Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa
File:                     52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json)
Hash identifier:          ZmiuIU9fZ6lqy2H/2PpM4/meq2jiSgXw8gSfmoUnUuw=
Subject key identifier:   C5:90:72:69:01:48:5F:26:74:69:A8:FE:A4:B0:C3:F8:48:09:35:D1
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CD2A1EAE64386621B0AEFDDC0
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     21947
IP address blocks:        192.225.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ea:e6:43:86:62:1b:0a:ef:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=5b8b6f1d-b2d4-465d-8fd1-bcaaf275fff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:10:c7:f9:4c:c7:29:e2:e3:2e:19:bc:77:a6:
                    ed:08:86:3d:3b:80:06:ec:38:00:ba:02:e8:fb:c6:
                    6f:ce:2a:5f:03:91:85:fc:d5:92:4f:06:f8:b9:24:
                    ea:a8:f8:97:a1:7b:d3:c8:39:96:8f:7a:db:38:b0:
                    0a:1e:7c:3a:32:04:f7:20:cf:42:54:b6:09:3e:36:
                    3c:21:a5:7f:0e:a4:e8:67:57:67:2a:16:8b:56:a9:
                    38:a4:79:d8:f4:2a:a7:36:8d:f9:57:30:87:00:9e:
                    44:1e:cc:2c:18:ea:8a:c7:2c:fa:fc:df:74:4a:e4:
                    b5:44:d3:cf:21:26:28:12:77:b7:88:39:9c:69:e6:
                    58:21:64:04:cd:c4:af:0b:ff:9c:bf:03:3f:f4:26:
                    be:cc:9e:a5:fa:71:3b:51:3e:94:f5:47:24:af:fe:
                    b0:0f:43:9f:db:d1:67:ff:37:d6:75:b1:44:94:10:
                    cb:2e:50:31:43:8d:5e:6d:35:14:6c:33:76:a2:b8:
                    cd:07:c3:19:c1:bf:6b:8d:88:d8:6b:42:f2:9b:29:
                    db:19:64:b5:39:11:5e:d4:22:05:8d:09:db:34:42:
                    f4:3b:2c:2b:9c:f9:ef:1c:98:b3:58:0e:ec:c9:6e:
                    00:e3:f7:c9:df:70:4b:7d:a2:7e:f8:ad:73:be:ea:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:72:69:01:48:5F:26:74:69:A8:FE:A4:B0:C3:F8:48:09:35:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:17:7d:8d:6a:c7:7d:62:b8:f6:e3:57:8e:bd:34:17:48:
         67:32:70:05:d8:29:fb:fc:5d:54:0a:8b:b5:0b:13:9c:d7:80:
         62:fb:e7:58:64:0b:7c:09:7f:bf:19:89:81:35:d6:65:9f:89:
         23:07:f1:54:81:51:92:2e:95:9b:10:80:66:af:f4:d1:73:38:
         08:a7:eb:91:0e:f6:36:d8:3b:99:2a:71:8e:7d:4c:45:da:de:
         13:28:a1:87:89:1a:ff:6d:43:49:10:2d:09:36:e6:c6:bf:de:
         fa:11:11:95:99:78:fc:31:20:0e:52:9c:ad:cc:0c:7e:62:6c:
         84:0c:c3:6f:0f:a6:bf:4b:b1:ff:67:f8:76:f4:65:f7:22:d7:
         90:56:37:0d:35:60:3f:d2:56:12:f4:79:44:27:26:90:d1:4a:
         21:4d:db:c5:24:65:26:fb:a9:b2:a8:d2:63:b6:fe:4b:bb:10:
         4f:41:1f:71:4f:f5:3c:31:bc:55:f7:e4:94:43:51:1d:ab:81:
         a6:16:e0:f2:42:18:02:10:54:f7:66:1e:84:aa:1f:4b:2f:1c:
         cb:87:c9:5e:90:af:b4:ad:21:93:b2:42:e2:a8:fd:f3:0d:c0:
         08:0c:3b:26:9d:c0:1d:15:35:26:ef:da:1e:34:a4:76:a8:02:
         75:11:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:11 2026 by rpki-client