Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa
File:                     252b5b3a-aba2-3e83-bc54-72f26f51952f.roa (raw, json)
Hash identifier:          sIQm2nRGKDMu0nNWtZ0KZPbNqpzYGsIUXjXq86apeAg=
Subject key identifier:   7D:28:5E:8A:C9:2F:A1:9D:23:2C:26:4C:64:A7:1F:F3:59:B2:34:E7
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584E4AEF30F8E878CC4F448C7300
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        199.36.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:30:f8:e8:78:cc:4f:44:8c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=819dda73-8889-433a-9cab-c8dfb746c30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:8b:80:49:37:85:5d:54:bb:0d:f8:f0:90:
                    80:c2:d3:ab:c0:74:57:5c:00:ec:3a:5c:c0:5d:81:
                    a6:2a:0c:4d:a0:c1:dc:1c:18:74:14:c0:23:c8:ff:
                    0a:78:e8:c2:af:31:46:c4:65:4f:c1:54:df:d2:68:
                    2d:cb:ab:bc:7d:e1:1a:fa:0d:4f:26:0d:3d:31:2d:
                    06:04:b8:43:05:78:cb:c5:48:c9:3a:d9:0f:2f:99:
                    73:be:cc:6e:4e:ba:87:42:66:e2:49:7b:92:b1:39:
                    0a:f1:48:5e:42:8d:68:b6:3e:f3:e5:30:02:74:8c:
                    5e:ea:22:70:53:bc:83:aa:43:ae:9a:d2:b6:5e:1e:
                    5d:fd:99:d7:40:ae:f9:d1:dd:7b:d2:e8:fe:37:a0:
                    d5:28:5a:43:b4:0d:54:bb:e4:f2:09:2b:6c:c0:25:
                    50:ad:05:be:d0:65:28:62:ef:3d:45:cd:47:bb:ef:
                    2d:1a:ac:fc:a4:24:5e:17:84:0b:10:d5:f7:af:6b:
                    17:3c:90:de:1b:87:38:cf:4b:cf:f7:b9:da:8b:cb:
                    d6:47:f3:58:aa:e7:50:56:b8:96:62:e1:b1:43:15:
                    a7:65:84:3a:e5:9c:d3:92:d3:8b:e1:0f:05:6a:1e:
                    75:dd:5c:be:7a:52:af:3f:17:83:80:8c:5f:a0:87:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:5E:8A:C9:2F:A1:9D:23:2C:26:4C:64:A7:1F:F3:59:B2:34:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/252b5b3a-aba2-3e83-bc54-72f26f51952f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:34:85:9a:1d:0a:5c:56:2b:7b:4e:59:84:c5:f3:68:5b:98:
         55:b6:5d:f6:b4:80:05:91:5e:3e:b1:02:04:36:17:34:26:7b:
         99:51:06:0b:55:9c:46:ff:43:2a:ca:a3:16:9d:97:c0:ba:8b:
         b8:7b:59:e2:63:9b:71:43:25:d0:57:6b:95:7a:48:3e:55:75:
         a0:97:b5:49:d2:8e:ad:9c:f7:f2:8a:55:51:4a:d6:88:60:70:
         84:66:1d:a4:1a:8e:6b:4f:e7:f9:b7:a3:a6:2e:e7:96:29:ed:
         81:9c:03:0d:b2:f4:89:80:00:92:cc:9e:ff:14:7e:a0:bb:dd:
         cc:91:49:a0:01:cf:2f:e2:6b:17:35:e6:e3:84:b3:5e:ca:a9:
         c1:75:92:2c:07:be:4c:b4:11:44:8f:53:71:60:88:10:5b:8c:
         f5:96:a6:df:cd:df:fe:bc:2b:f4:49:50:c5:14:98:56:4f:e9:
         5d:9d:4b:1d:3f:f1:82:ec:93:b2:6f:be:f1:48:0d:59:9a:e9:
         e7:37:56:28:bf:26:ea:00:8a:a0:84:a3:ca:ec:2a:37:86:d2:
         2b:5c:16:0a:c8:93:25:59:51:4c:32:a3:ea:3a:53:e6:62:3a:
         8c:93:c9:f1:39:cd:a9:e1:5d:6b:47:20:06:cc:2f:2c:89:da:
         21:79:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:42 2026 by rpki-client