Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
File:                     49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json)
Hash identifier:          7lrsTLwzYL+ZtL484HXqXxYF+ffNiiq5JMpgotkF+fc=
Subject key identifier:   B9:43:E7:29:D9:A8:F6:30:EF:86:5B:04:69:01:14:A5:DA:21:4D:65
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F4328584E6F3A37AED40CFE40361D3280
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     35860
IP address blocks:        63.133.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:37:ae:d4:0c:fe:40:36:1d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=26e229f6-c9dc-4342-b8ac-2de53867643b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9f:1f:71:d6:e4:4e:33:b7:ba:7c:f8:ab:58:
                    87:2d:12:bc:e6:7b:03:b3:f3:04:11:30:51:19:2d:
                    76:50:fa:9d:6a:3e:ac:f4:fe:a3:78:18:e7:7d:50:
                    2d:d8:49:22:7b:9e:c8:7a:22:c5:86:c2:9f:fb:38:
                    51:4a:fb:73:84:9f:d6:8d:7b:ad:3d:18:d6:87:29:
                    ef:eb:0e:ec:d6:41:04:da:e6:2e:ea:03:92:bb:f0:
                    74:47:5c:98:ce:cb:db:e9:8a:7b:39:2c:df:92:ca:
                    09:59:8c:42:b5:4a:ba:70:00:a5:1b:6d:5a:74:45:
                    19:5c:df:01:56:dd:9d:ae:97:eb:82:52:40:a0:e9:
                    33:c6:95:dc:55:8c:1c:58:e7:87:9c:7a:3a:3d:ac:
                    bc:46:e0:3c:ae:2d:7f:66:ac:b1:67:7b:24:ca:98:
                    e8:23:9f:aa:29:34:f4:84:28:23:74:60:3d:bd:a2:
                    bd:ff:d5:23:08:4e:41:aa:2c:10:0c:e0:f6:8f:2b:
                    74:19:e7:c0:12:ba:8a:d3:35:ff:a8:8a:c8:7f:6c:
                    7f:85:89:5c:d8:44:b5:33:3f:0d:d6:68:6e:b7:0d:
                    69:8e:5f:e3:44:de:f6:7b:78:29:0d:4b:30:1e:9e:
                    45:1b:1f:dc:0e:d0:b9:cb:3e:ee:fb:bf:56:78:54:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:E7:29:D9:A8:F6:30:EF:86:5B:04:69:01:14:A5:DA:21:4D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:6a:e1:76:4b:92:b0:79:42:2a:9d:7d:ec:97:ff:7a:b5:
         b7:7c:e8:b6:aa:39:76:20:65:7f:e4:f4:69:d3:64:0d:9d:ee:
         2a:d3:0d:ca:b9:e0:8f:5c:b8:b3:5f:72:a8:d1:fb:17:9e:e0:
         d6:66:3d:fc:b4:84:1d:04:95:98:c9:d6:7c:e3:45:27:30:1e:
         fb:96:93:3a:cd:9b:91:05:92:52:4c:84:cc:89:38:4a:a9:9a:
         a1:28:bb:ea:b6:d9:22:2e:94:ef:bf:b0:55:4c:87:6f:37:d4:
         a9:6c:d5:3f:14:ce:f0:7f:65:d1:77:44:92:f0:df:4a:fe:88:
         25:f7:8e:17:d4:e1:45:93:e0:22:67:71:3e:97:b9:d9:47:0c:
         e6:59:33:52:4e:53:f1:b8:a0:6a:dd:2c:ae:12:8f:f9:99:05:
         9a:c6:7f:45:b7:81:92:18:52:e9:3a:d7:01:4b:8d:0f:12:91:
         37:ff:21:be:db:2c:53:3a:d2:af:d5:ab:d1:88:c6:c4:16:6d:
         96:11:aa:86:eb:96:e9:e1:59:83:b7:e9:b2:33:f9:f8:6a:4d:
         be:b1:23:f3:a8:eb:2b:22:0c:be:2d:fa:b2:20:05:9e:2e:e9:
         4a:ab:36:1c:ba:d3:77:08:2a:63:64:f3:20:76:57:a9:95:44:
         dc:90:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:29:25 2026 by rpki-client