Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa
File:                     52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa (raw, json)
Hash identifier:          7m7uYNTIeuvG/Gs5rqTmdldeAQtMwtQwMka8KaqKyFk=
Subject key identifier:   34:9B:A9:63:C0:4A:EC:46:0A:15:2B:7B:B0:96:65:CF:51:BC:D2:9C
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F4328584DE2B5D1AC52D57826A583D040
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     13875
IP address blocks:        204.235.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:d1:ac:52:d5:78:26:a5:83:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=60997027-8128-4462-a127-8e30fe8aa2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:95:55:cb:fd:7b:f9:78:7a:ad:19:8b:73:
                    18:f8:8f:13:c7:19:d0:f0:f9:14:ab:52:b3:23:43:
                    73:f4:7d:b2:be:50:37:c1:8d:e7:fb:0c:d2:0e:6c:
                    56:24:65:80:e9:0a:0a:77:6f:4b:8b:3b:bc:23:35:
                    96:e5:19:d4:ce:81:da:b0:eb:f5:85:00:f8:82:e6:
                    c1:3f:ac:d7:35:6b:af:48:f9:8f:f7:ab:e0:02:5b:
                    9a:7b:b8:ff:3d:35:51:f4:34:45:45:f2:da:91:30:
                    7a:c6:de:e3:40:20:2d:97:cd:43:99:19:43:96:75:
                    da:9d:04:e4:9d:43:2a:bd:32:9e:21:3e:e1:0c:4d:
                    21:19:51:83:36:77:93:4c:14:5b:de:a3:ca:8c:7c:
                    41:91:e6:75:f0:67:05:61:ed:9c:30:9f:d2:f6:be:
                    57:da:4c:1c:4a:ab:51:a5:5a:1e:9b:9a:ff:c2:9f:
                    92:52:4c:e3:b3:74:93:86:b1:89:da:6c:1e:43:a1:
                    72:b7:48:99:0c:24:af:16:dc:2a:85:11:1d:15:f4:
                    77:31:fe:5b:58:da:c2:0e:5e:59:83:e4:e9:b5:bf:
                    60:6d:48:46:c3:ab:23:51:df:a7:40:ea:36:2d:a5:
                    1b:f2:08:ad:45:af:06:51:a8:c7:db:45:2f:2c:b1:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:A9:63:C0:4A:EC:46:0A:15:2B:7B:B0:96:65:CF:51:BC:D2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:7b:5a:ae:d4:46:1e:02:b6:b1:c3:9b:01:7d:c4:76:bf:
         c4:a9:2e:32:45:2d:8c:a6:07:3d:ba:4c:87:5c:8b:4e:d7:19:
         2f:9f:89:8d:66:69:5a:61:97:fd:b4:3f:75:9e:89:a3:4f:32:
         97:c2:83:d2:f2:de:cf:22:5d:93:c4:aa:0f:35:8f:98:32:b7:
         b4:f2:54:87:5f:0d:91:48:22:c3:45:ef:d9:00:1a:2a:fe:96:
         ae:5b:6a:70:5d:7e:e2:43:e3:8e:a9:de:17:4f:f3:45:d2:27:
         8a:8f:31:98:1d:69:04:bf:be:11:83:16:c5:f5:ec:ba:4f:7c:
         b5:aa:71:52:18:e4:f9:bf:98:e2:64:fd:6e:3e:aa:dc:44:8e:
         12:a5:14:54:ee:fa:b0:03:55:a9:4c:35:77:aa:7c:c4:c8:1c:
         d3:fd:26:d3:e7:34:db:dd:33:9d:5a:06:aa:d8:a7:d0:23:58:
         44:01:52:28:c5:31:9b:00:56:40:95:f0:fa:68:15:dc:cd:c9:
         0b:a9:52:e6:c7:c5:82:c9:67:6f:61:20:63:fe:df:bb:a9:c6:
         0e:0d:5a:8f:46:b0:53:28:81:de:46:cd:39:4c:e2:d5:2d:72:
         c9:27:28:8f:43:db:8e:15:ef:4c:7d:d7:30:5b:5d:dc:fc:dd:
         70:ac:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:38:18 2026 by rpki-client