e254357-1d2f-3370-a3fe-8df9a37b7b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl

            X509v3 Authority Key Identifier:
                keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:64:b6:d2:f6:a1:52:b2:83:fd:e4:f8:8b:71:9c:c7:aa:
         84:25:0f:b3:8b:81:33:62:0e:3b:3e:c5:30:3a:6f:25:7a:d9:
         90:61:9c:42:a4:be:76:21:b8:e2:0a:fc:81:fe:bf:86:99:8d:
         08:13:6e:83:77:d6:56:09:2e:33:46:fc:19:68:86:67:96:5d:
         69:da:7e:4f:10:8a:59:99:1f:57:a2:8c:93:b5:2c:7e:55:5b:
         bc:fe:bb:67:7d:0c:a0:72:93:0e:c9:35:c7:02:6a:ca:55:48:
         a5:9b:0e:16:b9:ae:f4:df:2b:7d:aa:fb:97:9c:79:02:cf:7f:
         eb:28:4a:90:34:a1:f3:05:11:42:31:4d:88:de:2d:c5:3e:9c:
         f2:08:d7:d4:e3:48:fd:d7:f4:25:c8:16:9c:d7:9f:b3:9e:7a:
         2e:f7:a2:76:27:b8:3e:34:f3:1c:3d:fd:57:b3:d2:13:7d:ff:
         66:71:c4:ef:0f:07:d5:b6:2e:ae:58:86:fb:4a:85:e4:e1:8c:
         0c:e5:ab:22:8e:74:24:40:5e:67:dd:c3:81:a3:72:36:43:80:
         f3:e5:69:e7:b8:af:37:cb:b5:1f:6f:49:78:50:c6:2c:61:ca:
         67:ff:95:64:98:cb:f5:d8:43:b8:b3:2a:e7:1b:f4:56:22:e2:
         f7:6f:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:14:30 2026 by rpki-client