Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
File:                     752ad5a3-549a-31eb-8ee9-e86a007198da.roa (raw, json)
Hash identifier:          /XcHn+c1kUAv1PnC6KiSR3glfwvPsEdBbxArKtiBRZk=
Subject key identifier:   63:82:EC:9A:0B:36:1C:22:89:78:1E:47:A9:CD:EA:9F:A3:4B:EA:CD
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584C8A0C32A16F4D0E13897B1D80
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     11659
IP address blocks:        169.147.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:32:a1:6f:4d:0e:13:89:7b:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=389c4f61-ef3b-45e5-9268-e9060a94ec29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:0a:27:94:ee:45:cc:cd:95:f4:65:66:a0:
                    6d:1f:7c:c6:35:46:66:f5:0c:1c:0e:f9:e1:38:c4:
                    1e:fc:20:61:9d:34:a6:b7:37:cb:2b:ee:bc:60:9c:
                    5d:ea:37:e9:a1:ee:ee:46:c6:65:ff:55:47:f6:33:
                    34:f5:cd:9e:99:e6:58:2f:4f:fd:e5:e2:ef:0c:8b:
                    0b:b3:34:47:29:94:81:4e:bc:30:48:ed:87:be:1e:
                    31:53:23:0c:1d:90:7f:ba:73:14:7d:13:a8:3c:22:
                    de:ed:29:5f:73:dc:ce:5c:c6:e4:56:33:ec:c0:c5:
                    3e:2a:48:16:54:07:d9:be:ea:a3:9d:2f:eb:3a:ca:
                    d4:2b:26:0b:24:0f:2e:6d:5c:c3:2e:c0:5e:97:f6:
                    70:16:d8:c6:d4:4a:eb:02:42:2c:28:de:fe:46:a0:
                    4f:42:2d:2f:2a:51:d4:41:c1:63:43:ab:bc:fd:42:
                    fc:2d:c8:4c:1e:b7:c4:65:17:94:bd:13:3b:1f:7d:
                    e9:66:6c:9b:66:64:cc:8c:f9:e4:a8:f4:c9:41:4e:
                    9c:23:b8:31:d3:01:01:b0:4b:3a:f2:95:d6:db:78:
                    c7:b0:f0:ea:c3:fc:90:29:69:78:c0:3a:3e:a9:53:
                    b7:78:30:17:a5:68:d1:57:00:9c:9c:fb:b9:e6:b6:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:EC:9A:0B:36:1C:22:89:78:1E:47:A9:CD:EA:9F:A3:4B:EA:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/752ad5a3-549a-31eb-8ee9-e86a007198da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bb:fe:d9:64:17:48:4f:4a:1a:b9:b6:23:9d:0c:ca:54:42:
         00:2b:0f:af:29:1a:19:3a:49:48:87:2a:b3:da:6e:ca:88:85:
         ec:ad:27:3a:d0:4b:84:75:b6:c1:9b:08:49:04:7a:9b:10:79:
         02:d4:f1:c1:a2:b5:91:57:b5:0d:97:b7:70:c6:64:af:5e:e5:
         41:b0:e4:c5:11:99:3e:60:04:e8:06:b3:67:20:7a:b9:b0:1f:
         32:65:b6:b4:3f:6d:0f:f8:54:b8:bf:a7:31:30:70:a3:55:f4:
         61:23:e1:ec:cd:4f:ac:e6:e6:8a:d1:8f:1b:c6:12:3b:a2:af:
         e7:aa:80:4b:58:02:b1:ce:47:14:18:c2:c9:f9:79:f4:40:69:
         f4:b6:cf:7d:25:3f:70:ba:4e:fe:81:ec:ec:9f:70:29:b8:a3:
         71:ee:10:3c:1e:a4:f6:51:7c:99:36:31:45:70:9e:03:ae:7b:
         39:5e:fd:c9:7e:7a:26:8b:07:8d:34:f1:47:56:22:7a:55:3e:
         66:47:1d:de:c5:f9:ef:14:8b:e4:03:23:86:5d:4f:cf:b6:84:
         45:5e:59:c5:c6:73:8b:f9:6b:de:ad:e5:ce:90:70:61:ff:b9:
         0f:d3:d1:29:66:8b:d5:e1:b1:85:e1:0a:8f:2f:d0:27:0d:c6:
         27:6f:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:50 2026 by rpki-client