Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa
File:                     626f81e5-6d4a-39d5-95e9-b3f835be851f.roa (raw, json)
Hash identifier:          vWC5/zu0vWEH12WU0bSdAOkUuMG2rlGmBv3hS/TMD0w=
Subject key identifier:   09:F3:62:D8:93:1A:FC:63:4F:D4:A0:22:E6:0D:69:43:C3:78:38:7D
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F7782D1D60F8B9ABB1DF96200
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     22359
IP address blocks:        208.52.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:d1:d6:0f:8b:9a:bb:1d:f9:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=f8c14bfd-765d-45e6-bc8d-a53b92227643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:a6:f6:a6:cd:12:58:67:2e:00:2d:b0:d8:
                    96:13:af:77:44:3e:0d:ad:6c:a7:c8:52:ae:7d:7a:
                    39:89:cc:80:55:cf:46:e7:66:cd:71:fa:1d:32:04:
                    32:36:1d:ab:0a:dd:2d:91:ea:26:5a:e1:0a:14:81:
                    97:b6:a9:af:5e:ca:01:da:3b:0d:a0:c0:3f:0b:1f:
                    e5:84:b5:40:66:9d:d1:de:a1:e2:44:f5:ed:ef:09:
                    b9:4f:b7:71:bd:12:3a:4a:5b:9c:bd:0a:4f:95:12:
                    70:54:33:fb:33:bd:fe:5d:2d:63:d6:3a:0f:14:cb:
                    79:91:c6:42:ab:e4:81:41:bd:1c:58:88:64:8f:2c:
                    0f:7c:d1:5c:26:27:35:2f:54:8b:ec:c2:e9:4a:c7:
                    fc:3e:8f:3a:0b:ca:b7:08:42:9c:34:63:19:a1:0b:
                    87:72:ed:32:39:72:56:4e:e3:48:3d:7d:56:f2:d6:
                    97:99:d3:29:87:cf:c2:94:c0:2e:4b:7a:80:32:74:
                    85:fc:3b:d8:22:67:78:11:62:3f:42:3b:bb:51:72:
                    83:87:ee:b8:ab:3a:4f:58:0f:5a:bc:6f:2a:88:0f:
                    64:3c:95:79:79:9b:3c:09:42:30:a3:de:4c:09:00:
                    da:a1:80:2c:be:7d:6e:b0:a2:0a:ea:1d:b2:72:ae:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F3:62:D8:93:1A:FC:63:4F:D4:A0:22:E6:0D:69:43:C3:78:38:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:37:80:06:75:cd:49:7a:f0:20:45:a0:3e:f6:81:f9:a5:f3:
         fd:81:9a:ca:46:04:53:70:0e:6f:95:03:af:0e:9f:95:a1:d8:
         26:0b:2c:f1:e5:9d:d0:89:8e:62:62:f5:c7:f1:27:50:4d:8f:
         5b:a9:8a:ab:39:77:85:86:15:bd:82:ac:41:ef:8a:e8:23:21:
         4e:52:88:98:73:41:8e:9b:88:3b:e8:04:b9:da:52:1c:5e:45:
         54:84:5a:db:35:fc:8d:84:66:53:fe:d9:52:42:d5:f4:a7:04:
         4c:07:4c:1a:bf:bb:3d:80:dd:69:6f:22:9b:2d:5b:ac:70:bd:
         09:16:20:d9:81:9f:ca:90:6b:6c:02:e3:60:27:80:ec:05:92:
         88:bd:4e:be:98:cc:a8:e2:e9:94:1e:cb:25:ac:03:e5:1e:a1:
         98:f5:19:38:f7:b6:4d:48:45:23:8e:5f:a0:30:dd:07:a4:2a:
         3e:df:41:8e:6b:f5:91:12:1f:6c:49:2a:1f:a4:9d:61:1d:37:
         4e:5e:bb:fb:98:d4:0f:8d:43:d7:8e:b4:da:76:a0:02:09:8f:
         24:db:2d:dc:7d:e6:71:e3:63:97:15:b8:36:ef:18:a7:ef:68:
         e1:a3:41:5f:c7:6d:70:19:96:f9:02:ba:62:80:18:52:bc:b6:
         5b:e9:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:34:28 2026 by rpki-client