Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa
File:                     52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa (raw, json)
Hash identifier:          ZKfrVrD2UkXg7Y3qS0S9qqaY63oxiU/OwoLeLhAdAg4=
Subject key identifier:   E1:3B:4D:6D:DE:A1:6F:40:93:57:8D:4C:F4:6A:87:4A:92:4F:5B:A6
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584D15A264C2A687BFA1CE910710
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     401041
IP address blocks:        192.170.28.0/22 maxlen: 24
                          192.170.32.0/22 maxlen: 24
                          192.170.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:64:c2:a6:87:bf:a1:ce:91:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=1a8a98e3-ed3e-4987-b2d6-ec2110b27c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:71:0a:d9:08:2e:c2:35:0e:83:69:bb:98:
                    bc:c8:dd:75:e0:94:bd:c0:67:71:5e:df:21:2d:a4:
                    19:2b:f5:8f:c9:95:55:2c:02:9f:8a:4c:db:1e:b2:
                    d0:28:50:9f:e2:34:cd:b6:16:40:20:b3:78:5d:44:
                    cf:81:84:da:4d:44:f5:01:8f:3e:14:99:2f:e6:c1:
                    72:34:a9:2c:60:31:0f:f0:f6:69:24:4a:b3:16:91:
                    49:36:1a:b4:62:a7:23:04:3c:ad:ee:fc:1b:cf:d9:
                    ee:12:14:1c:79:2d:51:58:70:da:d7:03:f3:dc:12:
                    e4:a7:23:9d:7f:19:31:77:d1:66:03:7d:14:08:e0:
                    ea:7d:9c:20:f8:80:fd:9f:d6:9b:89:6c:2c:3b:60:
                    78:08:1c:81:aa:f3:ea:8d:99:42:25:54:60:02:04:
                    e7:49:e1:9a:68:ae:27:7b:44:b4:da:b9:08:b2:61:
                    75:a9:85:21:00:af:c4:49:a3:b6:4a:f5:6c:ae:bf:
                    b7:e0:78:b2:66:1d:3c:88:c6:92:26:e0:05:35:ec:
                    06:ee:f5:e8:dc:8a:9d:d4:19:7c:b5:8a:f0:55:df:
                    de:a3:61:7e:03:c9:6e:d5:14:10:16:0a:54:98:54:
                    60:af:53:7b:be:41:67:94:ed:7d:de:6d:26:ef:65:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:4D:6D:DE:A1:6F:40:93:57:8D:4C:F4:6A:87:4A:92:4F:5B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/52094d50-3f37-3b26-a33b-40ee8e9f6c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.28.0-192.170.37.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:df:8a:1f:01:f9:e5:bd:0b:1a:05:c4:58:94:ad:6f:7e:
         8f:24:66:5c:e9:f8:fd:b7:60:07:42:44:97:c9:6e:72:5d:b3:
         ed:19:7b:6d:91:51:e5:40:98:98:a3:73:c8:90:47:3d:ef:81:
         bc:5c:2f:3e:7b:62:62:64:2a:c4:54:ea:e5:dc:28:f0:b1:1a:
         cc:24:51:68:4b:f8:16:f6:54:80:76:cb:0c:d1:bb:60:1a:1c:
         27:8a:c1:7a:8d:4e:52:10:67:e7:c8:87:bc:bd:20:1c:76:48:
         fd:5c:77:6d:d4:89:0d:c1:19:f9:ba:b1:74:37:a6:44:9c:14:
         6c:4e:3e:cf:11:6c:23:e5:4b:ec:c8:ad:2a:b9:97:7a:c4:c2:
         3d:9b:8a:f6:c0:3c:a7:8b:6c:c5:99:92:79:87:1c:ab:7e:8d:
         6f:ac:83:3c:04:81:5c:c9:20:a8:d8:5e:d7:7c:e0:8b:dd:32:
         e2:5f:03:97:c0:fb:05:1a:03:fe:aa:4a:7e:44:7e:c6:cc:c4:
         3f:d4:20:e7:e1:8f:ed:b7:a1:ab:be:47:33:d1:f3:3c:98:28:
         d2:db:a5:8a:fe:ea:9a:b1:43:0c:0e:aa:1e:64:a6:27:cd:7c:
         58:10:11:7f:d8:31:92:7a:cd:0e:f9:9e:e5:d4:8f:1c:5e:03:
         8e:7f:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:43:19 2026 by rpki-client