Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/756c9d6b-36dd-373d-8693-5f58ebf1d8b6.roa
File:                     756c9d6b-36dd-373d-8693-5f58ebf1d8b6.roa (raw, json)
Hash identifier:          gy/8Qs1ApQN2oIwMRuC5+prI+wdsT4syHM4Hi9xemWo=
Subject key identifier:   C4:B4:4D:52:3A:1A:62:0D:62:00:9B:A8:79:B4:6A:F2:D1:AD:77:2A
Certificate issuer:       /CN=cd857ccf-b825-416d-8fd1-7332947e606d
Certificate serial:       010D0C9F4328584D9D47563EC297811869FB5FF0
Authority key identifier: AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/756c9d6b-36dd-373d-8693-5f58ebf1d8b6.roa
Signing time:             Fri 24 Apr 2026 16:07:13 +0000
ROA not before:           Fri 24 Apr 2026 16:07:13 +0000
ROA not after:            Thu 23 Jul 2026 16:07:13 +0000
asID:                     16509
IP address blocks:        162.52.6.0/24 maxlen: 24
                          162.52.7.0/24 maxlen: 24
                          162.52.8.0/24 maxlen: 24
                          162.52.9.0/24 maxlen: 24
                          162.52.10.0/24 maxlen: 24
                          162.52.11.0/24 maxlen: 24
                          162.52.12.0/24 maxlen: 24
                          162.52.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:47:56:3e:c2:97:81:18:69:fb:5f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd857ccf-b825-416d-8fd1-7332947e606d
        Validity
            Not Before: Apr 24 16:07:13 2026 GMT
            Not After : Jul 23 16:07:13 2026 GMT
        Subject: CN=a685b73e-ecb0-4c77-8da0-02f0c971b6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:2c:e6:84:37:4d:af:d1:81:21:86:27:7c:
                    5d:4b:19:a4:43:59:eb:64:57:5a:eb:bc:ac:07:ab:
                    ab:ec:29:b3:d5:34:5a:c7:1a:51:3f:a5:e9:00:0e:
                    48:9c:b2:bd:8b:73:66:ee:17:e2:3f:73:ff:fe:56:
                    07:bf:ee:92:eb:3a:2f:79:3f:0a:04:1c:46:2e:b9:
                    9b:cc:42:96:20:dd:0f:44:94:bf:d9:ac:17:7e:46:
                    e1:4b:c3:1d:b1:61:10:f1:0c:71:ac:28:10:1c:62:
                    78:89:c0:5e:19:ad:9c:f2:99:a3:20:18:47:12:f4:
                    e0:d4:2d:1e:22:25:2a:9f:be:8e:28:e8:0f:25:be:
                    9a:4e:81:0c:ac:eb:43:b6:40:33:56:13:5f:4f:bf:
                    ea:53:c3:03:08:38:2f:30:68:b2:b3:d1:ba:0e:b9:
                    84:c3:c1:88:21:68:79:01:db:6a:eb:65:e1:d2:1f:
                    d3:6c:29:00:ea:7c:e7:ce:03:1f:1c:31:8d:cc:0d:
                    39:86:d7:7d:00:ec:ec:b6:48:7b:c8:a7:4a:84:31:
                    f4:1b:59:c0:94:a6:3c:e1:f1:55:2f:e8:b3:ec:d5:
                    9f:1d:20:b4:5c:cd:0d:f6:a5:d4:46:34:33:9c:c2:
                    a1:e1:ec:05:db:59:8b:e5:44:d4:5b:76:c9:1d:48:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B4:4D:52:3A:1A:62:0D:62:00:9B:A8:79:B4:6A:F2:D1:AD:77:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/756c9d6b-36dd-373d-8693-5f58ebf1d8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d/cd857ccf-b825-416d-8fd1-7332947e606d.crl

            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:43:2A:80:E6:F2:26:A8:C3:91:F6:CD:6D:DF:2C:BA:7D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd857ccf-b825-416d-8fd1-7332947e606d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.52.6.0-162.52.13.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a1:8a:84:01:2a:8d:f7:ce:76:e2:0e:ba:dd:84:8f:b4:48:
         5a:23:1a:4c:7c:32:72:39:83:04:4b:56:42:3d:d4:cb:ef:52:
         90:74:7b:c0:dc:6f:ab:9e:62:30:0b:f2:71:ad:6c:ab:ca:d2:
         b4:34:7a:f7:72:79:9d:9b:bf:4a:66:4a:8c:fd:d9:f2:42:c3:
         a8:74:14:a7:ac:74:78:61:53:eb:ad:cc:44:32:30:9c:75:99:
         2f:79:e7:b9:06:bf:33:16:c1:c0:e8:38:7f:c7:77:22:cb:ff:
         b6:44:c7:75:1b:5e:db:0e:d2:8f:7b:a3:68:3b:cf:3e:f0:fd:
         ad:93:79:60:0f:ea:23:96:dd:7a:25:c5:3e:2c:66:be:c0:7a:
         e3:0f:4f:e1:86:41:0f:06:d3:79:bf:e6:2c:e8:6b:5c:78:3c:
         e9:79:48:0f:68:a2:2c:8f:b4:95:e0:bd:f9:b3:34:05:5d:dd:
         41:97:31:29:30:c3:2e:cb:b6:c8:9a:0d:b0:1f:04:28:d4:8f:
         71:9b:7e:ed:d1:9f:66:99:72:04:bb:b1:26:19:dd:c0:b4:2a:
         24:d5:c1:43:7f:89:19:fd:eb:41:c5:a5:fb:ac:1b:55:56:d5:
         70:f5:57:f0:43:84:8c:f9:23:b2:ff:f5:fa:eb:e0:78:c4:09:
         53:22:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:50 2026 by rpki-client