Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/52c81f3a-3845-3555-a450-068f8b5ffabe.roa
File:                     52c81f3a-3845-3555-a450-068f8b5ffabe.roa (raw, json)
Hash identifier:          xn2thDg+s5FmkJQRAjAexQYZMx5f0f+pRDHrJJiNNLo=
Subject key identifier:   E8:61:3F:AA:04:1E:55:F1:A4:16:EC:B0:CC:91:F1:A1:A2:C0:07:DE
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EC63C6EEEF39521108094034B
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/52c81f3a-3845-3555-a450-068f8b5ffabe.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     25831
IP address blocks:        192.26.68.0/22 maxlen: 24
                          192.26.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:6e:ee:f3:95:21:10:80:94:03:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=5e492c01-97a0-4dce-8092-7d4a63a2fd65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:79:39:89:3b:d7:61:9e:32:9e:76:df:6f:
                    b8:20:f3:52:4d:69:9c:f5:9c:4f:76:56:8f:48:06:
                    c7:8b:b3:f9:b1:7d:8c:43:ea:c2:41:fe:6c:09:f6:
                    48:a1:03:bf:b4:11:21:98:92:60:c7:23:1c:a5:5c:
                    4c:47:c1:4e:a0:75:ad:26:a9:e5:30:53:ef:12:13:
                    e1:34:73:14:fc:ed:45:e7:5f:52:96:b6:31:b3:44:
                    f3:ae:50:68:dc:e1:fb:3d:03:ea:95:4e:af:4b:7d:
                    4f:e7:9e:53:4f:aa:a8:e3:cc:1b:69:a9:c7:63:6c:
                    68:eb:da:62:3d:ec:86:a8:69:0e:cb:fd:df:26:b6:
                    51:e4:ee:19:4b:31:a4:1c:a1:67:be:e8:49:dc:a7:
                    e2:b4:c6:0e:73:a8:a9:e4:82:19:f3:85:89:42:fb:
                    10:07:1f:49:21:d0:e9:52:d4:33:1f:ed:80:72:b0:
                    3d:18:ad:1c:eb:40:19:b7:03:b1:07:e9:87:8f:a0:
                    a3:68:95:3d:a6:c5:1b:f2:eb:e2:00:7b:df:dd:b8:
                    0a:b2:67:de:4a:b1:89:ad:bf:18:4b:85:5e:c0:a4:
                    36:14:85:25:c8:1f:95:45:97:32:6b:4d:93:30:7d:
                    9b:01:5a:17:a2:44:ea:35:ea:ac:e6:d4:a5:2a:3c:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:3F:AA:04:1E:55:F1:A4:16:EC:B0:CC:91:F1:A1:A2:C0:07:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/52c81f3a-3845-3555-a450-068f8b5ffabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.68.0-192.26.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ce:09:f2:50:92:3e:38:a3:db:7a:ae:72:7c:40:9f:fe:19:
         b6:e3:f3:86:be:cf:58:b4:ed:1f:01:49:f8:b8:cb:fd:01:d4:
         a7:4b:96:42:d9:e7:b8:ae:26:79:31:73:3f:32:d5:3f:93:c3:
         57:16:01:d4:71:1e:01:3a:6b:82:42:fc:90:88:3d:68:5a:03:
         be:1e:62:62:9d:14:a0:ba:a6:25:7e:1c:70:3a:ff:0d:b8:7d:
         e8:da:0b:2c:86:21:9e:10:a6:35:09:7b:69:e7:b6:87:56:58:
         2e:07:76:b1:3d:0c:08:f7:8d:c3:03:29:15:f6:c6:ad:70:ab:
         28:7a:62:10:af:38:65:a3:0d:e0:0b:c8:10:9b:66:d8:16:96:
         f5:76:af:3d:a2:b7:55:0c:a9:21:21:a4:9f:1b:bc:83:8b:ee:
         b6:dd:ba:35:09:a4:64:14:1a:b7:24:93:12:11:59:db:c6:fc:
         d4:8d:02:b8:08:3f:54:a8:c2:55:46:49:a6:58:0d:50:5b:85:
         33:6d:84:22:81:22:48:3d:e8:c0:8b:8f:83:c3:2f:17:42:c5:
         dc:ac:58:d6:fb:10:13:d0:f6:b8:4f:d9:71:f4:68:71:f0:9c:
         c3:a8:5e:b7:92:08:20:4e:c3:c9:1f:04:fb:00:27:4a:7c:62:
         a8:dd:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:55:20 2026 by rpki-client