Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/52cbe09d-0f36-3c66-b7bf-50d08b3d083d.roa
File:                     52cbe09d-0f36-3c66-b7bf-50d08b3d083d.roa (raw, json)
Hash identifier:          dXWX+eOcbTj9T60tStE+1Gg1dN+8slTHbhV/zOGZB4Y=
Subject key identifier:   03:6E:6A:CD:F8:28:3B:04:1D:4B:ED:C1:5B:C6:C6:30:BE:5D:6C:73
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F4328584D5E1A719F12BC1D8F2832DA20
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/52cbe09d-0f36-3c66-b7bf-50d08b3d083d.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     1651
IP address blocks:        69.50.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:71:9f:12:bc:1d:8f:28:32:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=069c5911-505e-4559-991d-855bac3d675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:2d:a4:cf:85:bb:2b:a6:c8:6e:b9:74:23:
                    44:80:10:c9:e2:4e:6f:4b:2e:9d:dd:67:9f:c2:29:
                    ed:8f:14:c6:3c:72:fc:ad:3b:ff:ec:4f:d7:cc:74:
                    5e:e3:d8:ea:28:31:0a:ea:81:2a:1b:6b:b1:f2:e6:
                    00:bf:8d:d8:b0:b8:f5:73:e7:bb:6a:c5:6a:36:74:
                    8a:79:83:e5:38:6e:50:8c:5e:44:c2:46:ce:35:c3:
                    09:b9:24:c2:b3:4e:a4:58:78:35:6c:2c:70:e5:74:
                    e8:f4:e8:d5:92:31:80:fe:72:1a:8f:d2:1d:6e:a9:
                    23:cd:db:41:23:6d:04:36:df:14:05:9a:cc:52:38:
                    13:63:0b:e7:d1:e3:ea:36:72:cf:a4:91:1c:54:aa:
                    a0:54:25:36:88:2a:8a:f7:0f:d2:aa:7c:6e:84:0f:
                    94:4f:c3:9f:20:27:19:7e:fc:e4:c6:a9:b7:f5:23:
                    19:f8:88:65:63:51:e6:bf:5c:d8:74:8b:67:88:11:
                    41:51:15:db:99:04:6b:20:a1:58:54:5b:f3:e9:aa:
                    6c:26:5a:18:c6:db:61:e4:07:af:4f:89:f6:5a:c3:
                    d6:80:7c:21:e9:e6:c3:75:af:c2:7d:59:d5:24:e6:
                    da:81:77:b4:f7:7a:20:33:d9:5a:8a:b1:2d:64:24:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6E:6A:CD:F8:28:3B:04:1D:4B:ED:C1:5B:C6:C6:30:BE:5D:6C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/52cbe09d-0f36-3c66-b7bf-50d08b3d083d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:31:3b:09:b2:bc:99:a6:68:28:1c:8a:b3:ea:70:3f:25:
         c4:3e:b3:8a:78:eb:e4:63:da:d7:84:88:8e:72:2b:33:11:53:
         08:7e:89:1b:45:2e:1c:98:b4:93:92:2f:44:04:08:29:b2:a7:
         85:7a:13:f5:71:1d:67:f7:a1:5f:e2:16:0e:6f:97:d6:48:41:
         48:8f:10:c2:ce:07:89:37:dc:8e:f6:82:ab:7c:4f:5e:a2:43:
         88:b1:83:9d:9b:52:09:13:03:29:ba:80:dd:a6:de:68:0a:0d:
         7a:0c:2c:e4:01:2b:e0:de:77:f4:d7:70:29:23:21:f0:0c:eb:
         e5:1c:5d:4a:59:ee:01:bf:02:0e:ea:b7:29:85:32:5f:10:8c:
         00:68:9a:3e:0a:ac:83:a5:a4:8a:08:9c:e1:c8:e3:55:94:12:
         3b:9d:e3:d5:46:bd:f2:cf:21:f0:da:9a:8f:72:21:fc:50:33:
         e0:ff:6c:f7:c2:a4:88:05:0c:7c:d7:ae:06:78:fe:5a:fd:21:
         72:69:11:ee:ed:bd:1b:e3:b7:f6:44:c2:9b:b6:6c:a5:6e:08:
         04:17:c4:20:88:0c:35:dd:93:77:7b:d5:ac:e1:e1:fe:ba:92:
         f1:54:7b:43:da:25:97:2a:2d:c1:67:7a:d1:e3:60:da:ba:da:
         68:e6:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 22:59:15 2026 by rpki-client