Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa
File:                     f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa (raw, json)
Hash identifier:          EHW1QrWmSQXlm2gAdpRmBzKqucEVtcOXi45xy1BJMhI=
Subject key identifier:   DD:5F:99:4A:4A:BE:D5:D4:A8:05:2D:2B:F6:84:FF:1E:9A:69:2F:AC
Certificate issuer:       /CN=95cc1176-f33c-4294-a79a-4ace8f16f714
Certificate serial:       010D0C9F4328584F71ED7FCD5AEB0BD52E312630
Authority key identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        52.119.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7f:cd:5a:eb:0b:d5:2e:31:26:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cc1176-f33c-4294-a79a-4ace8f16f714
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=12187cb8-6102-4175-8c6f-936c52a7214e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:4b:af:b1:eb:ed:27:8f:a6:3f:ff:6d:f0:
                    d9:13:5d:03:28:33:b9:ac:2c:52:e4:13:28:5c:42:
                    cc:17:ca:24:c7:57:62:1b:56:ae:6d:2f:0d:48:b2:
                    8c:1a:3f:3e:89:ae:9d:35:3f:88:8a:60:26:33:cf:
                    0d:82:58:0b:be:c8:ce:4c:72:c8:06:02:a4:91:3c:
                    ab:53:4d:2b:77:fd:62:f9:a8:b3:44:c8:f9:cf:b5:
                    b4:eb:f8:e0:c3:e7:84:27:fb:52:c1:32:b3:68:62:
                    52:67:00:0f:77:2e:fc:75:ec:f6:90:96:37:c9:a8:
                    87:dd:d2:bb:b5:c0:02:cf:97:e5:b9:f5:3f:76:aa:
                    e9:a9:c2:4a:8f:72:39:b8:06:92:a0:8a:85:cb:b9:
                    51:8e:d1:8a:fd:7a:eb:f2:84:63:e2:af:5b:e6:3b:
                    42:be:8e:24:15:6d:62:8c:2a:b5:da:5e:94:0f:f0:
                    fe:35:fa:8d:64:c9:96:47:dd:df:3c:fe:15:df:6c:
                    e3:91:dc:13:58:8e:21:5d:0a:51:19:c4:4d:30:cc:
                    3a:8d:fa:ec:50:4d:8e:d9:2e:5c:d4:a2:ba:fa:14:
                    d7:53:27:1d:c8:15:34:8f:70:1a:6d:40:9c:03:c4:
                    66:d0:2c:44:68:6d:67:1e:07:10:6a:3a:bb:02:13:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:99:4A:4A:BE:D5:D4:A8:05:2D:2B:F6:84:FF:1E:9A:69:2F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/f62eea0d-93aa-3f02-99cf-942029a5a3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.crl

            X509v3 Authority Key Identifier:
                keyid:5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:21:d2:30:31:dc:be:aa:1c:06:99:7f:ff:28:52:d7:4d:9d:
         9b:42:2b:08:6e:9d:01:2d:c4:5f:36:d3:b7:cf:1b:42:43:63:
         a3:9f:31:d0:5e:4a:b7:8d:9e:fb:97:37:6a:45:47:99:f2:c6:
         80:33:6f:9e:75:6e:c6:e8:7a:ed:2e:31:2c:b0:31:64:23:2f:
         a4:5b:be:5c:ed:f8:61:9a:f5:60:73:8f:9d:4f:82:f2:c4:32:
         71:fd:b0:f9:6d:ef:e8:d4:46:11:1b:11:30:2e:5b:01:cc:ef:
         13:54:18:d9:e3:c4:e1:1a:f6:ca:ce:5c:9e:57:aa:eb:37:7d:
         a4:f2:5b:05:d5:1f:7e:92:5e:93:40:49:9c:68:93:e9:54:58:
         fc:a5:60:ec:fe:18:14:93:58:3c:9a:2e:12:97:a0:74:8b:5a:
         f8:e2:2f:61:9b:39:e7:f7:ff:ab:33:fa:fe:37:b2:dc:4e:69:
         9d:69:c0:b3:25:97:d9:12:ad:8d:60:42:1f:4f:e5:bf:b1:b4:
         27:8e:8e:50:a1:d5:1f:fb:3e:7a:92:87:c1:2e:54:8f:5a:72:
         6e:f2:86:f2:6a:c7:7b:2e:3e:3a:94:fe:fc:6d:b4:64:02:1e:
         90:21:67:e0:b6:6c:28:ac:66:00:4e:d1:af:c1:04:cd:e7:d4:
         90:04:40:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:42:22 2026 by rpki-client