Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/e2bcfe29-15b2-33aa-b0cd-fc8ee3c344f8.roa
File:                     e2bcfe29-15b2-33aa-b0cd-fc8ee3c344f8.roa (raw, json)
Hash identifier:          /PZK7f4mAepW+xAG20ttFXBbNQ7b3zGwQ0bnZxwDQ5g=
Subject key identifier:   77:C2:FE:5D:EE:25:8F:05:18:B5:DD:01:D1:81:25:A2:6A:62:E1:58
Certificate issuer:       /CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157
Certificate serial:       010D0C9F4328584D6944FF382CE8B5D512B51F40
Authority key identifier: 10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/e2bcfe29-15b2-33aa-b0cd-fc8ee3c344f8.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     401723
IP address blocks:        209.92.152.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:ff:38:2c:e8:b5:d5:12:b5:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58586e21-4dd1-43e8-9654-b8dd5e4a7157
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=777aca00-067d-429e-bbac-5c5dadcfa07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:bd:9b:6c:e3:39:fd:70:c4:de:35:63:e9:
                    2f:84:ad:09:f6:9f:fd:47:b9:ac:ce:2e:5c:e7:14:
                    67:7d:7b:cb:13:81:9e:ba:43:30:ff:27:e2:f3:b6:
                    27:b9:17:3f:4d:0d:45:bb:e1:2c:d9:3f:69:9d:da:
                    27:45:c6:62:6c:30:96:35:5f:2e:fc:d4:d8:25:06:
                    e4:e5:19:26:b6:33:62:ee:fe:7e:db:51:56:24:d3:
                    1e:46:d2:25:2b:1c:ba:4a:54:b2:4b:cb:3a:7d:cf:
                    18:99:7d:9a:33:98:63:a5:fe:da:5a:51:68:36:42:
                    18:6e:fa:e2:d7:a0:d6:12:40:41:68:87:ac:38:b4:
                    7e:66:7a:77:64:59:80:4b:c0:c3:21:73:21:46:50:
                    dc:9c:cf:ee:ec:3a:f5:3c:44:f9:2d:a3:42:90:db:
                    3a:14:b4:64:34:c0:a5:e5:ed:79:5c:5c:81:98:13:
                    0b:3b:c0:e7:17:ac:c2:a1:9d:ce:81:f4:7b:4b:94:
                    47:17:5c:07:cb:7a:3e:ef:0e:2b:67:72:8d:9e:82:
                    6e:0a:eb:fb:7e:ef:ae:1f:0d:08:7e:72:07:27:b9:
                    71:9f:bf:38:ab:9f:08:2f:e9:5d:58:ac:f3:d3:e9:
                    af:db:03:6d:24:79:7e:e8:d3:8c:bc:ae:57:df:66:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:FE:5D:EE:25:8F:05:18:B5:DD:01:D1:81:25:A2:6A:62:E1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/e2bcfe29-15b2-33aa-b0cd-fc8ee3c344f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157/58586e21-4dd1-43e8-9654-b8dd5e4a7157.crl

            X509v3 Authority Key Identifier:
                keyid:10:10:E7:AC:9E:41:93:55:03:A7:FA:39:66:7B:C2:C0:C0:76:55:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/58586e21-4dd1-43e8-9654-b8dd5e4a7157.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:40:5e:2a:75:da:f9:d8:ea:5b:f4:69:65:97:d4:ea:d9:
         f4:ce:1e:36:fb:0d:3b:fd:0b:54:b7:9a:a5:74:73:ed:25:88:
         c7:b6:9a:c1:b3:ae:0c:a0:0d:08:44:15:45:3c:55:b3:15:8d:
         97:45:e0:15:12:5a:b4:d4:74:0e:bc:d1:b2:6a:83:c6:13:6d:
         cf:a8:7f:f1:08:8c:10:37:6a:29:47:f7:76:89:3f:eb:d2:ef:
         76:83:aa:0a:20:4f:15:c0:6e:fb:89:e4:ca:51:e8:79:2b:e8:
         b9:49:cf:b8:51:a5:32:05:51:56:2d:66:eb:3b:82:09:23:5b:
         34:26:4d:59:5a:3f:e0:15:5a:03:e0:8b:00:d8:27:08:f4:64:
         33:37:85:34:5d:0d:a3:0a:ad:9e:34:f3:80:a8:10:99:c4:99:
         b1:fc:11:7f:33:5a:b2:86:60:94:5f:2a:8f:f6:c2:c3:53:a3:
         cb:f7:d3:cc:61:65:13:95:d4:3a:a7:91:34:14:2f:94:c3:d0:
         4a:bb:53:4e:44:b4:ab:30:f8:d5:b3:c5:7d:9d:4d:d6:92:77:
         2a:5e:91:83:84:02:b7:75:ef:b6:cc:e9:04:a6:6a:5c:35:1e:
         ae:2a:32:b1:c5:8e:a1:86:48:3a:5c:41:ad:0b:09:4d:31:33:
         4f:61:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:28:49 2026 by rpki-client