Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9ca5b7e7-d675-3afa-a77e-c6132a43dd33.roa
File:                     9ca5b7e7-d675-3afa-a77e-c6132a43dd33.roa (raw, json)
Hash identifier:          rFn6b/7x++F7wlldI1YKgSfBBbewmomlbxC3ASDCfX8=
Subject key identifier:   A1:E5:E3:98:FA:D3:2A:88:F2:B6:8A:63:16:C3:AB:78:92:BC:C7:46
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584EF87CB43ED58A633595399880
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9ca5b7e7-d675-3afa-a77e-c6132a43dd33.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     7992
IP address blocks:        153.52.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b4:3e:d5:8a:63:35:95:39:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=ebabc1be-540b-4a73-8892-ae3a6074f0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:70:85:08:ee:bf:02:9e:36:86:64:d3:45:
                    e6:df:36:a4:83:ca:ce:ff:8c:2b:4a:50:af:ce:70:
                    d5:c6:4c:b6:74:57:4f:3b:92:4c:e9:4f:e5:a8:26:
                    b9:23:03:c1:4b:19:e5:d9:cf:3b:01:38:41:3e:ad:
                    8a:fc:69:f6:a8:b0:90:cf:b2:df:08:32:b4:f9:72:
                    85:cf:1d:69:2b:2c:84:5f:ed:de:44:59:99:de:ab:
                    60:19:a1:b6:6f:39:04:b0:c3:0e:fa:b0:44:75:cd:
                    da:d0:1b:d7:e4:01:a8:0e:24:3e:df:75:2f:34:14:
                    0e:b9:e1:0a:08:91:0d:17:16:4c:fe:67:3d:80:23:
                    13:ba:84:e1:0f:32:a2:ce:9a:c5:7b:fe:34:c2:c8:
                    f2:c6:32:aa:32:8d:fb:30:e9:b8:8c:dc:c8:77:c6:
                    2f:c3:55:fb:48:90:37:38:a8:d8:b8:d3:5c:3e:be:
                    56:7d:4b:64:ae:8a:e4:2c:21:ba:f1:46:10:6d:3d:
                    bd:07:d6:2f:2d:57:c8:8d:75:4f:da:bd:32:cd:ba:
                    90:0c:ef:11:ad:7e:d0:8f:65:bc:e3:64:c9:1f:92:
                    c3:70:de:3e:c6:8c:cb:96:d9:1c:9a:3a:7d:0b:fa:
                    ce:30:1d:86:a3:52:2a:b2:0d:b9:a2:ee:48:5b:d3:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:E3:98:FA:D3:2A:88:F2:B6:8A:63:16:C3:AB:78:92:BC:C7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9ca5b7e7-d675-3afa-a77e-c6132a43dd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.52.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:47:72:4b:95:d8:bd:39:29:87:73:98:39:a0:82:f7:5e:2d:
         3b:48:9a:33:0d:02:68:b4:01:84:4b:d7:2b:a7:be:79:f4:e9:
         67:6f:c1:0e:e2:be:ee:02:d2:30:1b:e6:27:14:eb:13:62:af:
         61:1b:aa:39:9c:9d:71:bf:f7:f8:7e:d4:5b:61:25:a9:04:f8:
         70:cb:d0:7d:c8:c7:ba:a5:ed:83:14:c3:2f:3f:88:a7:a2:b2:
         39:bd:9a:d8:b6:f6:20:02:ff:9c:a7:9d:67:77:22:f9:ea:60:
         c8:76:ca:58:71:1b:61:62:81:a2:df:34:e2:cb:4c:c1:bd:7a:
         a0:cd:3b:db:4c:17:c7:6d:47:ef:f1:48:03:66:65:d3:d8:bb:
         97:56:91:9a:17:69:6e:f2:a9:74:b4:26:4c:72:37:40:b6:49:
         24:2a:f6:e7:71:44:46:2b:eb:38:aa:98:3b:fa:b8:da:7c:f6:
         79:58:d2:65:b8:a3:31:9f:55:bf:be:cb:37:c5:fb:97:ff:e1:
         d7:58:c8:23:a8:84:72:f1:33:a7:c3:65:9e:61:12:fd:dc:62:
         eb:6e:ee:be:0f:12:c9:bb:f0:a2:38:9f:10:cf:8e:5d:fa:43:
         2f:16:55:32:31:d8:1a:04:9a:fe:cb:07:de:85:9d:44:19:5f:
         87:dc:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 04:32:45 2026 by rpki-client