Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52d4a123-3797-3fb6-8aa4-8f2f128de25e.roa
File:                     52d4a123-3797-3fb6-8aa4-8f2f128de25e.roa (raw, json)
Hash identifier:          jEYmf+r4MRLBgO6JJTgBdWr1Fn0yyu8LIbfdVORgYg0=
Subject key identifier:   7C:A1:18:94:42:E6:04:B1:64:D5:EE:B6:51:C1:F9:51:91:EE:39:28
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0C3E1F3706C820773A5DB980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52d4a123-3797-3fb6-8aa4-8f2f128de25e.roa
Signing time:             Tue 03 Mar 2026 17:16:27 +0000
ROA not before:           Tue 03 Mar 2026 17:16:27 +0000
ROA not after:            Mon 01 Jun 2026 16:16:27 +0000
asID:                     214025
IP address blocks:        168.93.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:3e:1f:37:06:c8:20:77:3a:5d:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  3 17:16:27 2026 GMT
            Not After : Jun  1 16:16:27 2026 GMT
        Subject: CN=556bff7b-cae0-4251-ba9a-c9e09438342b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:d6:87:f3:dc:09:8e:bc:df:c2:25:24:d1:
                    f7:8d:81:2a:64:ac:88:18:6b:9f:0b:9b:df:54:6b:
                    2c:08:71:a3:3d:43:43:48:55:11:4a:8a:36:e1:9d:
                    d5:08:fd:97:8a:11:ea:fb:fd:62:93:bf:fb:d2:be:
                    7e:f6:47:09:cf:f6:1a:d2:e2:98:01:ec:d3:7f:25:
                    7b:4a:db:3e:54:d7:69:96:98:4e:45:5e:0c:90:28:
                    9f:11:f8:99:60:3e:e9:aa:d3:80:b9:eb:66:85:19:
                    96:38:89:b7:00:ae:d2:fb:40:d7:af:13:0b:89:08:
                    8c:26:da:c3:cf:c5:b8:17:f8:93:5c:71:d5:27:35:
                    9c:fb:6b:a4:71:db:89:b2:25:18:db:8d:9a:f0:7e:
                    44:64:24:0e:f9:ce:4a:fe:de:bf:cd:b5:84:c6:2e:
                    14:26:ae:2f:7b:a9:a6:a2:59:74:50:04:c1:1a:e9:
                    67:8e:5e:48:30:d0:21:1f:61:60:81:b5:ac:62:01:
                    44:72:55:f8:90:5c:35:97:21:88:e9:8a:bb:80:8d:
                    c2:2e:9e:f6:d1:85:0c:f1:fd:bf:5a:93:e9:17:58:
                    f1:09:41:59:28:7b:d7:38:55:00:f1:80:e1:e9:f6:
                    99:95:72:0a:b6:7f:a7:d1:1a:31:83:2b:60:62:ef:
                    d4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:18:94:42:E6:04:B1:64:D5:EE:B6:51:C1:F9:51:91:EE:39:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52d4a123-3797-3fb6-8aa4-8f2f128de25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:29:8e:0d:d9:55:48:88:8e:96:27:5d:62:5e:5b:39:46:83:
         5a:b9:20:eb:6f:13:f3:e7:56:40:42:2c:b4:fd:ee:7b:f9:6f:
         c8:7f:f4:ec:04:3f:2d:71:f0:84:87:65:65:58:67:69:b8:40:
         72:01:67:ca:b9:36:b9:77:6b:cd:56:e7:f4:c7:c7:99:03:fa:
         22:d1:d9:8e:6e:0c:f0:2b:98:d1:be:1f:e4:f5:2d:a3:8d:98:
         5d:0c:ce:99:c5:97:44:9e:f8:b1:4c:db:75:09:21:e4:37:e3:
         c0:82:a6:d3:e3:5d:12:1d:46:1f:7b:19:52:01:16:38:13:4b:
         92:1c:98:e0:38:18:b9:85:41:ce:36:8f:df:7e:9b:07:f5:9c:
         73:10:7e:4f:21:dc:07:6c:e2:9c:09:20:7f:26:e0:d4:2b:fe:
         41:b4:ee:0a:a7:72:5a:48:92:8d:95:e0:c1:78:97:b8:8a:b8:
         0b:b8:b8:50:01:cf:db:d6:58:5b:00:b9:cf:7e:a0:71:13:13:
         a7:24:b9:da:22:8e:f0:45:b3:54:e5:bd:63:78:cc:f6:39:a1:
         41:42:6b:99:c0:3c:10:b5:5b:87:59:ef:66:22:4c:a7:a8:7e:
         ef:2b:a2:de:c9:8e:b1:f7:51:b4:33:f1:16:22:34:d6:c0:ba:
         1d:5a:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 09:30:37 2026 by rpki-client