Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa
File:                     ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa (raw, json)
Hash identifier:          boO3YbrCY24RexCourlmkMvM6uWBnlFuCtlcU+mHt1E=
Subject key identifier:   21:35:B9:8C:4C:4C:17:51:BB:5B:9B:D1:32:35:C8:1A:30:95:EA:72
Certificate issuer:       /CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
Certificate serial:       010D0C9F4328584E1FA9A0AA8354D952335352F0
Authority key identifier: 58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     394669
IP address blocks:        52.124.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a0:aa:83:54:d9:52:33:53:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=2ce8e3a1-281c-42ad-91a6-5520432a94bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:93:c9:67:32:a9:8f:96:d4:e9:0e:16:81:
                    7e:8d:d3:40:bc:e5:8a:d8:d3:2f:49:43:ef:f0:fc:
                    cd:7e:4f:7b:3a:60:cf:11:20:16:89:72:58:8e:9b:
                    d8:de:06:b1:0e:17:87:55:db:b6:27:86:1b:73:db:
                    ca:ab:16:3e:7c:28:b1:5f:89:9a:94:98:c0:b6:42:
                    a8:a8:8b:35:5e:cd:aa:a5:4d:c1:05:d5:a6:e1:79:
                    3f:98:b0:05:81:4c:ce:3c:ce:90:3e:02:79:48:b9:
                    08:da:02:03:2c:f7:fe:2a:b3:0c:bd:5c:b8:6b:37:
                    61:d5:62:44:67:3e:fd:31:66:69:a2:74:f1:76:d4:
                    89:0f:17:4d:ca:19:80:1b:d8:86:a3:2c:5e:27:ba:
                    1b:50:cc:0a:55:68:86:13:f6:ed:e5:bf:cb:81:f9:
                    1c:f1:2d:6e:00:dc:a7:39:73:09:7b:d6:17:41:8e:
                    c3:0b:1f:a8:2b:8e:b0:2c:ca:ff:24:d9:c4:01:5c:
                    d3:49:8a:4a:e9:2e:b8:de:57:76:ff:29:13:13:62:
                    b0:5c:1b:b5:4f:6e:32:27:c7:ba:c0:86:0b:cf:e0:
                    7d:a8:22:d9:d2:86:2e:05:00:d2:91:42:3b:70:5c:
                    fb:04:2b:ba:26:35:50:78:f4:18:bb:22:62:17:f4:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:35:B9:8C:4C:4C:17:51:BB:5B:9B:D1:32:35:C8:1A:30:95:EA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ad4dc0f9-c5cd-3bca-8078-ebee56b07b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.crl

            X509v3 Authority Key Identifier:
                keyid:58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:38:35:12:26:7d:39:cc:0d:7b:44:e4:74:7c:d0:9f:04:02:
         4d:5f:16:17:16:38:43:a5:9a:12:a4:38:90:6f:58:db:cb:d8:
         f8:6e:74:35:11:8e:a1:04:af:06:cd:16:61:9d:72:3f:f9:2c:
         a8:42:03:c1:28:62:50:0a:a0:03:c1:32:c0:90:5b:29:65:ca:
         e6:40:1d:bf:f9:98:6f:03:12:ef:5b:c8:ca:98:02:f6:52:73:
         70:a1:b6:f5:dc:02:01:b0:ee:bd:dd:1b:f4:a7:b9:02:ea:ae:
         a6:8b:68:85:a5:f2:fe:c3:83:f8:23:0a:e7:d4:73:13:89:1e:
         4d:08:f2:c5:4e:3b:f9:5e:30:e4:ea:bd:07:a0:83:2b:e5:eb:
         22:55:f4:67:47:1b:c8:2e:5c:b0:98:d3:d1:d3:49:71:99:39:
         60:89:93:26:aa:93:dd:d7:da:b1:18:dc:d2:c7:e7:91:ec:b0:
         be:9b:b4:1f:be:e4:35:58:1d:d6:43:82:1c:63:cd:e8:61:ca:
         72:6f:2e:69:6d:db:b4:4a:07:35:04:48:9a:55:8e:98:ec:3e:
         a4:46:c9:03:b9:9a:24:ec:a5:f7:20:84:c1:87:5b:0e:9b:c9:
         0a:61:15:76:31:4f:a9:51:65:e4:3e:b1:77:cb:66:03:99:7d:
         08:91:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:28:45 2026 by rpki-client