Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa
File:                     4d983f32-c282-3d5e-a0d3-f5c04628889d.roa (raw, json)
Hash identifier:          RVVBNwEclkXURF7AmyCtyPzUg5Il7vyZ9lSw+HEHW9w=
Subject key identifier:   4A:4C:E6:0F:D6:77:C7:4C:0D:6A:5F:32:FD:8A:14:6B:A3:DE:82:90
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584E1E444EA162E1CFFA885E7CF8
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        208.52.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4e:a1:62:e1:cf:fa:88:5e:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=b0f92c23-a4e5-4c7b-b1bf-788cbd3f89a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:72:ed:14:dc:22:26:68:41:a9:a1:78:b5:
                    68:dc:e5:4f:d2:5c:42:3c:da:96:95:87:f0:5d:65:
                    d6:20:db:25:da:21:c1:8c:bb:5c:df:59:b6:17:ab:
                    dc:da:dd:48:8a:42:5a:91:75:37:55:e1:29:3c:68:
                    fb:92:ad:96:42:4e:d6:8b:9d:02:c2:f1:c1:27:de:
                    cb:59:ee:65:0e:11:fa:18:81:3e:31:fd:4e:fb:c0:
                    7f:9c:12:b1:e1:9c:38:96:9d:ce:81:7a:41:5f:ac:
                    25:ee:58:1a:76:98:8b:90:a7:9b:18:9c:85:c4:84:
                    3b:d7:76:e9:2c:6b:b9:15:75:5b:b0:55:95:77:58:
                    d9:df:97:3f:62:5c:3b:5e:e9:6d:85:26:6f:2b:52:
                    06:4d:5e:28:43:ea:de:e4:9e:42:17:91:55:1d:29:
                    ba:ec:50:87:9b:e8:21:b1:6a:d8:49:c3:31:a1:d6:
                    44:95:f0:b3:26:f1:89:c4:89:bc:dd:a4:1d:cc:05:
                    5c:b4:2e:2e:1c:9d:e4:c8:c1:7f:5a:c6:99:5c:1f:
                    6d:86:64:81:42:c5:b1:3d:7b:ab:5a:e8:66:30:13:
                    01:a5:4e:57:a1:dc:fb:49:a9:37:e8:f7:f5:64:f6:
                    bf:70:c3:ba:2c:99:e1:59:7e:6c:79:57:65:14:d9:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:E6:0F:D6:77:C7:4C:0D:6A:5F:32:FD:8A:14:6B:A3:DE:82:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d983f32-c282-3d5e-a0d3-f5c04628889d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b1:e0:16:45:a2:56:55:c5:af:86:09:c1:9a:d1:61:a7:5f:
         ab:4f:73:fe:99:1e:ce:1a:f3:2e:14:53:9c:9c:9e:4e:ef:5f:
         86:dc:f2:1e:41:2d:60:26:17:7d:f5:65:ed:d6:3b:f0:63:82:
         b8:8f:4a:76:3a:e0:fd:27:ff:7c:67:de:04:70:f6:5c:eb:6e:
         51:ce:ca:32:79:c0:dc:0a:4e:02:19:91:d2:1a:8a:de:a3:4f:
         2c:40:37:5f:ef:72:84:1e:52:db:9b:e6:b1:13:e3:36:19:4a:
         33:9a:1e:eb:31:71:ec:26:aa:30:6c:fa:b3:23:af:f6:9e:65:
         0e:5c:bd:e0:04:16:5b:45:c9:49:73:91:f5:a2:ce:3e:ff:11:
         ed:5e:c4:ed:3f:04:76:5a:02:7e:b2:6a:97:16:95:c4:72:b3:
         7b:56:5a:3e:07:4c:0a:d0:87:b4:6a:7e:3a:89:03:84:4a:7f:
         7e:1f:09:7b:a6:2a:43:e6:d9:f7:ae:af:05:23:68:61:84:eb:
         5d:29:21:d6:5e:9f:af:ee:96:81:00:44:33:21:b4:25:30:92:
         19:c6:5a:d3:a2:13:9f:9d:b7:60:f9:8d:d1:b7:fd:3f:d5:95:
         03:5a:13:cf:a2:68:75:72:b5:61:f7:1f:9d:ef:45:10:0f:6c:
         d9:09:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:04 2026 by rpki-client