Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/52fce64f-bccb-3a23-8c53-e5c890613260.roa
File:                     52fce64f-bccb-3a23-8c53-e5c890613260.roa (raw, json)
Hash identifier:          71mBS+r+fShZUP+DXWNLJ/l9cLisNWc+zXhlHTO0jog=
Subject key identifier:   7D:D9:A5:6E:80:5D:95:72:87:A7:5C:24:49:21:78:6B:E4:26:84:CD
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F4328584EFCACCC1A38273995466D97C0
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/52fce64f-bccb-3a23-8c53-e5c890613260.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     10520
IP address blocks:        205.210.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cc:1a:38:27:39:95:46:6d:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=11c7dd9b-02cb-4ddb-888c-6bca04e541ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:6d:b3:1f:71:3b:92:7c:b8:d2:8b:3a:b4:
                    1d:ca:f5:ce:6a:07:b3:19:b5:a6:22:d4:e2:d2:e2:
                    14:ac:db:0c:0b:b7:89:6d:36:86:7a:b1:1f:90:d5:
                    9a:70:75:ca:a1:1d:3c:e5:19:bb:4d:27:f7:c6:6d:
                    f6:91:60:bd:94:97:f0:66:76:ad:ee:4d:cc:35:25:
                    60:07:ee:f0:67:e1:1d:de:67:c2:4a:b6:fc:d4:96:
                    06:8d:e4:a3:e4:37:17:7f:c2:ff:4f:ac:30:81:df:
                    64:1b:26:63:eb:54:a1:dd:9c:41:06:d1:4f:95:db:
                    2c:d6:8e:2d:d2:a4:00:5d:89:7f:09:cd:6a:9e:b5:
                    4d:06:05:6c:53:03:13:a0:20:cc:59:29:c4:90:11:
                    5c:3d:c5:3d:fb:3a:fc:b8:77:d0:26:67:99:c5:56:
                    e3:0f:1c:d3:b8:c7:bb:5a:f0:70:48:9a:5b:e9:3f:
                    70:af:37:8e:c2:66:4c:d5:03:6d:03:83:c0:e9:ec:
                    1a:82:66:df:27:02:e6:9a:4c:9b:cf:3f:3f:8c:5a:
                    55:d9:e5:09:22:7b:a4:ba:09:4e:3c:5e:59:04:ae:
                    2b:21:3c:66:e8:c9:9f:38:6b:60:12:47:92:51:35:
                    63:bf:cc:66:b0:6c:40:b0:fc:3a:33:4b:50:0b:41:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D9:A5:6E:80:5D:95:72:87:A7:5C:24:49:21:78:6B:E4:26:84:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/52fce64f-bccb-3a23-8c53-e5c890613260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:6e:b9:a4:86:ac:b4:58:53:dc:be:6b:dc:40:3c:09:29:
         11:95:35:07:4f:44:b2:89:4e:65:f2:40:36:3e:2f:b9:08:dd:
         93:8d:04:dd:21:c5:0f:1b:5e:5c:b4:da:77:d1:b1:4c:b5:b1:
         f1:b0:f0:92:41:b8:dc:47:49:86:b3:0d:81:a3:7c:a3:c3:f3:
         af:36:a1:e3:64:66:28:df:63:8b:fe:d8:4b:35:dc:10:ea:ed:
         ed:8c:15:e9:84:7d:f7:1d:e0:5d:c5:8e:42:25:57:61:b5:a0:
         80:d0:94:4c:c7:53:9f:53:b2:f3:8a:da:39:2c:65:f6:88:7d:
         97:c0:15:43:be:1e:78:e4:8a:31:72:65:85:39:99:33:d0:64:
         38:79:02:28:aa:e1:ea:55:1a:f9:12:db:32:3f:83:5b:54:36:
         53:7b:56:6d:4f:e9:f9:85:0b:55:58:a1:95:e2:cb:ef:b4:c4:
         04:7a:bf:ab:4d:50:ef:42:55:06:b5:87:d7:d1:e3:04:ab:3e:
         4a:0d:07:77:db:0e:e1:68:9f:c7:42:67:be:9b:6a:73:86:5f:
         68:cf:6e:fa:8a:a8:48:b4:68:07:ba:59:82:71:67:51:1f:49:
         5d:cc:91:aa:26:bc:cf:84:cf:df:ef:26:c3:d4:5f:58:17:12:
         c3:e9:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:19:32 2026 by rpki-client