Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bf52920-d95b-39a3-a665-028cbe223057.roa
File:                     5bf52920-d95b-39a3-a665-028cbe223057.roa (raw, json)
Hash identifier:          hNN9VV4FExbv/7mdHu2iwVuoc2QwhQRZjUjq56yAsAc=
Subject key identifier:   BA:79:93:FF:D4:15:BD:47:70:0D:10:F2:2E:78:5E:E6:BB:96:9D:01
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF2E778E6416D002CF0EF2140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bf52920-d95b-39a3-a665-028cbe223057.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        184.51.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:78:e6:41:6d:00:2c:f0:ef:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=c92b115c-4b64-4aef-be63-4f109ea342ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:16:c1:c0:ca:72:d9:94:6d:fe:87:52:95:
                    dc:d3:c8:0c:c7:b8:6e:c6:9e:37:32:b8:57:8f:9a:
                    dc:10:cb:45:5d:cf:89:90:d6:fd:c3:10:16:41:6c:
                    29:19:3e:99:01:30:61:7c:72:94:f0:d8:d8:b7:7b:
                    18:ed:20:65:f9:66:b4:15:5c:cb:46:db:c7:31:92:
                    f6:f7:be:1b:80:70:67:d4:d7:d8:c4:2c:bc:0a:bc:
                    22:ea:f0:89:a0:38:ff:09:21:55:77:83:da:d0:a7:
                    1e:01:ac:5c:44:3e:ef:32:1c:33:dc:1f:50:90:30:
                    32:14:9b:41:5a:fa:8f:61:c3:e5:97:6c:ed:ee:3f:
                    31:6d:c8:6f:d5:fe:33:5a:48:04:b0:63:7e:45:6e:
                    26:42:62:ec:80:ef:53:41:e2:3e:5c:ad:70:f6:6f:
                    41:3e:c3:3a:07:8d:82:bf:07:90:78:c6:47:a7:cd:
                    b3:0f:cb:88:35:51:d4:4e:87:34:fe:de:a0:8d:52:
                    df:d8:0e:0e:c4:17:d1:61:13:a3:31:ac:dd:0b:6b:
                    d5:f2:14:95:07:bd:6c:be:58:e2:28:f3:10:cd:62:
                    3c:16:f5:70:e2:bb:18:83:20:44:5d:a9:a0:f0:ae:
                    1d:b2:d1:65:d4:20:e1:7e:fd:35:79:94:5c:85:a4:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:93:FF:D4:15:BD:47:70:0D:10:F2:2E:78:5E:E6:BB:96:9D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5bf52920-d95b-39a3-a665-028cbe223057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:46:08:8b:7d:97:bc:a5:d7:a3:a5:b3:8c:d1:2d:07:ab:
         96:18:83:d3:78:1a:24:53:19:2d:ff:40:8d:22:f7:83:9e:7b:
         fa:05:26:ba:0d:41:41:31:d9:37:0b:87:f5:82:98:00:e6:86:
         10:30:57:b6:c6:97:0f:75:37:4e:ec:c5:29:89:08:a0:20:9f:
         9a:31:7d:e5:29:b8:35:33:52:55:99:d6:82:be:36:30:90:80:
         ea:ed:61:28:4c:90:22:94:f3:eb:61:d7:92:08:2e:51:71:88:
         71:59:71:03:8b:1f:1a:ed:05:9a:63:4f:77:8e:53:f4:87:82:
         5a:c6:64:d6:e5:21:d3:b2:48:fa:3d:78:c6:36:45:8c:08:86:
         e8:4c:6d:80:58:10:d2:3b:2d:18:5a:67:a1:96:53:43:40:66:
         cc:ef:80:ca:20:8c:be:dc:3a:e4:bb:c8:81:53:da:c5:9b:fb:
         17:28:f8:1f:7c:65:6b:2e:4f:d1:e3:b2:8c:18:cb:c7:ec:f0:
         96:78:88:50:90:30:da:87:7f:ce:99:e9:3d:15:54:71:df:49:
         1d:45:89:f9:a0:0c:97:da:a5:19:3c:7a:da:f1:a4:ba:2d:e4:
         68:52:ab:df:0a:b9:14:d2:ec:d9:b9:c5:6a:2a:06:c6:a0:3e:
         8b:d2:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:46:52 2026 by rpki-client