Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa
File:                     0a30dd52-887e-3968-9494-27626898cf43.roa (raw, json)
Hash identifier:          DkfNQ47KDj2RU+qzvzECj6iRdB2SfRsI6Uy4CFZBrLg=
Subject key identifier:   EF:28:57:5C:1A:E1:9A:20:73:B5:00:2F:61:0F:81:CC:86:5A:02:DC
Certificate issuer:       /CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
Certificate serial:       010D0C9F4328584E1FA9B6E8BF9E0911D0871D70
Authority key identifier: 41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     36352
IP address blocks:        23.92.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b6:e8:bf:9e:09:11:d0:87:1d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=8de535c1-a5a8-408c-a629-916176257d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:a6:35:5a:b4:50:fc:f4:ed:90:07:ea:d9:
                    6f:07:c0:1d:87:03:d4:f9:a4:93:34:1b:ea:76:58:
                    11:49:c0:c2:83:98:40:55:f4:92:92:92:e5:6c:30:
                    12:fb:e0:48:91:bf:f3:a4:69:bc:5a:a2:e6:a4:2d:
                    9b:87:8d:d0:d1:3d:6a:d7:8a:8d:67:a0:5e:a7:66:
                    04:62:87:23:e8:55:a8:83:cd:e5:58:d3:82:5c:e2:
                    dc:33:80:b0:1e:f2:8d:61:46:70:3a:c2:bf:db:24:
                    f5:23:10:2f:10:16:3c:d9:5d:04:83:26:7f:a9:6e:
                    e1:78:b7:aa:2f:e5:24:17:12:79:97:49:67:54:2b:
                    69:27:5d:07:fe:a2:25:7d:21:46:98:dd:71:58:f1:
                    be:c7:f9:c4:99:e3:c1:dd:70:67:51:a0:b6:1c:6a:
                    d3:cd:37:bf:16:42:73:07:a3:c7:d8:74:4f:46:42:
                    82:f6:71:a4:aa:74:b6:a5:93:d5:3c:bf:fe:3f:05:
                    0a:24:f9:e6:14:e3:fb:41:b6:1a:a1:46:b6:dc:d0:
                    22:27:a3:a4:27:05:58:9e:21:75:3e:5f:44:77:e3:
                    b1:e9:99:99:cb:81:5b:f5:ea:f7:94:ed:b4:04:71:
                    06:3f:6d:f9:48:f2:42:3a:9e:42:ca:7f:eb:cb:d5:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:28:57:5C:1A:E1:9A:20:73:B5:00:2F:61:0F:81:CC:86:5A:02:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/0a30dd52-887e-3968-9494-27626898cf43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl

            X509v3 Authority Key Identifier:
                keyid:41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:0d:5a:f0:d6:5e:c1:a1:ef:5c:16:34:26:39:f9:9a:1e:
         9c:b3:78:4d:40:62:c3:5f:70:ad:3b:ff:48:7a:3d:34:a8:c4:
         48:52:0b:70:ac:7c:4b:4e:d9:67:24:2f:7d:1b:6e:0f:8d:20:
         0e:d0:cd:d2:37:41:83:ae:e4:a3:00:70:3b:b8:1f:fa:f9:76:
         d8:26:49:ec:66:dd:96:27:a4:34:89:6c:54:a8:b6:4d:78:1c:
         df:28:a6:fc:00:2b:56:36:96:83:62:ae:b6:5a:0b:90:5e:cd:
         1b:17:2e:49:3a:2e:ba:9b:a9:7f:c2:39:80:b7:cc:1a:5d:33:
         6c:b0:b7:69:f2:0a:e6:c8:bd:49:1a:91:0f:82:cc:5e:93:2d:
         d6:aa:c0:f1:49:42:57:ee:50:62:5b:1c:89:76:06:be:53:9b:
         08:6a:64:f3:6b:1b:ec:4a:05:df:bf:7a:b8:35:0b:ca:9e:c9:
         1a:a0:99:b5:e0:21:a0:a9:6d:d9:4b:e2:eb:b8:b8:79:b1:f5:
         b7:a5:5f:c5:af:ee:e1:e9:2a:d6:91:05:df:8c:8d:72:17:12:
         ea:20:02:5a:14:4e:df:ec:d0:41:56:19:71:18:47:f7:2c:58:
         46:89:d4:76:aa:06:bc:10:1e:9a:57:6e:50:93:fd:2d:67:5c:
         24:f4:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:13 2026 by rpki-client