Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/52be49f9-2f34-3fe2-9b05-23a080e95fc0.roa
File:                     52be49f9-2f34-3fe2-9b05-23a080e95fc0.roa (raw, json)
Hash identifier:          vupVgqPoPmjnrFk94vJtD7jyc7cs0er6zAtItbdaO6c=
Subject key identifier:   D9:68:68:45:A6:C4:DB:52:9F:FE:BA:60:DC:AF:CC:B7:A7:BA:BE:C0
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F4328584F20F7BBE60DE1E83C561B49A0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/52be49f9-2f34-3fe2-9b05-23a080e95fc0.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        151.193.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:bb:e6:0d:e1:e8:3c:56:1b:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=f2f54297-c84b-4062-a9c1-66a11396b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:19:bd:1f:01:71:d7:83:b2:59:17:d9:6f:
                    c0:69:73:0e:6c:c5:5e:f3:a1:df:a0:fd:b3:26:9d:
                    34:e7:95:b9:ce:07:00:49:fb:f3:28:0e:82:36:ca:
                    b7:7e:9d:21:01:17:ef:87:5c:ad:82:0f:11:74:71:
                    2a:84:cd:cf:6d:a7:a0:49:dd:f5:4c:99:fe:df:42:
                    f1:48:bb:4b:e3:57:87:4d:d6:19:97:c8:d1:32:ad:
                    dc:e4:55:92:3c:39:53:d6:d9:59:47:e1:14:70:b1:
                    5b:11:50:7f:8d:b6:0a:2a:fe:51:73:9b:9a:35:7e:
                    7f:e6:38:92:6e:b0:f5:e9:1c:29:ab:f9:be:37:51:
                    46:24:75:b1:7d:83:a6:ca:f0:a0:df:72:65:a8:b2:
                    fc:88:73:e7:7a:e9:23:fd:b9:2f:23:65:b5:55:c4:
                    92:89:a2:78:d4:68:13:3c:79:ed:0a:50:3f:24:22:
                    07:9e:2d:3d:6d:73:80:dc:98:41:b4:9c:16:ea:1d:
                    a7:27:dd:16:2d:16:40:9f:46:0c:87:19:09:48:37:
                    32:3b:75:4f:12:bb:da:d0:ae:46:21:c1:fb:dd:99:
                    da:fc:71:b7:09:56:3a:c9:c9:1a:56:2e:53:13:5d:
                    2e:20:ce:86:7b:51:6e:31:fd:80:77:a5:48:4f:3f:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:68:68:45:A6:C4:DB:52:9F:FE:BA:60:DC:AF:CC:B7:A7:BA:BE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/52be49f9-2f34-3fe2-9b05-23a080e95fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:34:10:f1:b0:4e:d5:2a:1f:9f:0e:6e:d4:c1:39:bb:01:83:
         63:97:36:38:73:af:68:b4:37:64:69:4f:28:a7:37:f6:76:69:
         03:82:ae:f4:dd:00:13:09:24:c7:62:e4:3a:d3:c1:f8:68:b9:
         4a:1c:c9:30:b3:3a:0c:49:6a:f2:c3:50:69:1c:ca:f2:d1:92:
         0d:54:bf:00:7e:7e:1c:00:36:8c:54:21:01:7d:05:ce:37:de:
         e8:63:91:8f:11:fd:f6:eb:04:47:66:d6:e1:2f:ce:1a:d8:9f:
         c9:81:78:9b:2d:14:73:98:49:e7:d6:4e:f1:49:06:28:b8:52:
         ee:f8:09:80:98:60:33:18:01:aa:e4:89:e5:e9:83:77:21:52:
         0e:44:9d:4f:d7:68:10:cf:c5:90:9d:5d:81:cd:97:d0:6f:52:
         2c:34:47:69:67:23:88:4e:bd:56:68:42:34:3d:55:73:e8:ed:
         a6:23:dd:e6:22:1e:09:89:14:f8:4d:ca:d4:2a:77:81:38:0a:
         ec:e2:68:e9:49:12:0d:d4:55:b9:9c:34:27:3b:5f:f0:c5:06:
         db:e7:0d:a3:f2:5a:fe:34:35:88:6f:a4:89:8e:01:cf:ef:a3:
         f0:59:04:79:fe:9b:f9:e4:55:91:70:c6:32:cd:85:36:85:c7:
         e2:28:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:07:46 2026 by rpki-client