Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa
File:                     626f81e5-6d4a-39d5-95e9-b3f835be851f.roa (raw, json)
Hash identifier:          YG8qUq8KdzfB17Giob8fpK1Fbr9LhuEGUj8mswFRI+E=
Subject key identifier:   27:BD:27:17:3A:C1:05:8B:04:91:13:AE:A9:74:09:DA:D9:84:87:56
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584ED431D9516135A304A0B735D8
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22359
IP address blocks:        208.52.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d9:51:61:35:a3:04:a0:b7:35:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=186454f1-8edf-48fe-ae6a-a808812af5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:7f:b9:41:58:47:30:c9:6b:4c:7d:2b:3a:
                    3b:1d:6b:f2:f4:23:90:23:6f:55:63:08:ef:d8:e6:
                    24:48:52:2d:84:c5:0f:9e:b5:7a:86:ff:76:50:8c:
                    4e:76:e0:bf:3e:c8:5d:67:4c:c2:5b:7e:e8:50:95:
                    30:15:a8:d6:4b:3d:b0:4b:ed:d5:1d:3a:e6:4c:53:
                    68:89:a6:80:c6:f1:c2:5e:7e:c7:7c:95:22:8f:5a:
                    66:fa:35:fd:6c:d2:d6:93:10:2f:a9:77:41:f6:b9:
                    92:6c:c2:df:ab:bc:83:d7:fa:94:aa:2a:d1:51:bb:
                    c7:73:df:d5:76:d2:04:1d:57:d2:14:37:d6:7d:f9:
                    f2:ad:67:b0:4e:59:67:e5:17:98:b7:5d:f8:32:ee:
                    b6:e6:b9:91:df:d0:0c:ae:e5:95:aa:34:9d:e5:be:
                    60:3e:f4:0d:3f:f1:99:43:2c:80:18:57:58:ba:0f:
                    2f:0c:e7:ef:5f:71:da:15:89:ce:8d:29:f6:43:b4:
                    12:c2:60:a8:b5:ff:5e:74:79:68:64:0d:a9:06:34:
                    cf:1a:d0:51:79:32:19:7a:bd:3c:9a:01:4b:09:a2:
                    08:4b:32:92:a2:78:81:de:dc:2f:76:9e:2a:7e:5b:
                    f2:26:75:19:31:a2:42:85:19:00:16:a3:5a:19:56:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BD:27:17:3A:C1:05:8B:04:91:13:AE:A9:74:09:DA:D9:84:87:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/626f81e5-6d4a-39d5-95e9-b3f835be851f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5c:be:1f:5b:60:f2:99:b3:25:04:6c:b6:ca:5c:1e:ea:20:
         9b:7a:da:84:ff:32:e6:a0:8c:39:8b:e5:45:fc:0c:a9:25:12:
         7c:66:30:09:ca:b0:a3:51:ca:3f:7b:23:22:60:37:07:47:52:
         b9:b5:c6:b2:69:8f:f7:6a:f4:79:09:88:53:b1:cd:fb:8a:14:
         50:24:e8:5c:d7:48:e1:d4:18:d7:c4:bf:7f:04:5c:9d:08:9d:
         00:9d:58:c6:12:70:55:7e:8e:17:5e:7e:d1:5b:a3:f9:52:67:
         20:d5:1a:63:83:fd:d9:6a:28:04:65:37:31:57:2b:26:df:c8:
         96:05:1b:de:39:b5:e8:99:15:35:0b:80:06:ee:4c:8e:37:68:
         e4:b7:f1:ef:2d:ca:ec:8f:e5:6c:ad:4d:ce:d0:c3:cc:a9:93:
         40:0a:ab:94:f9:75:f3:bc:40:1e:27:e0:52:ca:b3:ad:93:65:
         8d:93:47:1a:4b:3c:1d:8b:79:0e:e8:01:5a:82:ab:a0:d9:56:
         f2:a7:f7:cf:4d:e0:76:52:51:0d:11:a0:0c:d6:0d:fa:ff:3e:
         32:56:f7:f1:e2:7d:fd:b4:b0:21:6a:5a:fc:6d:d5:4d:e5:92:
         93:cc:3a:b7:97:2d:5b:bb:ef:c9:cb:26:95:47:d4:12:81:98:
         57:6c:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:40 2026 by rpki-client