Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa
File:                     52c23ee1-da43-30b8-884c-97582767c533.roa (raw, json)
Hash identifier:          NbrxQEO415wdNwYqyXop1NQp3cdPuJTS341l9yDfSHM=
Subject key identifier:   96:B6:87:DB:C4:6A:92:AB:B3:79:81:E8:8A:A9:77:A0:DF:AE:F6:FB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05A740DE3FF8B0F6CAFA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        141.152.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a7:40:de:3f:f8:b0:f6:ca:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=06c37272-116a-489b-af10-b6bdbcd97f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:d2:68:a9:2a:99:60:8c:df:87:fa:47:94:
                    9a:49:87:0d:05:7b:9d:50:82:54:b9:09:6c:2b:e0:
                    71:77:cb:36:50:31:46:b1:54:b7:e9:0d:c6:b5:d1:
                    fe:5b:90:e5:c9:2a:76:dc:4f:68:a3:02:a3:f6:15:
                    db:fb:81:a5:9a:3f:de:73:86:9b:ee:86:e2:e3:c5:
                    18:61:51:6c:d4:b0:4e:64:ff:93:00:7c:4a:c0:ed:
                    36:6a:81:d5:82:d8:5e:f8:4a:be:49:83:5c:dc:37:
                    65:9b:7e:f6:ad:ec:99:f8:05:31:a7:18:c9:39:ca:
                    f8:82:cb:03:e3:74:f6:24:bf:a2:4f:79:f4:10:24:
                    e4:fd:f8:84:b0:86:18:bb:06:dd:be:c5:80:e8:6d:
                    3e:9f:71:03:a1:fb:44:08:8b:7c:a3:d1:92:93:4a:
                    5d:c9:6a:e1:78:29:c3:cd:83:65:9c:31:80:3d:a2:
                    de:16:27:db:52:34:0a:4e:cb:86:e1:a7:3c:5d:d5:
                    d1:6b:7c:ad:64:5e:2c:5c:0f:6e:a5:05:16:72:eb:
                    9e:8a:92:6f:74:48:9d:d9:6d:62:15:7f:6a:01:7f:
                    61:70:2b:1d:0b:e6:2a:18:72:e0:02:fb:92:9c:ae:
                    19:f4:87:14:45:f9:d8:12:fc:bb:e9:85:3b:e6:76:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B6:87:DB:C4:6A:92:AB:B3:79:81:E8:8A:A9:77:A0:DF:AE:F6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52c23ee1-da43-30b8-884c-97582767c533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.152.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:44:2f:0c:ef:a4:cf:34:69:51:bb:82:e9:df:b4:85:6d:
         eb:d4:4f:e3:fc:ef:0b:07:50:d0:26:ba:62:bf:eb:09:e9:9c:
         14:1d:94:fb:e6:86:ca:4f:82:30:96:ff:38:a6:76:41:35:c3:
         86:7f:d7:6a:33:da:13:7e:db:9e:96:48:78:6b:9d:90:98:78:
         34:58:11:f8:ba:ba:b0:51:86:a3:70:ea:10:21:a6:0e:f2:ae:
         1d:e5:2b:16:21:42:39:44:a2:0d:25:6d:31:9a:20:95:df:04:
         09:a4:49:06:68:4a:91:54:16:fd:5d:a9:f7:3e:d9:da:4e:38:
         f6:47:08:23:39:af:39:6b:bf:ea:a7:df:7e:f8:0a:10:e3:11:
         9e:82:34:59:5b:e6:ca:1a:91:da:66:81:e2:2a:de:7c:78:f0:
         81:07:e0:c1:ff:f7:eb:5c:3d:aa:1b:d0:35:0f:51:7d:0a:b7:
         b5:f9:af:04:5d:30:78:2f:ae:77:0c:98:d5:f6:82:eb:41:d6:
         ab:f9:5f:8b:4d:d3:b2:ac:0e:c0:36:26:e6:af:53:e0:68:77:
         89:cd:18:8e:41:cc:a3:46:a8:1c:35:ac:01:86:47:7f:29:3a:
         b9:52:48:73:c0:d9:a2:cb:4d:7a:6b:c7:24:83:96:b9:8f:f8:
         0f:07:25:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:12 2026 by rpki-client