Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa
File:                     52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json)
Hash identifier:          jOhHc5ta8wjcZz4n57wybV/nJenKglZM2j1yI4W81+A=
Subject key identifier:   86:33:D5:F1:DE:E2:C0:47:07:03:B8:22:0D:1B:19:3A:69:F1:C2:96
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584F35E7C9054A1A737C7D329180
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     21947
IP address blocks:        192.225.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c9:05:4a:1a:73:7c:7d:32:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=e74fe3a8-3093-469a-831a-daaa05b1ecf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:73:f8:46:5d:4b:c6:25:81:86:e9:bb:22:
                    50:71:0a:47:5d:33:03:8c:ee:82:6b:7b:1a:9f:b6:
                    81:47:ce:5b:77:51:7f:2d:0d:57:98:79:57:38:1e:
                    5b:4e:e8:96:87:8a:0c:e3:29:33:38:14:bf:15:72:
                    36:d6:4f:ea:cd:ad:0f:db:83:67:17:c4:d4:12:bb:
                    78:4e:f2:9f:70:d4:c2:9b:3f:c9:9d:9d:43:3a:ed:
                    cc:41:e6:10:1c:bf:66:8e:4b:5c:9e:68:2a:5d:98:
                    99:76:21:ba:e5:bc:ac:4a:ce:c1:95:30:7c:c7:fe:
                    68:93:83:3c:06:3e:fd:70:00:98:b1:5f:92:3f:ca:
                    65:68:4d:bd:3d:6e:d9:ba:01:e6:3c:95:e7:b6:78:
                    25:18:1e:8a:e0:21:23:a6:69:58:67:0f:1c:dc:7a:
                    e5:11:dc:8c:d2:50:7f:14:54:d6:4e:5e:7e:f8:bf:
                    9d:c0:ff:2c:1b:f4:13:92:1d:67:fc:9a:6d:13:28:
                    ef:7a:83:59:63:08:2f:13:7c:43:d9:4c:b1:38:2a:
                    96:a9:cd:7e:77:a5:43:f8:30:f2:7d:3c:14:c1:8f:
                    2c:81:e8:1f:ae:c9:4f:ee:5f:e5:bf:d4:32:25:00:
                    97:21:2d:e9:69:83:2d:d0:8e:c3:cf:03:47:2f:79:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:33:D5:F1:DE:E2:C0:47:07:03:B8:22:0D:1B:19:3A:69:F1:C2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:04:77:2f:00:e6:03:ab:4d:e6:23:0c:46:7c:db:5c:e3:63:
         cb:a0:60:ef:b6:7b:9a:56:e2:c1:d0:3b:19:48:bb:39:05:ea:
         68:48:0f:98:86:55:63:6a:c3:d0:13:e3:d5:9d:84:dd:f1:62:
         2e:2d:e0:59:03:9c:02:f7:22:16:f6:4d:ae:7a:fc:91:e6:8f:
         d0:79:5d:b1:a7:72:40:eb:fe:46:c2:d7:37:a1:8d:e8:b5:d3:
         b3:be:ae:66:39:58:4e:46:fa:ed:16:ba:1a:c8:b1:a6:66:2b:
         f8:e9:61:44:a9:7d:83:ae:95:a1:bd:b3:5e:1e:67:57:21:78:
         38:4e:9e:aa:14:8a:43:36:36:4e:ac:29:f5:9b:90:8b:39:a7:
         f5:8d:78:17:15:a6:d5:13:29:24:78:35:79:62:3c:a6:06:9d:
         f0:08:4e:51:7e:15:7e:cd:79:bc:4e:7d:e9:93:50:93:41:d5:
         7b:c8:4d:8d:4e:c2:fc:26:93:30:03:81:8c:b7:e3:e6:7c:39:
         42:59:c1:33:be:49:2c:bb:86:74:16:7b:1d:d6:bb:ef:30:b0:
         a2:d9:24:eb:76:3a:22:1d:f7:44:0c:f5:9a:6b:08:8d:62:fa:
         99:fc:84:f8:91:8b:3a:14:84:5e:2c:67:64:91:e7:6b:46:87:
         8f:3d:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:37:04 2026 by rpki-client