Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          6UQzjwYu0u/dXEm9oeSPt1qrGxoB0KwLHBE5NSpezxU=
Subject key identifier:   D2:2F:F7:79:EE:EE:4E:AF:59:E3:72:96:88:34:2E:35:B1:7A:79:F7
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F4328584E210EE9CD3AA6D2A367B48400
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:e9:cd:3a:a6:d2:a3:67:b4:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=9c9f68ad-2725-4037-b348-20a7bc29c92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:c0:8d:3b:33:58:0c:2f:6f:c0:90:35:a3:
                    c6:65:85:4b:44:0f:22:bc:80:8e:f2:82:0f:66:a9:
                    8e:2c:cf:6c:0e:94:dc:67:d9:7f:fc:07:79:a3:41:
                    17:e7:fb:0f:d2:44:a9:72:7c:6c:db:f2:0a:38:0d:
                    1a:10:83:34:22:95:e5:5d:e5:38:d0:62:99:23:56:
                    c7:1d:f7:cc:c6:60:c2:ce:ad:ab:39:6a:85:9d:e5:
                    c8:81:49:f5:e5:b0:75:b6:c9:c9:37:65:2c:bc:b2:
                    21:ed:d4:60:9d:b9:8e:39:4f:c0:b9:38:89:42:e4:
                    40:a9:29:51:96:2f:a6:49:64:24:e8:cb:33:c6:6f:
                    03:17:e2:b2:18:01:d2:ff:f9:94:c5:50:da:19:d9:
                    2d:e2:9c:06:0a:84:c6:39:79:e6:01:c7:24:21:5e:
                    fd:f8:80:68:61:e3:fa:5c:c8:ab:f7:f3:31:80:c4:
                    95:b8:fb:d6:96:20:1e:f3:85:41:08:5e:2d:65:40:
                    d3:a6:60:21:0b:c6:21:f8:f0:74:88:75:9f:a7:c2:
                    b5:f2:c0:58:54:5d:7e:fe:f8:af:3c:e2:31:0f:ed:
                    58:08:52:c5:58:3b:d3:c2:b7:c7:0c:b8:ed:a6:33:
                    86:0f:e4:f4:79:b8:be:0e:41:5f:8f:29:85:9f:b2:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2F:F7:79:EE:EE:4E:AF:59:E3:72:96:88:34:2E:35:B1:7A:79:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8b:e1:ca:af:77:1c:11:2f:ba:51:2b:fc:94:bc:1b:c3:a4:
         ce:ba:5b:ba:b9:46:5c:17:3f:fb:e5:7a:35:8b:a9:be:84:8b:
         72:1f:0b:16:08:e1:19:61:50:67:54:80:92:e9:50:f8:c0:6b:
         14:bd:20:f8:b4:48:cd:ef:e1:20:8d:59:aa:9b:6e:50:5a:9b:
         b2:dc:cc:69:f9:71:87:9a:b6:af:b5:68:76:32:e6:a9:97:1b:
         27:b5:cd:90:cc:82:4b:35:ff:6a:26:14:2f:b3:40:b5:b7:ca:
         e2:67:47:63:f5:19:1e:05:b2:af:af:a8:7a:6d:95:d3:e7:f5:
         3e:9c:5c:2a:f3:85:fe:64:21:2e:f0:05:c1:f9:3f:0b:93:2c:
         9e:c8:8e:b5:26:fd:9d:fd:13:e9:b8:b6:00:ca:53:86:2c:81:
         15:21:28:bf:65:e6:73:80:1b:2b:fd:e0:98:6b:88:95:06:c6:
         00:e9:63:75:af:4e:42:a3:74:c0:2c:45:d8:65:8d:4a:ab:c9:
         64:56:64:12:90:c4:cd:06:63:f8:81:f0:5e:de:a5:22:02:b0:
         7c:48:f0:66:ea:c6:14:51:62:34:81:cc:8f:d9:5f:26:49:31:
         0c:2a:4a:57:eb:7f:db:7a:01:88:87:88:9d:67:4b:36:7d:a7:
         0e:aa:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:52 2026 by rpki-client