Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab752723-1929-3199-9169-7bbd44d993da.roa
File:                     ab752723-1929-3199-9169-7bbd44d993da.roa (raw, json)
Hash identifier:          mVjpzBZXUzNDihlzn8xgOl30T9Sln29zn+a2TTjnGKQ=
Subject key identifier:   D9:68:52:32:95:7C:A7:1E:62:11:2E:23:A4:D9:1C:A7:9A:30:75:F1
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA57C72F4DC5E73EF8D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab752723-1929-3199-9169-7bbd44d993da.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     20197
IP address blocks:        204.84.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a5:7c:72:f4:dc:5e:73:ef:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=73a6ed87-d3a3-4730-83cb-dff0331efd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:84:d5:65:70:31:51:7d:52:63:ff:ed:2d:ef:
                    ec:92:97:ce:40:fb:39:48:e0:02:41:fa:9f:95:8f:
                    9a:66:22:6f:c2:de:1a:73:31:1a:92:b8:cf:87:1d:
                    0c:6d:c0:cc:f7:8e:35:11:48:5c:73:64:3a:7e:eb:
                    1d:f4:1a:03:13:6e:7d:3a:a3:01:3e:5c:2e:fe:4f:
                    13:d1:ff:8f:5e:86:99:61:08:2c:dd:16:30:bc:f0:
                    b3:7f:80:53:98:60:30:80:51:2a:b1:ad:84:18:6b:
                    fd:69:a5:18:1f:01:25:64:88:e0:c7:d6:dd:8f:ff:
                    a3:41:68:2d:8c:71:b7:62:95:82:71:50:c5:eb:5a:
                    d6:b8:2c:c6:53:fe:00:e9:67:cd:5e:a2:23:dd:44:
                    8f:75:f0:1c:34:c0:f9:a3:43:61:73:59:2a:5f:14:
                    a6:14:2f:30:e9:32:7a:66:00:57:76:5c:3a:3b:25:
                    f3:13:77:ab:e9:e2:5c:b0:4a:91:f9:3d:3c:ec:17:
                    3e:16:ae:3e:1a:b6:d2:9b:d8:b9:76:72:aa:ef:2c:
                    c4:5c:fd:a0:95:8c:9d:01:1b:40:74:ff:51:64:91:
                    b2:42:07:c4:c4:a2:2a:74:66:12:58:6a:d1:ea:d1:
                    de:43:29:e4:56:8a:48:ed:cf:f1:64:8d:0b:0d:32:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:68:52:32:95:7C:A7:1E:62:11:2E:23:A4:D9:1C:A7:9A:30:75:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ab752723-1929-3199-9169-7bbd44d993da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f3:64:03:0a:35:19:ba:35:34:5b:9b:5d:59:43:96:4c:f7:
         e7:3f:3e:ae:62:56:0b:06:b9:03:93:66:a6:1e:e7:03:44:23:
         41:8a:39:61:bd:f3:62:20:9f:60:85:9a:3a:cf:91:27:25:1b:
         09:ac:78:9f:fc:95:1a:c2:d0:b1:56:e4:fb:80:e8:cb:34:85:
         ae:79:06:11:f8:42:4f:e8:51:55:73:00:4d:ea:39:f7:6a:4c:
         9d:84:91:dc:1e:12:2f:0f:1f:0c:a5:86:8c:59:7d:ac:8a:34:
         84:21:9a:92:00:01:73:8a:5e:e1:b0:39:ce:3e:93:7b:da:e4:
         4b:a0:a8:ac:9d:28:01:a6:53:bc:2a:8b:c0:85:80:41:4d:37:
         b5:f7:11:d7:db:80:3c:b8:ee:86:ff:8d:6d:d4:35:0d:1d:d4:
         88:bd:29:a5:ca:4e:4c:ff:81:88:a3:00:26:a8:f8:80:7c:3f:
         df:12:4f:15:6e:48:3d:8f:31:77:f1:b1:15:50:8f:46:25:df:
         71:15:da:c7:b5:30:0e:81:36:33:1a:f8:61:93:f4:63:53:c3:
         b9:06:43:9c:c5:41:76:b4:0e:e8:f6:f6:8e:ae:fb:30:ae:5d:
         59:16:d8:f0:76:05:cc:db:c9:78:7c:8d:66:3b:ad:dc:f4:a8:
         4d:22:18:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:26 2026 by rpki-client