Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa
File:                     6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa (raw, json)
Hash identifier:          nEjuMchfkhmj8Mq4X7S2ch+ZU5RhBVyXlOMumkJQlp0=
Subject key identifier:   D2:62:6D:90:61:33:24:AA:9A:52:9E:A0:3C:BE:07:7C:3D:7F:D9:2C
Certificate issuer:       /CN=9efc5ee4-5178-488a-abd0-63bc19c491eb
Certificate serial:       010D0C9F4328584D9A2034FF0B273F2A72B61F00
Authority key identifier: 40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     8075
IP address blocks:        199.229.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:34:ff:0b:27:3f:2a:72:b6:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efc5ee4-5178-488a-abd0-63bc19c491eb
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=68501b73-808e-4035-92ce-a2657f64316b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:f2:c9:a5:f9:33:ad:9f:fb:27:bc:41:d4:
                    21:2b:70:20:5c:8c:2c:61:02:b5:fa:82:6a:e3:d9:
                    27:89:c4:eb:0b:6e:30:36:43:82:1a:6f:66:6d:c6:
                    e6:06:57:6e:10:32:58:c6:93:5c:39:9b:0e:95:8f:
                    1e:14:f4:4f:85:f6:df:a8:e9:5b:ca:78:c6:43:1f:
                    be:77:e6:dc:13:de:1b:e4:48:7e:0b:c0:6c:b1:ad:
                    8f:b5:66:0b:5c:3f:dd:b5:6d:d4:ee:e4:d1:ca:bf:
                    b5:08:40:58:0f:b0:ca:60:e2:1b:70:32:97:86:22:
                    7c:b6:2b:79:45:ad:87:f5:22:62:06:1d:d8:38:47:
                    9b:7a:fc:a8:35:ba:9d:15:b0:0a:b6:36:3f:66:43:
                    f9:a9:98:42:65:37:9a:59:d6:e0:ec:c6:8d:ee:51:
                    b0:69:c1:d1:18:c1:2e:9b:68:7c:e6:05:10:83:bd:
                    66:fc:1b:26:78:67:ec:b1:f4:c6:cf:a7:70:b9:8f:
                    82:bd:54:fb:1a:e7:ea:b2:4b:a4:c6:77:ed:34:da:
                    2e:b6:6f:7b:8f:ab:26:c6:aa:70:da:b1:a8:82:36:
                    f5:91:f3:69:71:3e:c4:b5:0e:e4:d3:75:08:f9:82:
                    76:23:54:c4:40:f5:41:14:f2:98:da:4d:de:13:d4:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:6D:90:61:33:24:AA:9A:52:9E:A0:3C:BE:07:7C:3D:7F:D9:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/6f01b33d-de77-3610-a0c9-d8a8c07e761b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb/9efc5ee4-5178-488a-abd0-63bc19c491eb.crl

            X509v3 Authority Key Identifier:
                keyid:40:59:7E:0D:5A:DB:F1:F5:18:AE:B8:92:94:52:D8:31:8D:06:E4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9efc5ee4-5178-488a-abd0-63bc19c491eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.229.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c3:dc:bf:c3:82:eb:14:17:12:61:4b:83:f8:ce:e5:bf:39:
         a0:d0:0a:7a:91:fa:c7:04:5b:c0:f4:92:d7:27:f6:07:f0:4d:
         9f:01:08:e6:76:e5:c9:a1:29:62:5a:b7:61:25:8f:a9:0d:1f:
         45:a3:f7:9d:e5:31:26:8b:cf:65:a4:83:42:08:59:4c:29:6f:
         eb:fa:4e:c2:50:3d:7d:55:c5:bb:6e:b6:0d:f4:25:60:81:a2:
         8c:1e:7d:4a:dc:da:c3:24:5d:a3:74:dd:f7:93:7b:e3:0f:4f:
         ac:17:ac:15:bd:a1:9c:30:8a:7c:ff:29:bb:b5:4b:36:32:8b:
         71:78:a6:95:48:2e:a4:3b:b7:e2:6e:8b:ad:e5:2a:e1:e2:f4:
         9c:dc:92:0e:1e:a7:43:c2:3d:ba:e3:1e:1d:81:20:95:16:05:
         f0:89:f7:cd:a7:c1:b2:ca:ee:00:b9:19:39:b0:ba:04:33:0b:
         7f:e5:10:13:e3:39:04:0f:cd:0d:70:3f:31:57:5f:b6:5c:84:
         db:0a:fd:27:2e:9a:a9:25:46:c9:95:d7:50:38:d9:41:e6:fb:
         74:58:24:89:a1:0b:93:02:e8:27:83:7a:d0:3f:c7:79:35:42:
         1b:bd:ef:fe:3e:05:f4:9c:eb:bc:33:5e:a8:de:70:d3:47:29:
         64:9d:45:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:05 2026 by rpki-client