Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa
File:                     cc8a387d-3916-3a5c-a366-228d5d779f1b.roa (raw, json)
Hash identifier:          kn+S80IuL34kblKnMwkGa8pAH0P4xuxw3KobfxENu3M=
Subject key identifier:   D3:A8:CA:EE:FD:6E:71:4E:36:62:02:AA:53:77:01:1A:A3:61:41:18
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584D00B27947CD1A494B4ACE9EC0
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     397966
IP address blocks:        170.205.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:79:47:cd:1a:49:4b:4a:ce:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=7b4b52b0-414f-4eb0-af5b-4a2130b166e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:4c:77:05:77:05:99:56:ca:7b:e7:d8:b2:
                    38:f7:0c:71:0a:0c:b9:60:0d:e2:f1:68:eb:6c:2d:
                    3f:9d:37:fa:b8:60:f9:e1:e2:e4:7d:2d:97:5c:67:
                    2f:54:26:7f:5c:a1:9e:01:76:ee:2e:d2:aa:80:bb:
                    ed:0e:05:6c:cd:14:9b:00:b3:07:a5:f6:8f:85:c8:
                    07:9b:a4:a0:08:ca:61:ac:61:04:62:4d:6f:25:74:
                    a7:12:3c:7d:b7:c3:f1:6b:9c:fa:6f:e5:41:96:86:
                    47:d3:6e:99:d1:72:0d:36:17:54:be:79:7a:d6:2c:
                    d1:99:65:ab:d6:fe:e2:18:93:10:00:7f:03:27:ca:
                    15:75:3a:79:e1:ea:7e:2c:81:35:57:9d:b1:f6:a6:
                    a1:11:0f:c0:f1:d9:60:0d:08:1f:d0:33:4c:f0:30:
                    12:cd:90:5d:a0:16:3d:06:83:4c:a9:79:53:6d:c3:
                    0a:38:66:22:ed:d0:15:0c:4c:37:63:b8:db:96:21:
                    44:1e:4c:b0:9b:46:aa:fb:bf:c2:ad:9f:6c:b2:50:
                    01:0a:2c:71:26:b2:66:da:57:58:24:6c:ee:ff:6b:
                    ca:7f:67:f2:56:5c:d3:a2:29:c5:8f:3c:73:8a:97:
                    f7:27:da:8a:f6:be:85:a4:df:2c:c2:c5:02:31:f8:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:CA:EE:FD:6E:71:4E:36:62:02:AA:53:77:01:1A:A3:61:41:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/cc8a387d-3916-3a5c-a366-228d5d779f1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:89:bf:6a:36:be:9b:65:3b:ba:b3:77:4e:99:63:cb:bd:36:
         46:6e:7f:f2:79:97:14:7a:f5:4e:1f:8e:9b:84:94:fb:c6:b4:
         48:f3:89:e5:b2:1a:a9:67:04:e1:d8:f2:de:0b:e3:60:0b:4e:
         00:c9:d8:2c:75:80:17:a8:e8:0b:c3:4b:1b:ed:eb:8c:cd:47:
         00:c9:a6:34:dc:38:92:3c:d9:3c:9a:bc:65:62:9b:a8:d8:4f:
         a1:0d:06:86:ee:b0:34:72:1a:db:58:fc:90:99:ef:5f:92:5d:
         ea:80:0a:b1:de:50:ed:08:0e:1e:c5:ed:ea:64:9b:0a:79:b6:
         e5:f0:c3:19:d7:77:81:00:55:d4:cc:42:e0:2b:d1:12:fa:fd:
         ff:8e:2a:f5:bd:a6:71:05:12:69:5b:9b:9a:06:4a:2b:e6:85:
         7c:1a:38:21:47:a6:d9:7a:92:64:45:27:69:88:a4:43:5a:0a:
         90:05:73:51:f5:bc:83:1b:f8:4f:b4:8d:78:e1:3e:ba:07:f7:
         27:68:cc:12:04:ac:5a:63:05:0c:09:63:78:f8:fb:5b:f7:59:
         f1:59:b6:fa:76:23:4e:d0:f5:44:86:09:f6:76:20:5a:9f:e2:
         83:9a:9b:37:25:63:21:4d:3f:1c:01:2e:ba:fa:28:ae:67:ec:
         24:3e:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:03 2026 by rpki-client