Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa
File:                     951b734f-9000-33d9-b7e7-33451cee691f.roa (raw, json)
Hash identifier:          wqGndLbkDaQ3XsORlWGOtZrqmWso/Ga+unyYf4Ktxe0=
Subject key identifier:   A8:2A:01:0D:71:AE:13:1C:26:92:2E:31:14:79:BC:6E:4E:64:D1:01
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584EA795C7F318CDC0E93C9C45C0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29182
IP address blocks:        208.52.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c7:f3:18:cd:c0:e9:3c:9c:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db7d0ea1-bb4a-41bb-afaa-9b67ac47c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e6:78:39:97:70:f0:d3:b2:0c:d3:07:d6:be:
                    de:ed:d9:89:5f:b3:fc:a5:da:9d:2d:45:12:3d:be:
                    28:aa:6d:fb:61:8b:ae:76:f1:89:b8:51:8c:66:8f:
                    1f:32:ea:47:e1:7c:2a:d8:ab:75:28:a7:7b:81:bf:
                    0f:40:f4:e4:b7:1f:2f:55:a2:3c:b6:11:11:d0:b2:
                    08:7d:46:e1:3b:a6:74:98:0b:f2:27:48:42:30:9c:
                    46:e5:64:f7:c2:da:9b:0f:2a:b9:d9:d3:ac:bc:62:
                    44:07:25:f6:e6:f8:45:75:e7:78:76:1f:15:14:c3:
                    21:2b:50:2e:df:9d:57:2f:4f:97:1b:cc:32:d1:f4:
                    34:7a:16:83:56:44:4e:ed:89:0e:7b:47:68:d1:e7:
                    50:fb:26:07:51:33:81:fc:cd:71:58:03:0a:5c:2a:
                    03:1e:98:9a:92:e5:83:eb:41:90:6d:71:1e:79:9f:
                    bc:1a:df:d6:47:53:55:3d:4a:ce:89:97:20:ba:a6:
                    f0:63:0a:83:65:a3:e0:7e:7d:e7:48:6d:2e:8d:01:
                    08:6b:da:88:50:fd:06:76:af:a0:cb:4f:1c:61:de:
                    46:2e:02:ad:33:7f:07:07:c1:6e:3d:21:d8:8c:16:
                    61:20:76:e5:d3:d4:0f:d4:37:61:f8:ea:64:1a:c1:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2A:01:0D:71:AE:13:1C:26:92:2E:31:14:79:BC:6E:4E:64:D1:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/951b734f-9000-33d9-b7e7-33451cee691f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:1d:17:fb:c9:fa:86:ae:be:13:f6:70:a8:1f:44:af:e5:
         4f:28:df:65:92:b4:59:7b:1c:b2:b8:f9:8b:e6:88:eb:dd:14:
         10:55:70:d0:7a:45:1f:cd:8e:a0:2e:a1:62:bf:18:4f:e0:da:
         4e:39:66:78:39:0e:20:71:ea:f8:89:39:2a:3d:08:ae:55:06:
         fc:66:5f:94:cf:9e:ec:50:63:2d:c4:c4:c3:91:69:05:8d:1a:
         2a:69:9f:1b:39:30:14:f4:de:0f:e1:fe:3e:df:a2:7d:90:6b:
         f0:d4:9e:49:d9:19:c9:da:57:83:ee:cf:d5:48:32:76:64:63:
         44:fd:2a:d1:1c:0d:6a:22:cf:59:dd:a5:2b:f4:d5:63:57:6c:
         b8:64:a0:8d:21:c7:30:66:15:d3:c4:7e:87:f5:69:fd:ba:c3:
         bb:5a:36:dc:17:ae:41:e6:ce:bd:b3:c5:e4:01:af:f7:2f:6a:
         3c:30:5f:fb:36:04:1b:1e:de:86:0d:27:ca:b1:82:74:54:fd:
         4a:a5:86:56:4b:8c:0a:18:c2:ff:f4:dc:ac:26:e7:9a:77:fd:
         e5:30:44:3c:9a:a2:3a:b1:64:44:96:5d:ac:2d:d4:fc:c1:23:
         36:50:46:e5:bf:a4:82:f0:51:07:04:fa:aa:80:4a:0a:7a:3e:
         0a:07:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:24 2026 by rpki-client