Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa
File:                     c86aad18-056e-3fa7-b8fc-e059e89eb580.roa (raw, json)
Hash identifier:          dmo+AmlLiEhD2a20bNB81zdpe1Ql+uB5xz2V/LjnoG0=
Subject key identifier:   5C:C5:B6:B3:49:E9:F5:03:60:AD:20:C8:63:F1:05:4A:39:F6:4B:BA
Certificate issuer:       /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc
Certificate serial:       010D0C9F4328584E6820EE3306FF179BCEE234A0
Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa
Signing time:             Mon 06 Jul 2026 07:58:56 +0000
ROA not before:           Mon 06 Jul 2026 07:58:56 +0000
ROA not after:            Sun 04 Oct 2026 07:58:56 +0000
asID:                     395886
IP address blocks:        169.128.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:20:ee:33:06:ff:17:9b:ce:e2:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc
        Validity
            Not Before: Jul  6 07:58:56 2026 GMT
            Not After : Oct  4 07:58:56 2026 GMT
        Subject: CN=f979a066-26fb-477c-a6f7-0907cb4c37ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:8e:5f:2f:3a:39:dc:2b:e5:2d:22:5f:28:
                    b2:e8:c2:ab:59:a0:e0:02:61:28:72:4a:b7:80:28:
                    22:b9:9f:83:e2:6c:a5:14:1d:53:39:76:8c:fa:99:
                    97:88:26:4d:50:0a:15:95:3e:1c:60:98:6e:18:d4:
                    be:9e:0a:d1:90:3a:29:04:9a:ee:8f:c5:5c:6f:2e:
                    b2:04:94:cb:cc:b3:da:29:97:e7:6b:38:91:bc:cf:
                    ad:af:0c:68:20:0f:79:a3:30:e0:9d:f9:44:44:61:
                    3c:d0:4c:c0:95:de:3c:97:d8:ae:c9:8b:1e:50:54:
                    6f:25:45:41:65:14:f1:53:01:92:d4:a4:3b:11:2a:
                    dd:6c:98:08:49:b8:51:b2:5f:ac:8c:27:df:2f:10:
                    e0:75:54:34:46:56:13:1b:16:a8:ab:1f:b0:28:42:
                    d8:37:17:42:ca:62:cf:ad:f1:86:13:65:ac:2f:e4:
                    d9:1a:63:37:a5:ff:15:00:24:43:e8:19:6a:ac:28:
                    8c:84:d7:e2:e6:bf:23:7d:5c:1d:db:7f:e0:44:2a:
                    28:dc:e3:35:4e:2a:32:e1:3e:44:98:cd:35:55:f6:
                    bc:99:2a:9d:ca:49:f3:7e:86:57:14:9c:a1:1c:76:
                    62:25:58:fd:d8:a9:d6:4c:be:37:82:05:a7:82:3f:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:B6:B3:49:E9:F5:03:60:AD:20:C8:63:F1:05:4A:39:F6:4B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/c86aad18-056e-3fa7-b8fc-e059e89eb580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:54:f6:e4:a8:e4:f4:13:8b:a7:3f:5f:20:5f:11:b0:66:e2:
         80:41:0f:43:9d:0d:03:50:fa:78:33:e0:70:5d:e0:f4:81:b5:
         e6:f3:f6:d1:5f:a6:4f:0d:35:a1:21:9f:3e:68:de:13:35:c2:
         5e:d0:0d:ae:4e:7d:14:4d:8a:f5:45:e8:3a:0d:db:e7:c3:1a:
         80:a7:f6:9a:7c:e5:ba:8a:4c:ae:6f:70:c0:c2:4d:87:98:ff:
         19:30:3c:3f:23:6f:75:19:cc:f5:10:b7:78:3c:5e:7c:f6:35:
         c6:0b:12:7c:e2:3b:7d:63:c0:96:8d:c6:29:e2:3f:c5:17:12:
         84:e1:10:ff:21:87:5e:0d:38:e4:e8:cc:4d:b4:75:3b:15:0a:
         2f:45:ae:d6:e8:a9:00:7f:20:f1:ef:ee:4f:18:c4:f1:a1:c4:
         81:b1:4a:11:09:db:e3:90:4c:90:93:ee:c4:7e:0d:c2:a4:66:
         51:59:2e:a8:18:f9:5e:52:ed:b1:74:ad:6c:c2:96:69:cd:08:
         96:c1:0e:0f:88:53:f0:b4:d5:ba:e6:5d:dc:2e:6f:7f:44:bc:
         f1:9a:4d:ad:ca:f1:52:4a:29:10:2f:aa:b7:d6:1b:dc:a7:b0:
         d1:fc:09:d8:ca:97:5e:86:eb:c1:b3:58:66:bf:a0:14:fb:df:
         2a:b8:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:52 2026 by rpki-client