Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
File:                     e9195c1c-eac2-3b7e-9493-9fcabda112be.roa (raw, json)
Hash identifier:          CWHi7uJenMLoQzmbAqgqty7EYtsNDglZOjvQBJuYYR0=
Subject key identifier:   18:FB:CD:56:C5:49:6D:C3:DE:D6:14:62:A7:16:0B:A5:AA:E0:02:0A
Certificate issuer:       /CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
Certificate serial:       010D0C9F4328584F2ABD127DF5888699B2CAD080
Authority key identifier: DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     397546
IP address blocks:        67.210.0.0/22 maxlen: 24
                          162.249.184.0/22 maxlen: 24
                          2602:fde1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:12:7d:f5:88:86:99:b2:ca:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=119030cf-0f03-4aea-bec5-05cc0e94bcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:84:cc:ed:45:52:bf:27:cb:d1:21:2a:79:
                    95:e0:e7:9f:b6:98:a0:31:ed:c9:b6:d4:6a:ab:99:
                    1d:65:bf:d6:cd:04:9b:09:92:79:16:63:ce:2c:ef:
                    71:65:b8:d6:9c:6e:cb:d1:4a:b2:f8:12:0c:86:d4:
                    fb:c0:ed:5c:02:3d:35:9b:40:a9:00:56:8e:de:72:
                    37:66:25:37:4f:08:12:99:d1:2d:86:93:44:9f:5c:
                    41:73:6f:7c:bc:13:4d:8d:62:50:4d:6f:d4:09:64:
                    e9:1e:78:13:01:b6:ce:2a:44:99:8a:c6:87:78:29:
                    92:4d:b7:c0:2c:b7:9c:91:bb:01:22:7a:1f:b5:b0:
                    96:41:5e:09:d2:ac:42:25:10:87:12:de:21:bb:46:
                    ad:02:94:dd:bb:47:79:ae:db:7b:3c:0b:b2:74:84:
                    63:95:ff:de:5a:a9:cd:fe:8a:dd:42:3c:81:04:86:
                    a3:eb:3f:2e:42:d6:1d:f1:6e:82:42:cb:67:5a:bd:
                    6a:cf:ed:6a:e8:41:dc:7e:6a:45:ae:ef:3b:3f:2e:
                    8a:95:dd:9b:52:bd:b0:23:df:11:f2:cb:1d:80:33:
                    2d:dd:08:76:3e:2b:c0:f9:e5:e8:40:6c:97:1f:f4:
                    f2:9c:c2:f1:93:2c:ae:c5:3d:19:9b:4b:e4:db:0d:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:CD:56:C5:49:6D:C3:DE:D6:14:62:A7:16:0B:A5:AA:E0:02:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl

            X509v3 Authority Key Identifier:
                keyid:DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.0.0/22
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:b4:9c:19:1f:94:6c:1a:51:c8:15:70:8e:79:70:1a:40:
         ce:11:e5:30:f0:21:88:7d:d2:2e:bf:88:56:1d:14:39:93:25:
         e4:af:27:53:e9:8a:d9:16:37:f5:c0:59:8d:0c:65:9b:1f:94:
         39:c1:72:27:4d:6c:ff:a0:81:ae:c6:ad:05:a9:9e:9d:51:55:
         7f:ce:11:a4:0b:10:42:3d:48:a8:72:30:65:6b:9c:00:08:fb:
         38:44:d9:24:c5:3c:d8:40:c7:fd:d1:93:08:a0:d7:3c:16:96:
         69:df:2d:28:56:55:4c:54:fc:22:87:1a:bc:f4:85:12:b6:52:
         96:7e:3c:29:81:e2:b7:11:a5:19:38:c3:b5:de:df:5f:73:f7:
         fb:1a:50:73:ac:0e:61:16:c4:96:7b:67:50:22:c8:c2:a6:0d:
         06:a0:61:79:0f:56:49:a3:28:b4:36:ad:4e:08:f8:55:fc:9d:
         bd:60:dd:b9:e0:aa:44:cf:c9:ff:2c:3c:01:4b:13:4b:0e:64:
         db:e1:f1:bf:b2:49:27:80:de:80:60:8c:41:18:4b:76:eb:fe:
         70:1e:b5:7d:6f:d4:4d:63:c6:06:2d:7f:39:47:60:97:05:e2:
         ec:35:54:5c:0e:ec:b1:17:0d:80:b3:a8:fc:30:91:10:bb:92:
         8b:57:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:00:16 2026 by rpki-client