Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/05c0c37d-8cb2-3447-837d-d2e414369a3f.roa
File:                     05c0c37d-8cb2-3447-837d-d2e414369a3f.roa (raw, json)
Hash identifier:          6ZG9aC7wEQJ0Igtf3sSB9tNDwZwH0xO+jP3GaZAOGAQ=
Subject key identifier:   C5:3E:00:47:50:2D:B7:09:B3:09:B9:B2:92:F3:50:FC:1D:A6:7F:03
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584F20F7D3AF79CE7812E488F980
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/05c0c37d-8cb2-3447-837d-d2e414369a3f.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     32133
IP address blocks:        169.197.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d3:af:79:ce:78:12:e4:88:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=2e5569b6-1cc6-4a26-817a-f6b82e17b532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:f2:9e:bb:99:30:65:db:56:08:78:f0:c0:
                    6e:7a:e2:27:77:65:0e:34:25:99:48:ab:96:fc:bb:
                    35:b8:9e:0d:9e:16:13:5a:ec:99:da:c5:05:52:e6:
                    c7:c2:b1:67:48:8a:32:67:20:2d:10:b9:d3:63:35:
                    3a:56:8b:b7:72:c1:33:91:1d:77:bd:f7:18:08:3b:
                    28:31:82:02:70:19:36:19:cf:bc:bc:39:93:ac:6d:
                    40:29:80:7e:83:73:79:aa:08:bc:4a:bd:27:c8:98:
                    a0:21:39:d6:5b:0a:2f:de:cb:db:5d:11:b7:6c:8b:
                    35:cf:d5:7b:fe:35:89:8a:16:86:38:ce:65:0c:52:
                    e6:0f:66:a5:fb:89:89:3a:0b:e9:d3:64:bd:a9:e5:
                    fe:d8:55:88:33:05:1a:81:31:89:31:83:15:ff:1a:
                    1f:42:a5:a5:4b:28:fb:eb:f0:12:8a:d6:e2:0c:8c:
                    1d:eb:24:fe:74:5d:ea:31:5e:90:08:98:68:fa:8c:
                    f5:8a:01:a3:52:f9:3d:23:6b:cc:ca:67:10:15:eb:
                    e2:c2:af:eb:45:41:9e:02:d0:72:21:23:f8:de:39:
                    7d:a8:89:0a:f6:41:e8:7e:fd:4e:1a:ec:53:8c:12:
                    fe:91:18:f6:c5:3f:54:e1:b8:8b:9e:f8:5b:b5:e9:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3E:00:47:50:2D:B7:09:B3:09:B9:B2:92:F3:50:FC:1D:A6:7F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/05c0c37d-8cb2-3447-837d-d2e414369a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:87:44:d0:a7:6b:91:31:77:0d:92:5e:31:09:21:0e:a5:ae:
         7f:49:11:77:54:85:ec:e2:61:54:26:aa:af:0d:b4:a5:b1:a7:
         ec:ab:6d:c9:3e:33:5f:e7:21:c1:dc:4e:1b:ae:63:2f:ce:a2:
         e1:d6:14:0f:a4:ff:ca:9a:01:97:a7:1f:58:6b:78:22:4d:81:
         2b:7c:f8:4f:ea:34:8b:11:52:de:39:a0:ac:42:b9:bd:33:7a:
         96:b5:d3:83:6d:86:3d:78:00:45:e6:9e:d9:85:03:e3:bd:e7:
         b8:32:ad:0a:af:4d:18:71:9c:b7:46:6f:6a:6e:ad:f0:b8:bc:
         ef:b1:b9:54:08:53:57:2b:e7:8e:f7:6e:47:bc:55:83:02:9a:
         a5:76:99:c2:14:e5:f1:96:bc:40:01:f7:81:16:fd:46:fd:24:
         cb:33:79:f9:13:52:30:e6:56:6f:ee:70:d5:34:35:b3:68:cb:
         01:f2:d7:98:6f:6b:dc:4f:7e:cc:71:05:82:c1:29:fa:e0:15:
         bf:07:b4:d0:fc:d4:78:27:81:49:31:6c:1f:93:35:e5:55:af:
         79:85:56:a6:49:cb:6e:a6:2a:41:75:6b:2e:d6:88:47:33:54:
         d1:82:60:5d:cd:99:0f:b2:7a:87:3c:28:05:f5:fa:e9:61:60:
         10:7f:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:52:08 2026 by rpki-client