Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa
File:                     59e71e1a-ae50-3564-849a-54acf114c131.roa (raw, json)
Hash identifier:          S/asBC4u27dKnCsL3HOuoy0WBjlaVbtpDCgpvs3d6oY=
Subject key identifier:   29:A5:5F:76:49:C1:0C:D4:9F:45:B9:BD:1B:B8:DF:AE:7F:ED:FC:D8
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584CCBA77F179957D188A7DE8780
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     40714
IP address blocks:        164.152.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7f:17:99:57:d1:88:a7:de:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=6e6de102-e1fc-40da-bddf-4b5ee3884c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:a4:de:0a:5f:67:cb:8b:1e:5d:82:4f:67:
                    a2:0a:42:32:4a:2c:d8:83:fe:61:4e:66:2e:46:c8:
                    2c:56:19:9e:4c:21:20:fc:c6:ef:24:8d:e0:9a:f0:
                    c2:08:0c:07:f0:70:a5:00:4d:ba:d9:e1:1f:cb:92:
                    b8:b9:c8:f1:36:ba:a1:7c:df:a6:9a:f0:ed:0b:be:
                    36:41:ba:a8:ac:94:ea:d0:8c:6d:fe:2f:1f:37:13:
                    ce:6a:26:e7:eb:e8:bb:73:98:52:e2:8e:d3:30:6d:
                    f1:4b:ec:cf:4f:5e:77:47:23:74:80:66:59:f7:dc:
                    e2:9d:ce:cf:5f:58:0a:01:4b:39:eb:a2:3b:12:4d:
                    1a:b0:2d:1c:ef:67:50:45:9f:73:c5:14:52:ae:66:
                    7d:ab:b9:31:61:a9:cf:65:73:52:4a:66:7c:e6:88:
                    05:df:93:d3:25:c8:1e:3f:43:ac:af:1c:f9:e7:12:
                    f2:2f:5d:16:e2:3e:c9:cf:c9:d8:d9:8c:25:55:75:
                    70:10:78:d6:19:6a:c8:47:30:f4:16:09:81:66:3f:
                    b6:1f:f9:57:bb:29:f9:ca:3a:c8:65:02:26:06:56:
                    8e:fb:93:c9:9e:1e:21:30:82:52:a0:68:8a:2d:f9:
                    30:68:1f:cf:19:bf:ca:61:2d:5c:59:3d:4f:40:77:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A5:5F:76:49:C1:0C:D4:9F:45:B9:BD:1B:B8:DF:AE:7F:ED:FC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:d9:89:f7:31:1c:88:32:25:38:6b:c7:76:c6:22:e0:9c:
         4f:be:53:71:42:f6:00:80:06:f7:3a:ba:ec:53:d7:b7:c0:e5:
         29:33:b5:cf:c4:58:f1:4b:dd:46:af:8c:27:c5:97:0e:84:bf:
         b4:e3:23:4e:0b:80:49:8e:1f:ee:ec:ce:71:5b:4b:a4:c7:f4:
         71:b8:34:f7:c7:d2:10:a6:7a:c8:77:4b:94:9e:da:d7:fc:bb:
         d5:b2:c3:9f:80:b0:fd:7b:0e:7b:58:e0:77:7b:06:bc:40:5a:
         e0:d4:65:a8:cd:2d:2c:38:29:31:be:c0:87:d1:b2:5c:a1:65:
         6f:d9:56:3e:69:03:81:ae:59:c3:7d:ba:c5:71:5e:2e:5c:4e:
         09:4e:0e:d7:15:dd:00:49:5e:03:e9:80:ad:84:77:ab:98:09:
         8d:86:74:91:dc:67:3b:fb:63:63:ba:10:d6:18:7a:1f:e5:c0:
         6d:d7:1d:83:76:0d:37:8e:a7:ad:a2:9a:8d:65:83:d9:ee:ee:
         b0:61:2a:a4:c5:8e:6e:10:f4:b3:35:67:d5:bf:6f:96:25:f6:
         b8:c7:be:91:2b:f8:7c:ab:e0:03:56:fc:99:2e:1f:b1:92:3b:
         91:d5:68:56:16:e7:f8:b3:fd:4e:c0:27:06:b7:1f:5d:7b:90:
         30:7b:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:42 2026 by rpki-client