Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa
File:                     fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa (raw, json)
Hash identifier:          DsFhr1+YBAszqPF04d64Y+XpUdk1rZWqKCuJ8SM1mPw=
Subject key identifier:   B2:57:43:0B:67:F5:F8:B5:42:60:F0:03:6B:C9:2F:23:A3:DB:50:87
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584DB7703E598297B8AA15750580
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     8075
IP address blocks:        199.181.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3e:59:82:97:b8:aa:15:75:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=683e1de2-2a81-4c62-a7ea-f04e068b091b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:b0:9b:85:4d:3a:29:a4:3f:8d:bd:6d:4c:
                    6c:db:be:f1:5a:dc:88:ff:f9:90:a9:b7:8c:6e:99:
                    20:7f:4a:89:b4:da:01:bb:a0:e7:e0:77:a1:7e:f1:
                    95:11:53:80:04:d1:46:eb:4f:d6:1d:f6:51:5c:32:
                    8f:58:14:7e:e1:52:3b:0f:65:71:86:5f:06:c9:02:
                    fd:26:8d:83:d2:7e:32:60:23:06:37:b7:bd:b3:71:
                    5f:f3:4c:15:96:72:c7:ec:aa:b3:f3:66:79:af:5c:
                    7c:4e:4b:5c:3d:87:4a:53:4f:59:c2:90:58:f0:a9:
                    71:0e:7f:1d:e5:ba:61:4c:88:e2:3b:f5:8a:94:fe:
                    6a:f3:af:6f:d1:cd:3d:96:f8:e4:55:e3:1d:89:6f:
                    8a:fd:60:a5:a7:80:d8:3c:78:d9:6b:87:f3:31:31:
                    35:77:4e:16:16:92:a5:29:81:92:ca:8b:df:c8:d8:
                    9f:3c:a7:35:fa:74:7c:eb:8f:46:16:e2:8e:ec:8b:
                    32:85:69:c9:69:1f:88:2f:46:8b:2d:27:cf:a6:51:
                    0c:34:7f:df:db:34:2d:07:24:b9:d2:fd:21:82:e2:
                    82:2f:b4:d2:f3:74:f5:90:30:33:cb:f5:ae:e8:05:
                    25:7e:66:e4:67:36:e0:6a:22:a6:f1:18:5d:91:a7:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:57:43:0B:67:F5:F8:B5:42:60:F0:03:6B:C9:2F:23:A3:DB:50:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/fbd06ea1-275a-3df9-b485-451d3dee4a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:85:7c:b7:9b:52:57:70:7c:e6:e4:a0:8c:bd:f8:bf:4b:
         c0:cf:45:e0:84:6f:ef:06:e9:96:59:f2:e2:cd:96:da:c2:52:
         bd:5c:bb:82:eb:d3:ec:79:f0:37:de:6f:62:07:3c:3d:74:99:
         9d:7c:42:c0:1a:c5:68:af:dc:84:e0:d3:c6:a7:e1:c9:f1:87:
         26:0d:ff:71:b4:95:73:aa:b1:d3:ad:2f:c6:64:8b:6c:7f:56:
         5b:c7:5d:f6:4e:03:63:51:9a:6e:73:b2:f9:0c:b7:9f:f8:26:
         49:5a:14:8c:7c:83:01:26:1e:2a:8f:2a:f5:03:d8:6a:31:ec:
         e5:0e:f5:8d:ce:e0:1a:64:44:86:29:18:7a:db:29:2d:26:d7:
         44:84:70:ae:23:3c:82:4e:4e:30:71:e0:35:18:10:0a:fe:35:
         7c:4d:a3:e8:42:4b:5b:68:8e:0f:f8:66:eb:81:b1:82:33:95:
         27:a8:11:51:e2:78:a6:19:93:ba:db:43:29:6c:ad:df:7c:73:
         b0:24:31:b4:6f:b5:24:4a:4a:63:b1:0f:77:d0:e1:24:6a:a9:
         a0:de:38:11:2f:c8:8d:42:9a:e3:ea:dd:28:5d:0f:85:a6:15:
         a8:f3:b8:b7:b4:76:af:8f:07:4e:07:48:2b:ac:ce:01:42:a0:
         91:7d:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:14 2026 by rpki-client