Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1629e909-1041-37ed-ab25-e690110085e0.roa
File:                     1629e909-1041-37ed-ab25-e690110085e0.roa (raw, json)
Hash identifier:          vj/GN3LDYLuk4N7WtAo0XTY4naJh77cDtmmJ42+MU8U=
Subject key identifier:   51:D8:38:61:FD:AF:88:5B:AE:3A:39:A2:C6:B2:98:6E:A9:1F:11:22
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584DD625C9C245B840D782E28120
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1629e909-1041-37ed-ab25-e690110085e0.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     1403
IP address blocks:        198.52.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c9:c2:45:b8:40:d7:82:e2:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=50b6475f-e849-418b-8d3a-e684d44b6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:d7:60:35:79:67:9b:e0:a0:2a:a4:ec:97:
                    85:60:75:5d:c7:1d:2a:40:95:e0:9c:2b:4e:77:16:
                    dd:9b:1e:4f:96:f5:73:10:02:1e:d6:71:75:92:2d:
                    ee:fd:25:3f:be:f8:64:e1:f8:96:94:f7:49:99:d7:
                    f8:bb:7e:4e:b6:fe:98:d0:ef:ce:e3:d3:bb:c7:81:
                    3c:98:10:14:07:51:92:dc:d3:e6:e8:92:bb:44:7f:
                    6d:f1:27:58:0b:59:73:fc:37:65:25:cb:78:48:b1:
                    d2:f5:b9:e2:e5:89:fe:ff:4d:0b:c0:f5:49:2f:d1:
                    16:8b:5b:4b:79:68:aa:e5:36:6c:f1:fd:b3:8f:04:
                    61:e9:9d:50:41:f4:7a:d3:ae:b2:ad:b7:bf:99:ef:
                    44:64:7b:f1:0e:2a:b7:78:df:46:bc:3a:4f:58:7b:
                    cf:bc:d0:8d:f4:f3:1c:d7:f2:29:5c:e4:d4:82:77:
                    f7:1a:00:30:16:8c:32:33:30:7f:fa:d0:6b:96:ac:
                    28:f1:b3:87:a4:fd:61:ca:f9:91:96:e4:c9:54:fe:
                    a7:7e:6f:05:c9:9b:42:af:24:06:06:41:80:4e:e9:
                    04:1d:59:69:4c:f1:b2:2d:92:66:e9:58:84:9b:d5:
                    0e:ec:cb:1f:14:7f:ce:79:ad:7f:15:46:b7:5a:24:
                    b1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:38:61:FD:AF:88:5B:AE:3A:39:A2:C6:B2:98:6E:A9:1F:11:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1629e909-1041-37ed-ab25-e690110085e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.52.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:ef:ae:3f:40:71:3d:55:6d:92:5c:67:41:e6:a9:0c:a6:
         64:12:95:82:f8:96:09:98:97:f4:e0:ec:0a:bc:b4:0c:62:78:
         6d:4b:f4:be:e4:58:93:c5:be:a7:9e:f1:0b:34:aa:d9:21:1e:
         95:fa:e7:e4:22:bc:1e:58:be:d8:3d:e9:b6:08:d5:1e:43:a2:
         db:c7:dd:d3:fa:c6:5b:15:9d:05:89:16:db:bb:88:df:e7:43:
         e2:d2:7e:c1:5e:29:41:b4:63:a1:7c:e5:44:18:07:fa:5d:ea:
         06:5e:21:83:91:17:f5:c8:f0:1e:49:83:3d:73:01:41:0c:39:
         70:88:89:84:ff:10:73:79:39:19:73:62:7f:5f:af:64:52:5f:
         78:f8:16:30:6f:71:5b:34:bc:84:02:ec:d7:32:2f:0d:c2:62:
         d8:c9:43:d9:10:93:93:2b:e0:1c:73:9d:17:8a:72:b0:d9:ef:
         12:cf:1d:57:1c:0c:d2:d2:7e:97:58:c3:29:89:60:54:93:a4:
         f1:b9:0f:9e:4e:ec:ac:5a:78:71:09:df:26:01:c2:84:b3:eb:
         26:69:b5:af:55:c6:3c:b6:0d:5d:9c:f5:0b:38:a7:e3:02:05:
         52:e5:e9:ab:57:e6:e4:b6:48:ee:fc:d3:c3:af:71:fb:53:56:
         de:26:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:05 2026 by rpki-client