Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ef31cf-e616-3a5d-b4ce-37d9ee9a3d32.roa
File:                     52ef31cf-e616-3a5d-b4ce-37d9ee9a3d32.roa (raw, json)
Hash identifier:          /gbKR76pZvq+HloOQ5xZ8d01jktPQdK35P/dlGDVUAM=
Subject key identifier:   70:AF:2F:26:F8:6A:C9:28:A1:EC:D4:47:3A:98:AA:6C:AD:66:B2:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6944FB674BA7523E1A178EE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ef31cf-e616-3a5d-b4ce-37d9ee9a3d32.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     32787
IP address blocks:        209.200.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:fb:67:4b:a7:52:3e:1a:17:8e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=ee7d7d1a-677b-4973-9775-343dac61d66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:62:47:e7:86:4f:17:84:8f:08:6a:53:57:
                    80:f5:14:0f:01:9e:c1:80:36:0f:5d:72:c1:94:c5:
                    de:0f:ce:ab:66:12:04:d3:9c:7d:36:5f:1f:fa:d7:
                    b6:28:c7:e8:9f:81:53:f9:5d:d8:b3:8a:af:25:f5:
                    13:67:82:e9:61:72:b8:48:cc:d6:59:ac:e4:68:68:
                    d2:01:8a:76:07:db:36:b3:2f:4f:2c:c0:a8:51:17:
                    74:8c:92:f3:62:cb:f4:28:b6:2d:7e:9f:9c:4d:cd:
                    5d:59:f6:3f:18:ce:a0:1b:84:94:21:b6:7c:46:20:
                    8f:68:67:9d:2b:1e:55:2c:ca:89:d3:c9:4b:9a:a6:
                    84:7f:65:82:42:59:d4:51:95:09:b5:f3:f1:ca:4b:
                    1f:73:90:94:5c:18:19:6f:83:4f:6c:8b:42:82:33:
                    81:7f:cb:35:54:6e:51:7f:e5:17:02:17:65:23:68:
                    73:af:f5:c1:5d:f3:82:cc:be:96:c8:a5:03:56:e3:
                    15:66:ca:f5:bb:77:40:dc:c8:26:b9:35:34:d6:c2:
                    ff:4e:46:d2:f4:fd:a0:a6:26:cc:34:7d:db:0d:54:
                    c0:15:e0:dd:17:b1:b8:12:51:86:85:27:5e:2c:25:
                    28:15:94:c1:5a:f6:2a:43:59:f2:ca:f4:0b:1c:e4:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AF:2F:26:F8:6A:C9:28:A1:EC:D4:47:3A:98:AA:6C:AD:66:B2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ef31cf-e616-3a5d-b4ce-37d9ee9a3d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:27:fb:18:7a:14:1a:c1:39:d0:7b:12:e2:96:2e:69:1e:fa:
         b2:4f:36:9a:4f:21:6a:cb:cd:ca:59:15:ae:30:62:e9:40:a8:
         4e:c7:08:f1:d0:42:55:26:ef:47:c1:54:9a:2f:56:19:0d:42:
         67:9d:df:29:76:1f:58:f1:a8:35:1d:a9:6f:bb:f0:5e:23:67:
         7f:53:28:dc:05:57:6f:3d:62:b1:d7:02:29:aa:40:3b:70:5c:
         18:90:ca:0a:7b:d1:95:6f:6e:f9:da:d8:e2:54:4e:54:6c:a4:
         ff:c9:1a:19:a9:72:9e:ee:a8:4f:12:45:61:b9:66:37:58:bc:
         79:27:31:c5:98:94:d6:5f:6d:ab:9d:8b:c9:9b:4a:5e:33:28:
         3b:40:72:75:69:9c:f3:b4:4e:b2:e0:a4:2d:73:b8:f7:a3:f4:
         1e:ea:79:35:d5:cc:17:28:85:95:23:e7:19:93:1d:b3:61:59:
         a0:0f:b2:58:22:f9:9f:2a:ba:33:da:a9:7a:49:be:e2:4f:3a:
         d1:d3:6b:a3:cb:71:8e:33:f7:0d:2a:56:f8:86:94:39:9b:91:
         e8:c3:9f:a0:2a:4e:f3:a2:65:76:69:d2:c5:af:4e:65:9d:36:
         c4:3d:dd:51:1e:c1:ec:43:a2:65:17:ba:47:48:8a:f3:0d:ff:
         3c:d0:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:47 2026 by rpki-client