Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
File:                     a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa (raw, json)
Hash identifier:          qfCcspWmsdK/TQ9HpPCUZ3bno8RJJPEnUddc7+kTVQw=
Subject key identifier:   53:0B:D5:95:FD:66:01:C4:58:E3:92:95:22:3E:A9:8C:51:1F:02:61
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F445E42675EC3CFAC0900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     46491
IP address blocks:        65.49.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:44:5e:42:67:5e:c3:cf:ac:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=852a912e-4549-4569-9eba-eed85aaf67b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:4a:00:e9:95:aa:04:01:71:e5:8d:95:91:
                    93:23:d6:7d:ed:bc:ae:3a:94:14:76:8b:2f:6d:68:
                    06:0a:d5:83:2b:bb:06:48:c8:6c:ba:7d:9b:94:38:
                    a8:4f:8b:b7:80:49:c7:5d:ad:5b:d5:8d:d2:a6:f4:
                    a4:a8:62:5c:e6:72:ca:dc:69:ec:df:7e:59:45:83:
                    26:84:df:8d:bf:ff:75:71:9c:8e:22:d9:29:4d:9c:
                    45:d0:6c:2d:27:8a:ae:b5:e4:d2:35:5e:f3:9e:73:
                    d8:df:d6:5d:f0:fe:b2:55:7c:66:17:22:ac:23:1c:
                    8f:13:56:a0:98:01:e8:5a:3c:ab:aa:be:08:2d:cd:
                    7e:07:61:53:2d:86:1c:f4:bb:42:a4:aa:58:b7:c7:
                    fd:dc:b6:41:40:48:e2:04:01:75:a7:2b:27:0b:9b:
                    67:4d:14:96:ce:63:67:21:a6:6e:f4:6a:6c:52:fd:
                    d3:67:2d:33:09:3b:2e:b6:69:65:3d:2c:34:13:86:
                    6a:66:68:bc:6a:06:79:60:f0:ef:e8:8d:e7:ed:ab:
                    22:37:e4:e9:a0:3f:67:8b:6c:49:1f:56:fc:f2:2a:
                    aa:b1:d6:5e:55:5b:d7:3b:44:b5:0c:f8:28:8a:51:
                    82:2e:4d:ed:d2:67:ee:87:8e:c2:6b:b2:89:f9:c4:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:D5:95:FD:66:01:C4:58:E3:92:95:22:3E:A9:8C:51:1F:02:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:61:8d:5d:91:fe:89:3f:cb:03:e4:0a:a4:ec:32:7a:90:
         bb:be:81:0b:8d:8a:f4:58:ba:7c:a0:73:1c:e1:10:ef:ab:c2:
         97:70:38:5b:01:4e:bb:34:73:15:c1:cf:ac:f6:ff:96:a8:05:
         c2:e6:fd:e1:7f:e7:08:cd:5a:d7:0e:5f:ba:ac:a2:e6:f9:12:
         5e:c6:2f:91:38:d5:eb:31:a1:93:63:25:d1:ae:9b:e4:07:a6:
         f4:8e:a2:68:da:44:fd:b2:79:7f:24:c1:cb:71:0b:42:93:e8:
         d6:ca:b3:d7:70:93:e6:70:c8:fb:77:e4:5e:10:e8:35:27:9e:
         b9:77:51:ac:e4:17:7e:08:81:e4:69:0a:13:7a:56:e8:16:7c:
         bd:cf:88:3a:9c:b4:0a:ef:3f:66:08:09:1f:f2:9f:9b:d4:d7:
         c0:3f:ea:59:d3:95:40:00:57:59:09:f9:3e:41:d0:39:e5:97:
         2a:28:68:66:8f:32:73:60:62:66:17:cd:5f:16:4f:1f:85:fa:
         2a:ae:ac:0d:5b:1e:94:aa:90:fb:aa:2b:4c:c4:e3:36:04:4f:
         15:8a:36:b9:a6:1e:e0:e0:20:ea:cf:a6:a7:d2:5d:01:22:f6:
         04:86:12:01:5a:e8:f1:48:1e:18:33:cd:01:5b:ab:67:9a:d5:
         e6:55:d4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:28 2026 by rpki-client