Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa
File:                     9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa (raw, json)
Hash identifier:          CuxlCWeisVLCcQuMtrMq0PebgVAhJiOsT5CA0ggb6tM=
Subject key identifier:   5C:B2:5B:B5:6A:FC:CB:5E:82:14:66:4D:20:C2:9E:18:50:C0:88:2B
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584DC5659C237E9D7CABE21BEA40
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     27299
IP address blocks:        162.219.52.0/24 maxlen: 24
                          162.219.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:9c:23:7e:9d:7c:ab:e2:1b:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=6604fe5e-4a44-4abe-a19c-f165aa855ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:37:0f:b6:23:d0:38:71:49:a0:1e:52:98:
                    74:c2:3f:2e:02:45:a6:c1:80:f4:51:14:b0:60:cd:
                    cf:f8:32:54:58:b5:71:c1:74:09:47:1f:54:b3:f5:
                    46:23:6c:7c:c9:df:ef:5a:fe:4a:e3:df:eb:ca:62:
                    bb:3b:a7:76:a9:dd:2b:20:0d:0c:0b:c5:7d:98:ef:
                    73:ad:ff:5e:79:8f:b8:c3:fe:37:84:54:03:c7:d0:
                    dd:49:58:47:7b:96:3b:af:7a:0e:75:36:c6:27:23:
                    33:4d:57:39:23:18:82:5a:ca:a1:2b:4e:67:55:6d:
                    e3:d6:a7:95:45:8c:23:07:7f:dd:f1:bb:98:f2:ae:
                    9e:f2:72:08:96:03:17:04:03:30:fe:b9:0b:7b:c3:
                    7c:30:5a:3d:47:a8:86:e0:27:49:85:43:9e:3f:ef:
                    b2:de:12:b2:f0:f7:47:48:79:10:bd:35:50:e7:bd:
                    cf:a9:7c:a0:2a:5f:98:05:5d:23:a0:1b:2f:ef:a9:
                    a2:fc:c6:c8:a1:08:2e:94:77:20:30:15:38:cb:af:
                    a7:39:52:0c:dd:61:d8:d5:69:2f:f9:48:88:3a:a0:
                    d9:12:71:8e:28:60:47:03:6c:f6:f7:48:9c:5b:5b:
                    91:65:73:ad:5e:c1:d1:b4:f8:f5:cc:df:61:ad:ca:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B2:5B:B5:6A:FC:CB:5E:82:14:66:4D:20:C2:9E:18:50:C0:88:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:60:02:c3:56:e7:a6:23:d7:7c:d1:d5:b8:a6:72:06:df:fd:
         e9:b7:1c:77:c0:46:4f:b9:8a:c5:da:cf:53:65:47:c2:76:95:
         05:bf:db:a9:10:5a:29:d2:3a:7a:02:19:97:7a:ab:54:dc:99:
         bf:c9:97:8a:0d:c8:b5:db:9e:e8:2c:d3:19:ac:a9:ab:a9:fa:
         54:ca:cd:7f:f3:65:a1:30:f2:05:b7:50:b2:7e:4c:e4:dc:59:
         7f:e0:72:e4:1f:9d:b5:96:68:3f:43:d5:97:75:1b:68:18:68:
         eb:df:95:be:8c:1d:05:da:07:36:79:4a:d1:1d:04:56:c1:2e:
         80:cb:da:2d:d0:7b:a8:bc:8c:49:f0:1a:c6:4a:f1:ae:52:a8:
         e6:6a:79:2d:20:e1:96:f2:a4:38:5d:be:9e:83:d6:54:06:89:
         a1:07:ab:cc:0b:5c:4b:19:6f:9b:02:73:14:44:2a:b1:a1:bc:
         27:42:1f:e2:7c:5a:a4:43:69:af:26:df:b6:da:89:7f:17:33:
         6b:ec:19:bd:c9:0e:74:f1:33:dc:ae:0b:24:0b:5e:af:a4:55:
         e3:c9:da:b8:0f:ec:41:90:db:0f:f5:1a:4d:1f:b2:ee:0f:57:
         dc:92:87:1b:f3:49:10:7b:e3:d7:c1:80:3c:dd:be:88:34:89:
         0b:d5:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:13 2026 by rpki-client