Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5472fa00-5126-3d68-bc64-d57216db47ca.roa
File:                     5472fa00-5126-3d68-bc64-d57216db47ca.roa (raw, json)
Hash identifier:          PtHrcUG7sQjyyXrO7FFRXSjufk74zeFOwRXZLUmx87E=
Subject key identifier:   1F:7B:6E:FD:76:2E:AC:96:BB:11:DB:36:4C:FE:88:48:DD:8E:88:EB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EDE3BF7EDA7801758E3118820
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5472fa00-5126-3d68-bc64-d57216db47ca.roa
Signing time:             Mon 17 Aug 2026 15:18:48 +0000
ROA not before:           Mon 17 Aug 2026 15:18:48 +0000
ROA not after:            Sun 15 Nov 2026 16:18:48 +0000
asID:                     59253
IP address blocks:        154.37.92.0/23 maxlen: 23
                          206.232.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:de:3b:f7:ed:a7:80:17:58:e3:11:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 17 15:18:48 2026 GMT
            Not After : Nov 15 16:18:48 2026 GMT
        Subject: CN=428c773f-cb8b-46aa-9bf4-de917326acda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:cd:6e:28:b0:98:d8:1d:83:6a:d2:75:76:
                    c8:4e:08:1d:c3:d7:a5:99:ed:f3:26:a6:6d:25:d2:
                    7e:26:f3:a2:03:19:d0:2c:26:a9:87:c4:31:83:46:
                    c6:45:ad:5a:76:cc:f6:4b:37:85:0c:47:0f:74:6e:
                    98:ce:99:2c:d4:c7:27:df:41:5c:cf:25:16:0d:ed:
                    f5:34:75:00:9b:14:97:e3:56:f7:8b:0d:01:d7:ed:
                    60:aa:34:a0:92:0f:3e:ce:f8:0c:c5:a2:4f:06:81:
                    18:41:5d:6a:9e:42:b0:6d:22:b5:80:26:8d:49:77:
                    91:8c:16:de:d5:cf:c4:f1:06:0a:48:ea:ed:7a:80:
                    b2:24:d8:44:13:e8:a5:72:ed:e5:c6:09:2b:8a:20:
                    a1:be:7c:a7:15:b9:8c:57:76:c7:47:e3:28:a7:a8:
                    93:aa:1b:56:1f:7a:29:90:6c:6c:03:a8:b7:ae:72:
                    a2:d8:48:52:4c:42:1a:d7:eb:ee:83:1e:22:ec:39:
                    a2:88:15:6f:d0:f1:0e:30:db:f5:3b:ad:64:63:6e:
                    32:81:ce:81:1d:f9:3b:13:49:9b:87:c4:81:f1:1e:
                    3d:3c:70:20:a6:d9:2b:3d:e9:e9:9d:98:38:ff:88:
                    c8:17:7d:e0:d3:36:50:ce:57:a2:af:44:a8:21:49:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:6E:FD:76:2E:AC:96:BB:11:DB:36:4C:FE:88:48:DD:8E:88:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5472fa00-5126-3d68-bc64-d57216db47ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.37.92.0/23
                  206.232.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:07:7c:b2:fe:1b:55:d8:3e:10:38:8f:14:6c:e2:5c:3d:04:
         39:97:75:d6:3c:dd:4e:6e:b3:37:d8:65:b4:40:2f:cb:1c:04:
         a8:76:2f:a6:5a:33:c8:ee:ef:68:08:12:eb:c1:49:a4:82:8a:
         3b:3e:46:1a:0a:18:88:6f:49:1e:d6:c4:54:bd:01:e4:fd:6a:
         ba:f8:96:be:04:a7:cb:82:6d:89:c8:aa:77:c2:1a:68:83:52:
         40:d3:3e:ac:c1:58:96:20:d2:3c:95:aa:92:da:e2:01:69:a1:
         72:71:e3:b9:3e:ad:4d:47:c9:19:b5:dc:6c:0b:84:ba:b9:ff:
         d4:95:1d:78:d1:46:33:cd:94:89:3b:2f:7c:79:36:06:21:38:
         9b:83:eb:82:e9:19:d2:66:73:65:4d:a2:01:9b:3d:47:8a:b2:
         d3:f0:02:89:47:41:58:14:42:c2:4d:0b:34:d9:63:89:33:86:
         4d:e3:bf:f1:14:15:f7:d9:2b:26:06:45:90:e5:fc:1f:c4:34:
         ba:a5:72:44:e4:d1:42:35:db:e8:f0:f2:78:d1:5c:1d:cc:53:
         7c:35:b5:ad:98:7b:15:8b:31:59:27:17:a4:3e:f8:1c:40:79:
         70:66:ff:ac:68:60:0d:e0:ac:3b:ba:96:7d:a9:66:bd:40:bc:
         96:f7:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:20 2026 by rpki-client