Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
File:                     79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (raw, json)
Hash identifier:          9wwb+2ooLXWi++rzEmB3nmdLpE7XFCXWXn75/zfBXOw=
Subject key identifier:   37:5A:C1:6A:0C:AA:08:F2:99:76:AD:B7:91:A5:CC:8D:6E:7B:C2:6F
Certificate issuer:       /CN=52356d5e-3580-4025-a264-1c6d347bc052
Certificate serial:       010D0C9F4328584D9FB58BCB6ED4AD6FE4544200
Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     18214
IP address blocks:        198.59.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:8b:cb:6e:d4:ad:6f:e4:54:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=42cdecbd-45bc-4c76-983b-8e5b23629fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:70:f0:50:34:12:07:d0:57:64:07:d8:18:
                    58:8b:c3:a4:92:4d:a2:f0:73:d8:5c:e0:bb:b0:43:
                    00:86:3e:a5:2c:b8:f5:ca:f5:3d:53:28:9e:de:a4:
                    bc:25:1b:73:f1:79:c0:12:5e:8a:34:a2:e5:ab:69:
                    f4:d7:c2:b9:24:c7:6e:0d:b1:d3:78:d0:f2:af:07:
                    88:4a:1e:a5:46:b8:a9:a4:bf:50:31:12:7a:f1:2f:
                    2f:37:9e:37:9e:35:35:62:1c:25:a7:f7:cf:2b:cc:
                    07:fc:f6:73:c2:2a:35:2d:44:a4:7c:cf:49:8a:05:
                    da:e9:1f:f8:ca:eb:c0:3b:0a:66:57:6e:d7:0b:84:
                    7c:76:0b:ce:3d:c4:86:46:55:0c:be:59:16:9f:37:
                    bf:b2:25:2c:42:dc:3d:05:45:17:1a:9b:29:27:a3:
                    cd:0e:bb:ab:d1:ee:0b:03:bb:79:b9:e0:16:51:6d:
                    1e:0f:33:0e:76:94:6d:0c:c6:29:b6:17:7f:cc:e4:
                    e7:c0:56:ec:13:6f:34:3a:6e:10:47:18:5a:a2:09:
                    b8:de:fc:6e:56:38:fb:a8:8c:f1:16:20:ce:1d:6d:
                    9c:b0:cb:62:ec:77:1a:40:6f:59:fe:c9:8f:90:47:
                    94:8a:56:d1:9a:5b:2e:e2:74:13:1c:27:d7:aa:60:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5A:C1:6A:0C:AA:08:F2:99:76:AD:B7:91:A5:CC:8D:6E:7B:C2:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl

            X509v3 Authority Key Identifier:
                keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:32:9b:5a:17:50:f2:70:75:5d:0f:47:9f:1f:7a:87:7d:d5:
         e2:e0:76:38:5b:c4:b0:a9:b1:35:f7:10:90:4d:5a:5f:45:79:
         38:db:86:76:8b:4a:79:ae:d2:ca:4f:4d:d9:45:4e:a4:ce:a4:
         e0:d1:39:d1:31:54:43:16:29:80:bb:55:1a:c2:46:78:11:cd:
         ab:13:3b:a4:fe:b6:41:99:72:6e:bb:af:22:4c:0c:31:84:40:
         d7:d7:8a:c2:95:21:89:35:81:81:bd:89:91:79:90:b1:39:0d:
         5f:ac:95:ed:e7:9e:e9:0a:1b:78:87:2e:9b:49:40:7d:a1:e5:
         ca:4a:ed:75:dc:45:a5:c2:2f:c8:76:b4:a1:d3:ed:c8:7e:ed:
         0d:d5:14:71:2d:07:3d:44:8b:21:09:b6:56:45:e4:42:5f:bc:
         eb:2c:d5:c5:cf:67:9b:c6:23:e0:6f:ad:fa:05:c5:73:cb:c6:
         2e:70:44:d5:23:e6:5f:72:f2:24:c7:42:02:dd:4a:45:3e:84:
         25:36:3c:ba:bd:40:31:bb:29:71:86:53:c1:f8:d9:6f:f7:ab:
         34:6b:f0:0a:48:62:0a:ef:99:af:a1:87:6a:9c:f4:a1:7b:62:
         d9:62:97:70:42:1a:93:c2:b4:21:bb:3d:f3:90:e0:0b:88:91:
         1a:c6:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:26:01 2026 by rpki-client