Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa
File:                     11291530-ef71-3108-b571-e1389eeae0d7.roa (raw, json)
Hash identifier:          A2SlVFzIHOPPpoqanRVrWZOGuRGWWonhQ7f9zcLZEfQ=
Subject key identifier:   8B:1A:9C:1C:88:FC:6E:88:20:E1:B1:4A:9F:40:6D:F3:2C:80:6A:D2
Certificate issuer:       /CN=f52ac19a-88a9-43fa-af2a-598053745c15
Certificate serial:       010D0C9F4328584DAE32D4CED79F5171C9637200
Authority key identifier: D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa
Signing time:             Thu 30 Apr 2026 17:34:39 +0000
ROA not before:           Thu 30 Apr 2026 17:34:39 +0000
ROA not after:            Wed 29 Jul 2026 17:34:39 +0000
asID:                     402375
IP address blocks:        64.251.224.0/24 maxlen: 24
                          64.251.225.0/24 maxlen: 24
                          64.251.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:32:d4:ce:d7:9f:51:71:c9:63:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52ac19a-88a9-43fa-af2a-598053745c15
        Validity
            Not Before: Apr 30 17:34:39 2026 GMT
            Not After : Jul 29 17:34:39 2026 GMT
        Subject: CN=37eaeea7-4c55-4244-96d2-faa6c14c0f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:64:fe:5f:7c:25:ed:46:8f:a5:90:06:cd:
                    4f:2d:8a:55:5d:51:ed:33:71:8b:e8:83:75:9a:94:
                    b5:0d:5c:29:51:1c:17:b9:a0:05:45:9a:f5:58:73:
                    48:1c:f1:2e:a1:63:41:ae:eb:32:97:e7:57:e2:83:
                    50:97:f2:2a:aa:c8:aa:c9:79:c1:26:0f:26:b8:85:
                    48:4c:08:a1:62:9e:39:c6:f3:49:ad:50:b5:88:11:
                    5b:06:49:ec:0a:43:95:5e:b2:35:d3:86:ce:eb:2a:
                    55:55:2d:f9:a3:b1:c3:9c:f8:4f:84:d7:c5:9b:5e:
                    80:9a:c8:ad:c7:b5:eb:f1:86:d0:b5:8a:8d:c5:1a:
                    c2:71:2f:87:40:94:45:22:de:e8:b3:ea:28:17:5a:
                    1d:a0:b3:36:f2:09:21:9e:97:ac:87:90:70:47:84:
                    e8:c5:63:18:94:64:a3:a2:d8:e8:b5:cb:e3:91:5b:
                    db:c9:44:81:59:e6:3e:1d:b0:15:be:d7:02:4e:ae:
                    95:35:f5:48:63:89:f0:c8:07:f0:04:7f:0e:ae:22:
                    5d:16:60:a4:ec:e0:9c:25:a5:88:ac:a7:8b:27:96:
                    c3:d6:5e:20:a5:9f:3b:a5:d2:cc:ff:cb:49:77:b4:
                    7a:32:8c:3e:37:6b:d0:5a:e6:b0:3f:ec:d1:c6:a4:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:9C:1C:88:FC:6E:88:20:E1:B1:4A:9F:40:6D:F3:2C:80:6A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.crl

            X509v3 Authority Key Identifier:
                keyid:D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.224.0-64.251.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:66:e6:1e:f8:c2:24:47:58:c4:d6:33:70:32:24:f5:8f:
         88:96:2a:f0:66:14:d9:74:5b:0e:b8:fa:2d:8f:b8:19:97:1d:
         70:d3:83:87:cb:07:b3:16:02:11:78:55:30:2c:8e:34:bc:b9:
         53:f7:25:fe:64:38:56:c7:f3:88:f1:25:f6:0b:79:3a:ed:c0:
         01:02:6d:3e:29:86:6b:05:0a:8c:e9:23:ef:03:06:45:50:11:
         e2:bb:3e:6f:e4:b4:cd:e6:05:9a:b4:8f:2f:5c:88:94:28:da:
         93:ad:67:5e:70:a9:e0:3a:14:af:1d:fd:58:0f:3b:07:b2:3d:
         c7:16:7e:27:3b:27:e1:27:ec:33:87:3d:ff:42:57:2b:49:87:
         e0:4f:06:1b:45:76:f0:b2:68:e8:52:a9:ab:a5:07:26:53:2d:
         43:40:9f:dd:df:03:b7:59:ae:ac:79:40:e3:7d:48:54:76:12:
         fe:d4:73:25:a2:66:81:aa:39:52:7c:8b:18:2d:a1:c7:43:bc:
         60:bf:f1:11:03:8d:60:b6:1c:02:c0:3f:39:7e:c5:93:75:2f:
         91:d3:60:29:21:e0:df:0f:ad:c5:6f:82:74:88:bb:b1:dd:a7:
         b2:ff:f9:45:1a:37:1a:a3:a1:44:b5:2c:c9:26:60:ca:50:53:
         dd:45:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 19:28:39 2026 by rpki-client