Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa
File:                     94057822-67e9-351b-a192-3c74187f8ae0.roa (raw, json)
Hash identifier:          AbG2HXYB/5P/5NSSjKv5BTO9L30/ou7CPHBlB6rCEbw=
Subject key identifier:   2A:E6:32:4B:B2:47:E0:A8:5A:D4:C2:E5:1D:45:86:F8:FA:13:8A:AA
Certificate issuer:       /CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
Certificate serial:       010D0C9F4328584EF2E769D39344DB07D7E30B80
Authority key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        167.253.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:69:d3:93:44:db:07:d7:e3:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=8235361b-d654-4f40-a405-680102d805af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:fa:43:63:21:5a:cd:b0:25:e9:a8:be:71:
                    21:b7:6d:a0:e4:e8:6a:61:3e:6a:8a:76:c1:81:5b:
                    e8:07:fd:ad:e0:b7:71:cb:7e:45:b5:3a:0a:45:16:
                    aa:8a:e1:a2:68:6e:48:99:2e:f9:67:2e:ba:8b:fc:
                    89:ca:b0:cb:a4:39:3a:d5:9d:79:a9:77:72:59:fa:
                    0e:ea:93:17:af:04:23:f7:1a:0e:c2:1a:99:f2:a8:
                    6c:a8:7d:c7:d9:c9:7c:ab:3b:10:a6:09:80:f7:6b:
                    06:de:78:3e:5e:52:b4:dd:19:75:2b:ef:f9:8c:34:
                    dc:36:c7:ca:78:43:8b:1b:fc:f5:5b:5f:35:ef:10:
                    00:38:83:72:83:54:52:ad:af:d9:41:e4:47:79:b9:
                    3f:93:fb:a6:d4:54:f3:00:4a:41:df:bf:1e:86:f8:
                    7f:c4:bc:e5:f3:33:13:55:29:2f:97:85:01:80:48:
                    89:2b:df:48:4c:b7:c7:a0:ab:9f:62:52:5a:a3:9e:
                    57:39:2c:4e:7d:0e:1a:b4:d3:5b:6e:08:28:51:bd:
                    6a:ec:80:74:55:9e:db:15:85:22:72:ae:6e:3f:36:
                    a8:37:65:51:66:fa:99:80:bf:d8:95:f8:93:61:9d:
                    a3:ab:54:51:ea:b9:e0:03:1f:17:57:17:a2:1e:38:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:32:4B:B2:47:E0:A8:5A:D4:C2:E5:1D:45:86:F8:FA:13:8A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:00:78:83:0d:41:87:4a:95:4e:4c:e9:40:35:da:34:18:
         ec:59:11:a2:7a:61:68:7b:7e:71:53:d1:03:e5:b9:c6:ef:ff:
         75:2e:14:f4:c9:21:90:24:27:ee:1e:37:1a:12:84:d2:2e:8a:
         0a:59:f2:c6:34:cf:d0:33:95:e0:2d:ca:84:d5:b5:1a:d1:ed:
         fc:c2:59:8e:07:f3:2d:0a:24:cc:e8:94:aa:79:7e:72:fe:20:
         a1:33:63:e9:7d:cd:5f:ff:ba:fb:78:db:b7:e4:61:d5:f4:4b:
         a1:35:4e:c8:3e:c6:6e:bb:26:67:3e:ea:ba:dc:7b:a6:85:4b:
         57:55:16:b2:d2:4a:59:87:3d:f5:67:97:af:1a:3b:93:44:86:
         ae:55:03:c6:40:0e:95:46:1e:67:67:3f:59:10:1f:d7:bb:f8:
         89:00:6c:ea:e4:63:1d:5c:f1:f2:da:c5:bc:6d:63:43:41:97:
         2b:03:32:b2:56:22:b3:61:bc:4e:3b:88:6f:1b:75:61:63:e0:
         e5:a8:90:79:b2:87:99:d4:a2:57:a4:7d:ad:1e:b5:b3:f6:91:
         bb:84:fa:89:66:39:87:a2:bc:c9:21:7f:1c:45:d3:1c:d5:81:
         10:e8:f2:f2:4b:a0:06:5f:d2:b7:b4:fa:d8:67:57:9c:b4:7f:
         b3:d0:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:41:47 2026 by rpki-client