Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
File:                     79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (raw, json)
Hash identifier:          zrFuFKJoUsf66rVEwrYpKj7Eu9TQ0h9C67BBmSGvOoM=
Subject key identifier:   6E:BC:9F:AD:91:A5:54:6A:01:89:03:B2:29:CD:15:6F:F0:6D:11:4D
Certificate issuer:       /CN=52356d5e-3580-4025-a264-1c6d347bc052
Certificate serial:       010D0C9F4328584E7FFA51FC033F10EBB8277780
Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     18214
IP address blocks:        198.59.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:51:fc:03:3f:10:eb:b8:27:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=a7e9a8b6-d639-4ab5-9787-76745e8d3a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:57:dc:02:36:c0:8d:12:a0:92:98:6e:80:
                    85:30:bc:37:cb:c0:a0:cf:f4:bb:bc:21:5b:b6:b2:
                    7a:f6:e4:0c:5a:7c:b9:0d:da:4a:3b:65:73:16:31:
                    fd:f4:96:2b:19:3b:4d:0d:e2:a5:9e:7b:ed:cb:d6:
                    59:70:60:c6:3e:86:9a:9a:6e:e4:21:1f:11:ba:b3:
                    aa:de:87:bf:b3:d1:61:06:f7:be:01:54:8b:aa:06:
                    c5:d2:e7:88:cb:ed:ea:09:55:94:92:86:9a:47:50:
                    c8:78:66:46:ec:ac:12:dd:1b:ed:83:60:ba:2f:9a:
                    df:99:40:f7:ba:10:05:6f:a4:63:b7:43:88:29:55:
                    b6:93:fb:00:5c:54:0c:ef:ab:8c:1f:97:be:35:36:
                    f4:9e:6f:c2:84:33:85:94:6d:1f:fc:a6:fc:62:ee:
                    23:32:02:4d:ef:4d:67:3b:ef:a8:08:18:c0:b4:ed:
                    36:ed:fd:3f:a9:bf:b3:62:a4:11:59:bf:3a:29:3b:
                    66:52:e7:00:bd:5d:94:54:8a:09:c5:d3:10:30:61:
                    b7:71:4e:15:43:84:82:3a:a9:be:85:b7:34:f6:7d:
                    08:48:e7:43:09:7b:d2:07:70:a7:36:3d:4b:aa:77:
                    25:e6:b8:42:a0:11:11:9d:e5:b4:a5:87:88:22:e2:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BC:9F:AD:91:A5:54:6A:01:89:03:B2:29:CD:15:6F:F0:6D:11:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl

            X509v3 Authority Key Identifier:
                keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:c5:66:46:aa:5b:3d:d7:e8:04:ca:7d:d5:9a:f3:57:b4:
         ab:41:ff:e8:4e:89:13:c8:e8:ee:f4:a1:0d:b0:95:1c:2b:f8:
         d0:f1:9e:0e:c8:bf:84:59:7d:c0:0d:ab:77:76:0a:34:41:bc:
         47:78:dd:16:93:cf:04:eb:b1:e7:2a:61:d8:73:c7:cb:5e:44:
         e9:13:2b:91:be:24:23:a6:c1:0a:4f:b0:e8:96:18:65:a5:55:
         0e:cc:ac:bd:90:e6:fb:43:50:ef:62:f5:60:63:98:7f:70:80:
         c5:fb:3e:7b:02:8e:31:a2:29:3c:9b:22:dd:8d:79:4f:c5:c8:
         c3:21:09:2e:41:81:e9:31:7d:dc:ea:d5:1d:fa:23:8b:2c:48:
         e1:83:c7:23:8e:76:2a:21:ec:90:45:2b:0b:a1:24:ad:8e:94:
         3d:1d:20:ea:9d:c0:21:6b:e6:1d:ca:9e:40:cb:88:fc:2e:79:
         c1:4b:91:3c:91:fa:c8:4e:e5:0e:c3:be:53:ea:fc:a5:94:be:
         25:ed:59:ff:fa:8e:ab:10:bf:64:a5:8e:7e:c5:7e:47:8d:51:
         90:2b:fc:63:5c:49:12:d0:22:5c:ef:f6:99:06:ef:b7:13:c6:
         93:9e:06:b8:27:8f:e2:6e:5a:d5:4f:be:d7:dd:ce:7a:8e:e8:
         a3:e9:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:25 2026 by rpki-client