Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
File:                     e9195c1c-eac2-3b7e-9493-9fcabda112be.roa (raw, json)
Hash identifier:          Xs8rsayFUAoqMFPPpi1ha5Nex0Gqx2v1a5DOtXAsjlY=
Subject key identifier:   F7:F7:A7:29:1C:95:A1:AA:AC:73:03:8A:91:B3:45:F5:ED:6A:C2:69
Certificate issuer:       /CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
Certificate serial:       010D0C9F4328584CC7773575085DBCFDFB4DB180
Authority key identifier: DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     397546
IP address blocks:        67.210.0.0/22 maxlen: 24
                          162.249.184.0/22 maxlen: 24
                          2602:fde1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:35:75:08:5d:bc:fd:fb:4d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=1766951f-1fe0-4535-bd0f-1f01228d0836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:9c:26:5d:2f:a1:b6:4a:b6:0b:f8:60:dd:
                    8a:a6:24:a4:ea:95:1c:45:5e:c7:c5:7d:72:d9:d2:
                    98:15:fd:44:bd:7e:1f:0a:c6:2e:8f:45:67:64:dd:
                    26:68:35:cd:47:82:93:20:83:01:45:5f:da:69:bc:
                    2a:a4:03:bd:a2:d1:7b:6c:da:e9:3b:4e:00:ca:94:
                    46:13:40:69:8e:5d:f5:7a:95:4b:e8:ee:39:4a:0d:
                    17:4d:23:bd:3b:bb:d5:9b:08:a9:5e:0b:8a:06:3c:
                    6f:2d:a8:45:e7:70:1e:4f:c1:55:5c:41:f2:20:7c:
                    0d:2e:a8:3a:a5:8d:e2:06:fa:fa:84:87:a6:16:17:
                    19:8b:e2:6a:d8:3f:0b:bc:2c:20:3a:97:1b:fb:28:
                    86:21:5f:50:38:af:73:cb:3a:c6:76:19:fc:04:7c:
                    3b:74:f5:8c:c4:0d:89:11:07:a9:85:b1:2f:ba:63:
                    63:00:db:4a:5a:a4:b7:5a:3b:f9:68:ff:7e:4e:57:
                    64:ae:83:12:ad:80:1e:e6:e9:2b:66:08:00:1d:98:
                    a5:f0:d5:d3:1c:b0:db:9c:6c:ed:fb:1c:9f:c7:f3:
                    f3:cf:3a:d0:e6:13:08:fc:73:c9:00:8b:91:74:eb:
                    53:23:b8:d7:b5:34:d3:6e:48:09:a7:38:82:48:0d:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F7:A7:29:1C:95:A1:AA:AC:73:03:8A:91:B3:45:F5:ED:6A:C2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl

            X509v3 Authority Key Identifier:
                keyid:DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.0.0/22
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:6a:45:0d:33:6b:73:b9:58:8b:a6:d3:9d:a4:e9:6a:2a:
         5f:84:1e:1d:51:76:bb:8c:04:e3:c6:fb:97:2f:15:be:d6:30:
         8e:0b:ad:48:5e:88:0f:37:8a:03:06:a9:c9:09:c0:27:88:ed:
         6e:20:e3:63:62:e7:30:13:46:a0:82:f0:23:65:b7:32:97:dd:
         70:aa:c2:86:12:61:14:34:e8:0d:bc:4e:93:02:12:4c:de:29:
         fd:6c:3a:1e:c4:be:cc:d6:b4:b7:0a:17:73:33:e0:b1:2d:d1:
         89:4a:e2:26:7e:e7:f7:c3:b4:04:d9:a8:f1:ff:d1:c7:b8:82:
         7f:3a:2f:72:b2:b3:7a:cd:a1:50:4f:b2:2b:dd:d4:6d:77:9d:
         5d:14:03:fe:1d:37:1f:f8:d9:27:52:77:a8:6e:71:33:34:a0:
         5d:b2:e6:b7:1c:72:44:37:d0:1f:49:09:76:fb:6d:fb:5c:54:
         11:96:bc:2e:95:bd:75:25:8c:10:94:50:3a:c8:88:31:b8:2d:
         bb:20:cc:10:e2:27:d2:7c:46:b8:70:20:8c:7b:f2:20:09:0d:
         ce:04:ea:86:2b:51:33:00:fb:48:8a:85:28:4b:a1:2b:f0:48:
         24:c4:fd:70:ce:7b:c0:e5:31:5c:47:43:8e:c6:69:58:72:13:
         79:ac:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:44 2026 by rpki-client