Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/52c27248-c9f5-3804-a46e-5e9fd6a022c3.roa
File:                     52c27248-c9f5-3804-a46e-5e9fd6a022c3.roa (raw, json)
Hash identifier:          BrtffXvn3JfwTol/gIAA0y/v7z/wSdqNEP2MpYn3VVA=
Subject key identifier:   BF:5D:B9:88:F2:F6:42:6F:B0:0A:C5:29:7D:E3:9C:C9:47:AD:58:A3
Certificate issuer:       /CN=a205fba0-7ae3-4a3a-b90c-78f89179208f
Certificate serial:       010D0C9F4328584F5E519E7A7C753CFD665FACA0
Authority key identifier: 35:C0:1C:AB:D9:D9:CD:F7:15:62:30:FD:49:34:FB:0B:E9:F7:B1:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/52c27248-c9f5-3804-a46e-5e9fd6a022c3.roa
Signing time:             Fri 02 Oct 2026 12:25:53 +0000
ROA not before:           Fri 02 Oct 2026 12:25:53 +0000
ROA not after:            Thu 31 Dec 2026 13:25:53 +0000
asID:                     21611
IP address blocks:        198.184.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/a205fba0-7ae3-4a3a-b90c-78f89179208f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/a205fba0-7ae3-4a3a-b90c-78f89179208f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:51:9e:7a:7c:75:3c:fd:66:5f:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a205fba0-7ae3-4a3a-b90c-78f89179208f
        Validity
            Not Before: Oct  2 12:25:53 2026 GMT
            Not After : Dec 31 13:25:53 2026 GMT
        Subject: CN=b4f2befa-3c1c-4879-bd5b-c32e649f9687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:f1:f0:63:5c:6c:70:5b:3c:4d:56:7d:4b:
                    e9:f3:f6:51:60:e2:54:3a:fd:3a:71:7c:c8:f4:a4:
                    c1:45:85:29:b0:5d:4a:df:01:21:08:e7:0a:58:ee:
                    32:c4:de:66:72:90:dc:15:1d:5c:ea:17:8e:7e:85:
                    0a:dc:23:56:9b:65:f8:0f:54:dd:7c:c5:63:fc:6e:
                    6b:fe:8b:b4:2c:32:ee:0c:ea:31:28:23:68:45:37:
                    63:9c:b2:b7:3c:13:f8:26:12:c1:bc:c3:6b:47:26:
                    81:70:5b:37:af:62:31:65:ef:00:86:ac:a6:15:7f:
                    d9:d5:11:d8:ac:09:46:67:3b:5b:fa:0f:b8:2f:a0:
                    da:86:d4:9c:db:66:c2:47:93:17:3b:0d:d7:6c:60:
                    67:06:c5:19:a9:c3:8a:01:98:2d:5c:1d:a7:b6:47:
                    49:d1:86:75:68:12:a6:e1:85:81:f4:75:26:98:24:
                    30:f5:07:2c:d6:fa:0e:01:4d:99:a7:97:7d:1d:e6:
                    dc:86:7c:0a:b1:e4:82:43:f0:2d:1c:d0:44:f3:e1:
                    19:a3:75:a3:b7:c8:b5:b4:b6:02:6e:7c:b5:0b:fc:
                    3c:37:54:50:16:57:87:82:d7:92:a3:7c:58:61:c5:
                    78:95:78:d3:ce:07:f1:f0:8d:59:3c:27:06:42:c7:
                    cd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5D:B9:88:F2:F6:42:6F:B0:0A:C5:29:7D:E3:9C:C9:47:AD:58:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/52c27248-c9f5-3804-a46e-5e9fd6a022c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f/a205fba0-7ae3-4a3a-b90c-78f89179208f.crl

            X509v3 Authority Key Identifier:
                keyid:35:C0:1C:AB:D9:D9:CD:F7:15:62:30:FD:49:34:FB:0B:E9:F7:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a205fba0-7ae3-4a3a-b90c-78f89179208f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:92:5a:69:9d:7a:f6:6a:bc:e9:e9:cb:10:12:d1:cf:c1:26:
         23:64:fc:a2:60:ff:01:47:5c:ae:eb:3e:76:7b:26:e2:e2:ec:
         57:b1:03:b5:3f:30:dd:b7:c7:8d:d5:92:ae:21:5e:24:e8:27:
         dc:56:08:3c:0e:34:bf:05:97:4d:01:89:fb:f4:90:fa:c0:f9:
         16:42:b3:ae:df:ff:7f:a6:da:d5:2b:e4:ce:5f:0a:5f:10:3c:
         50:59:84:02:2f:38:c4:b8:f8:5c:70:d8:eb:09:2e:e6:15:ea:
         0b:3a:74:2e:36:ff:76:81:30:27:71:05:35:f2:64:3f:c2:10:
         0f:35:ef:06:da:7b:f8:aa:43:7c:43:87:e1:2e:c8:be:3b:94:
         d9:cb:ae:30:6e:cb:22:3a:6a:87:42:f8:76:11:75:96:dd:1d:
         3d:51:18:51:34:57:a7:e1:79:27:27:24:ea:2e:18:55:29:01:
         3d:e3:bf:2e:95:16:f7:3e:c5:63:25:0a:f9:cb:2a:2f:67:b0:
         7d:a5:75:a2:85:28:a6:fe:0a:81:ff:81:6d:83:e9:47:7e:bb:
         8c:2e:a5:bf:9b:25:f1:ca:40:06:73:4a:09:18:2d:e7:74:c0:
         4d:77:18:24:0c:a2:20:ea:53:74:42:02:5f:6f:1b:16:64:8b:
         a7:be:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:17:07 2026 by rpki-client