Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa
File:                     da48e2b0-51a1-3344-a379-970483f014db.roa (raw, json)
Hash identifier:          Ou3PUULFg7j+qgTDbugKll4t5vx0hXpgp8kiNl6jRhI=
Subject key identifier:   D5:C8:22:2D:86:66:29:35:2E:69:D1:8F:D5:EF:D1:16:35:5C:0A:A9
Certificate issuer:       /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
Certificate serial:       010D0C9F4328584EC0A72CE33533BEF986100580
Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     6528
IP address blocks:        67.213.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2c:e3:35:33:be:f9:86:10:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=5e176004-de20-40d1-a79c-510067297b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:ac:b0:6f:86:1e:04:cf:f4:d3:aa:81:28:
                    44:35:3a:b1:94:2a:c5:84:fa:dc:21:7e:91:a3:a5:
                    97:68:2b:2a:7d:2e:87:7c:ba:c4:d2:54:38:41:08:
                    75:40:cb:7d:a9:c5:b6:d9:27:2b:fa:64:b4:8c:b0:
                    a0:3b:5d:1f:91:64:e0:de:0a:6a:7b:30:4e:88:e7:
                    38:66:47:f3:b2:fc:fe:f1:2d:a3:31:45:32:62:d7:
                    25:df:1c:66:b8:82:24:28:f8:a1:41:89:19:61:35:
                    f5:11:0c:58:0c:90:4f:66:bf:78:2a:9f:b2:5a:87:
                    8f:f6:89:7a:6e:08:37:49:f4:25:ce:41:d3:6e:95:
                    d9:73:d1:ff:71:f0:51:bf:ff:f7:8b:d6:c6:f3:51:
                    aa:50:01:43:25:85:ee:76:82:93:9d:a5:bb:87:b8:
                    63:cd:39:e6:84:13:da:72:64:19:a1:40:0f:40:67:
                    07:3c:13:37:e1:c0:96:9a:64:2b:1b:50:12:9e:d0:
                    ce:84:19:9a:b9:46:61:1d:42:cd:fc:da:73:ad:93:
                    84:11:dc:33:63:e1:18:95:f5:ff:c7:ec:ba:6b:03:
                    b5:fd:43:6c:b2:d1:60:07:cf:c7:61:ff:b3:d0:a8:
                    cc:39:67:e9:e2:b9:2c:35:6c:fe:02:74:60:b6:8d:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C8:22:2D:86:66:29:35:2E:69:D1:8F:D5:EF:D1:16:35:5C:0A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl

            X509v3 Authority Key Identifier:
                keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:82:1f:66:6d:fe:07:bc:fd:fd:22:f1:c2:90:88:07:04:7e:
         d3:a7:81:40:4e:ff:41:e0:8f:7f:b8:cf:27:c2:53:e9:15:ec:
         a7:d7:40:f7:a4:1f:3f:db:ff:18:c2:12:d0:a7:d7:fb:04:f3:
         87:f0:6b:54:29:c3:52:9d:28:d7:e4:5e:97:4a:80:8a:de:58:
         44:e4:62:d0:81:1a:d2:56:f7:5f:5c:2b:c8:13:3d:c4:a5:ab:
         22:c8:f1:8d:c7:99:64:8e:41:a4:f6:ee:8e:e5:1d:2e:81:9e:
         27:83:29:1a:ff:11:65:6c:b3:92:f9:31:c0:b7:24:cf:0e:a5:
         cb:7c:1f:61:fe:5d:66:4a:56:fd:ce:3c:5a:95:18:dc:97:04:
         9f:8b:ba:ae:2e:9b:99:f7:30:c7:42:7b:dd:7c:f9:90:09:dc:
         ac:63:0f:49:b8:22:a0:ad:6b:2e:33:b1:98:e1:e1:cd:a3:b6:
         41:2c:a0:c8:fa:13:f2:25:1e:6e:b9:78:dd:eb:be:ea:88:f3:
         d2:70:db:95:69:4a:75:cc:f7:3a:2f:e0:99:e4:53:39:bf:fd:
         f1:35:49:60:50:3e:ce:14:14:86:37:cf:e2:de:af:a7:28:37:
         81:88:47:ab:c8:e8:b5:5c:fd:6b:5a:30:61:7b:fe:cf:38:e2:
         e4:3c:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:00:48 2026 by rpki-client