Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa
File:                     52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa (raw, json)
Hash identifier:          IkVqcLwHPCbr++POU5mz0fPIBVZUNflGug/j6/k8Fho=
Subject key identifier:   F2:80:BF:3A:66:C8:0A:60:3B:DC:6F:84:68:01:67:6F:C2:E2:CE:CA
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584EBB11AC9143BE196E529C3C40
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     20115
IP address blocks:        170.205.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ac:91:43:be:19:6e:52:9c:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=97fc230d-384d-41c0-a2cf-20d0445261a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:a6:7b:94:8b:c2:27:61:7b:0f:af:c5:c3:
                    42:6e:14:14:81:af:83:b0:d0:08:b6:d6:4e:49:66:
                    5b:8b:c7:2f:dd:31:9e:2d:b0:80:70:bb:ca:d3:ae:
                    d3:99:14:db:fd:3c:a8:4f:e4:94:a7:f7:4a:28:f3:
                    8d:f9:3e:4a:67:23:4a:97:60:b9:27:2e:1e:c0:a9:
                    e3:1e:95:32:e4:9c:20:72:7a:d5:0f:e5:c6:67:f2:
                    cb:ce:69:93:47:7c:67:21:eb:7c:5a:32:55:a4:89:
                    db:13:99:7c:bd:84:5c:dd:5b:86:e7:b4:c3:89:a0:
                    f4:28:9d:be:63:01:9a:f4:3b:30:99:14:e2:1e:3f:
                    3c:95:92:65:c4:e8:9c:d5:0c:e0:50:d0:6e:93:8b:
                    3b:62:60:2d:2c:d0:2a:ca:b2:7e:37:23:60:e7:f3:
                    9b:b0:51:10:4f:b8:dc:dd:07:0b:c3:e3:f0:c4:34:
                    42:d8:c5:59:97:98:04:b2:f6:7b:6b:15:fc:b0:4a:
                    c9:f6:19:b2:fc:d6:bf:47:3d:2a:9c:c4:29:3a:f3:
                    78:68:b3:2b:fc:b0:ce:05:74:7a:e2:c8:b2:ed:8f:
                    2e:6a:62:33:05:de:7d:e2:84:95:6a:27:66:7f:d4:
                    b3:d6:f8:80:2d:9f:c3:af:b0:02:0c:d2:21:ea:49:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:80:BF:3A:66:C8:0A:60:3B:DC:6F:84:68:01:67:6F:C2:E2:CE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:b5:86:24:2a:b8:78:24:aa:4f:1f:c0:54:a1:81:fc:af:
         97:eb:c3:fe:95:3b:b8:ae:f4:b6:fc:82:1e:92:dc:d4:62:f4:
         21:a5:44:10:84:a0:d9:2c:f2:60:8c:a8:37:b1:ec:ce:50:55:
         ef:bd:82:15:67:f6:50:f8:0a:8a:66:8a:5b:5e:89:8f:fd:2d:
         95:25:bf:e5:41:eb:2b:22:d2:61:ed:b2:e8:ec:aa:fb:72:3a:
         e3:82:89:18:0d:34:d9:1e:ad:65:7d:85:12:9d:dd:04:61:ed:
         d6:ea:33:17:05:ae:65:54:96:c7:45:fd:6f:8e:21:4e:b6:0e:
         c1:dd:ca:9f:ab:f5:a6:9d:5c:a2:a1:73:a6:8f:f6:62:af:86:
         3c:bf:7f:b9:be:6f:48:26:93:e3:4c:74:e8:6e:1a:16:c7:97:
         12:85:ec:e6:8d:56:42:63:5f:5f:62:5d:a1:2b:bf:2d:77:16:
         96:b4:3c:c3:4d:78:21:09:91:c1:8e:18:de:e1:a4:cd:4f:99:
         b8:2f:3e:92:33:94:51:59:fc:d7:db:b8:6e:d0:c8:bc:f3:bc:
         51:24:3b:2d:24:fd:37:72:71:9c:56:d2:70:fb:42:1c:1d:01:
         3c:a6:07:50:23:f9:51:f1:ab:a8:42:87:55:15:3a:05:f9:b5:
         0c:41:7e:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EayRQ74ZblKcPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMwMWM3OTAtYzFmNC00ZmQ3LWE5MzktMWE4ZDI2Njli
NWI3MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
OTdmYzIzMGQtMzg0ZC00MWMwLWEyY2YtMjBkMDQ0NTI2MWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlOme5SLwidhew+vxcNCbhQUga+DsNAIttZO
SWZbi8cv3TGeLbCAcLvK067TmRTb/TyoT+SUp/dKKPON+T5KZyNKl2C5Jy4ewKnj
HpUy5JwgcnrVD+XGZ/LLzmmTR3xnIet8WjJVpInbE5l8vYRc3VuG57TDiaD0KJ2+
YwGa9DswmRTiHj88lZJlxOic1QzgUNBuk4s7YmAtLNAqyrJ+NyNg5/ObsFEQT7jc
3QcLw+PwxDRC2MVZl5gEsvZ7axX8sErJ9hmy/Na/Rz0qnMQpOvN4aLMr/LDOBXR6
4siy7Y8uamIzBd594oSVaidmf9Sz1viALZ/Dr7ACDNIh6klOnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKAvzpmyApgO9xvhGgBZ2/C4s7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAx
Yzc5MC1jMWY0LTRmZDctYTkzOS0xYThkMjY2OWI1YjcvNTJiNGQ2MTgtN2I0My0z
ZGZjLWIxZmUtZGU3YTUxMzVkZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwMWM3OTAtYzFmNC00ZmQ3LWE5
MzktMWE4ZDI2NjliNWI3L2QzMDFjNzkwLWMxZjQtNGZkNy1hOTM5LTFhOGQyNjY5
YjViNy5jcmwwHwYDVR0jBBgwFoAUNhVcMeA33FGXyNmKpO5YWngWySwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAxYzc5MC1jMWY0LTRmZDctYTkzOS0xYThk
MjY2OWI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGq9tYYkKrh4JKpPH8BUoYH8r5frw/6VO7iu9Lb8gh6S3NRi9CGlRBCE
oNks8mCMqDex7M5QVe+9ghVn9lD4CopmilteiY/9LZUlv+VB6ysi0mHtsujsqvty
OuOCiRgNNNkerWV9hRKd3QRh7dbqMxcFrmVUlsdF/W+OIU62DsHdyp+r9aadXKKh
c6aP9mKvhjy/f7m+b0gmk+NMdOhuGhbHlxKF7OaNVkJjX19iXaErvy13Fpa0PMNN
eCEJkcGOGN7hpM1PmbgvPpIzlFFZ/NfbuG7QyLzzvFEkOy0k/TdycZxW0nD7Qhwd
ATymB1Aj+VHxq6hCh1UVOgX5tQxBftE=
-----END CERTIFICATE-----
Generated at Sat Aug 8 02:49:37 2026 by rpki-client