Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa
File:                     578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa (raw, json)
Hash identifier:          YPSngdE26Ll4pn9bkcIHx4ZdAPS5qdvAwIHBPZbEkdM=
Subject key identifier:   F6:38:0D:2F:A9:93:A3:15:1B:D0:86:25:9C:E9:E7:CB:16:4C:8F:AF
Certificate issuer:       /CN=2521532d-a0f2-43a5-a2a8-640c423476ff
Certificate serial:       010D0C9F4328584E9384F4BF8769BD7A653D2300
Authority key identifier: 02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     10922
IP address blocks:        167.254.228.0/22 maxlen: 24
                          2604:2c20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f4:bf:87:69:bd:7a:65:3d:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2521532d-a0f2-43a5-a2a8-640c423476ff
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=ae757614-e27d-440f-9b8d-5a555221093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:0e:fc:bd:78:1b:5a:8d:51:03:aa:e0:c6:
                    77:30:33:a6:c3:2d:78:f5:1f:7e:f1:a2:64:99:8d:
                    09:1c:1f:15:5d:b9:4a:2b:5a:84:69:90:d9:d2:f2:
                    57:16:10:e6:dd:69:b8:61:b0:2c:11:04:95:53:9d:
                    df:0a:94:6c:b7:6a:3c:35:5d:b8:e0:0d:a0:91:f9:
                    b3:40:89:cd:9a:93:8a:22:3e:f4:13:cf:b0:47:ef:
                    f2:75:73:31:01:94:3b:25:86:67:e4:78:99:af:0b:
                    d5:ca:df:b5:15:8f:15:8e:cc:fb:64:95:52:0f:5a:
                    e7:47:8c:47:54:28:fa:3c:e3:44:af:d0:1b:fe:46:
                    1b:92:fe:7c:4d:a6:2d:91:97:c1:65:cd:1b:7b:cd:
                    49:19:6a:44:3d:d3:11:77:47:a0:bd:b8:e2:28:09:
                    d0:38:83:ef:93:ef:00:da:1f:15:a1:5f:25:8b:33:
                    d2:14:d5:3e:28:a6:bc:dc:03:d2:17:a4:8a:3b:1b:
                    0f:ad:1c:2a:e9:11:3e:7f:27:77:1b:22:6a:5e:cc:
                    e1:bd:1d:61:5e:34:31:89:7b:70:22:b1:70:fd:9f:
                    eb:a8:cf:89:c8:cf:86:dd:bb:ce:84:08:db:0a:29:
                    e0:fe:75:eb:86:b2:a9:84:ee:02:4b:43:89:8c:64:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:38:0D:2F:A9:93:A3:15:1B:D0:86:25:9C:E9:E7:CB:16:4C:8F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl

            X509v3 Authority Key Identifier:
                keyid:02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.254.228.0/22
                IPv6:
                  2604:2c20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:52:81:45:4c:60:f8:d5:ba:dc:67:9b:6d:de:b7:46:c2:dd:
         7d:aa:d5:5c:d9:7e:45:18:b4:a4:fc:ce:67:91:ec:ac:15:0b:
         05:df:28:e2:7d:1e:43:0e:35:cc:46:4b:37:59:59:3e:56:c5:
         e9:f9:dd:62:9d:08:cf:13:be:e4:d8:95:b8:dd:35:0c:7c:92:
         0f:fd:6c:6d:59:da:51:16:11:08:dc:ba:73:2f:17:2e:e7:4d:
         39:df:8f:8a:4b:8d:a1:96:2b:73:6a:a5:b6:21:b3:ad:02:18:
         b9:8b:a0:ba:78:3b:12:ac:72:32:f2:0a:a2:7c:51:b1:94:c7:
         a0:df:5a:60:e3:1b:b5:7e:5c:a9:f5:e6:90:48:62:7a:a4:78:
         8c:a2:02:3c:49:32:57:86:20:17:81:aa:9c:32:ec:90:c7:d8:
         95:32:68:ed:c9:83:2a:30:81:30:2f:98:4e:16:14:0d:c6:1e:
         34:80:aa:47:5f:2c:bf:09:4a:34:cb:c1:22:de:74:ac:e6:a4:
         b6:1f:10:0a:35:9c:f6:8d:db:45:68:8e:82:be:e4:d9:5f:95:
         a3:57:76:c2:24:ee:2a:39:86:88:c3:86:3a:36:6b:81:6e:52:
         32:61:b7:b6:eb:2b:26:95:e5:4f:42:fe:8c:d1:0c:c5:d8:81:
         54:44:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:54 2026 by rpki-client