Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa
File:                     032db2cf-b879-3203-867a-fedba2c1f577.roa (raw, json)
Hash identifier:          vg+IK8at8TDBIqAf+yi6ThdbPojxBCTm/hma9ku9VLc=
Subject key identifier:   EA:B9:27:F4:B1:A2:83:BE:45:51:BA:68:2F:26:A9:57:15:8F:14:69
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584E1FA9B65E846A4E97DA08A2C0
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     62943
IP address blocks:        170.52.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:b6:5e:84:6a:4e:97:da:08:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=b8049bb7-93a8-4b95-9a56-f1b379728cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:32:4a:70:5b:84:ee:46:b7:fb:0e:3e:0c:
                    7d:73:7f:35:fe:71:8e:db:99:20:32:ac:db:ec:1b:
                    a0:45:78:2b:01:23:d9:33:fd:d7:e7:41:79:7e:a6:
                    4a:9a:b2:e0:2e:7c:07:3a:6e:d9:0f:e6:87:31:60:
                    f0:72:b0:0c:17:ec:f6:b0:78:49:81:4d:ca:63:52:
                    59:6e:d3:f9:f1:9e:87:79:a8:12:6e:77:c9:80:6a:
                    85:2f:dd:30:28:74:3c:4e:f7:aa:05:78:18:5b:0d:
                    3d:eb:51:25:62:ab:7c:a2:50:9a:02:77:83:eb:dd:
                    45:67:bd:6d:0f:b2:83:ae:35:0c:b0:9a:32:24:17:
                    37:6e:a7:27:4c:e5:27:2a:e3:f0:ec:b8:02:f8:e5:
                    a7:0e:4f:13:25:68:b0:38:4d:51:9a:ec:a8:02:5b:
                    66:35:da:2a:a5:65:1e:6f:e5:8e:21:63:fa:7a:8a:
                    b6:91:bf:84:2b:2d:12:97:7f:08:79:bc:55:73:ca:
                    6c:c4:99:e0:6a:60:ec:8e:26:5d:d8:4f:8f:7e:76:
                    c8:cd:41:2d:3c:1c:21:03:91:14:1c:ba:0d:6d:b6:
                    1b:db:bd:d3:3f:c2:37:fc:d1:3d:cd:4b:a6:5e:b9:
                    f2:b6:db:5f:e7:ef:52:4a:4c:58:f5:51:55:9e:6e:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:27:F4:B1:A2:83:BE:45:51:BA:68:2F:26:A9:57:15:8F:14:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.52.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:ec:ee:3d:88:22:3b:44:b4:02:34:5b:54:07:b2:e7:f5:
         82:37:f5:10:c1:ec:e9:4c:ac:db:f7:f0:dd:04:8b:ec:2b:22:
         31:00:47:36:9f:cf:32:c3:98:b7:ab:a4:67:35:0d:9e:76:1d:
         53:44:ea:85:87:db:f4:9a:9d:37:f0:f5:78:48:43:66:de:dc:
         6f:af:d1:b6:84:1b:5b:ed:21:45:29:51:3f:dc:e0:48:95:a5:
         c0:04:6a:c2:7d:8e:0e:fd:81:88:59:ca:37:c1:37:c6:e1:51:
         09:d7:0f:45:1b:fe:b5:46:ea:d4:51:1c:67:ec:0a:75:12:a6:
         da:98:6d:2b:0e:a3:ba:80:84:26:33:02:e0:69:65:58:d2:e9:
         e0:94:53:e3:c0:a6:2d:d4:24:84:96:34:a6:7a:bc:e5:bb:fa:
         24:4e:68:af:83:f3:c9:1b:ab:88:55:f9:47:9c:92:7c:f2:52:
         43:91:ee:b1:54:5f:96:18:8f:6a:cf:f5:5a:00:b3:c2:88:6b:
         fa:d9:07:a5:f6:6b:6f:53:0c:4e:b7:19:eb:cd:10:fd:46:f1:
         bc:bb:76:5d:7a:e7:2e:91:10:76:a5:d7:b3:39:8a:2e:ab:28:
         df:b6:36:4d:1d:d1:d9:f1:77:87:fc:c1:41:ea:7f:64:f6:0e:
         8e:b0:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:23 2026 by rpki-client