Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa
File:                     f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa (raw, json)
Hash identifier:          PEpXLW6Q9k60P5fe/svq5yXMZDkEtgLcYKwEHN8+jVg=
Subject key identifier:   31:47:A2:A0:B8:80:E3:77:08:2A:06:9F:D9:0C:F4:B5:4B:E7:0E:26
Certificate issuer:       /CN=13dce77e-3ef0-4689-ad89-1c001e2f4252
Certificate serial:       010D0C9F4328584F4973D4A66F89ACE801738C00
Authority key identifier: 7B:81:2C:D0:03:17:E8:78:93:6A:35:50:B3:A2:2A:77:B9:8F:81:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14230
IP address blocks:        149.112.52.0/24 maxlen: 24
                          2001:504:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d4:a6:6f:89:ac:e8:01:73:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13dce77e-3ef0-4689-ad89-1c001e2f4252
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8c1e725d-97ec-47c1-9fc3-afa23a21a10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:2a:04:b5:16:e0:43:3c:a4:f0:fb:77:92:
                    58:6f:fa:ab:7d:4e:49:bb:b3:48:c9:0b:02:3c:f1:
                    00:53:35:be:07:6f:72:6f:ae:db:1c:be:63:53:1d:
                    57:51:e5:6f:df:7c:57:04:bb:02:32:1b:56:f0:af:
                    d1:a5:5e:10:cf:ad:19:86:41:bf:97:50:89:7b:c9:
                    18:a7:f3:8d:6d:ee:d4:db:71:ca:fb:e5:df:0e:78:
                    65:8c:e9:a1:1d:5a:eb:b1:7e:e1:03:e9:5e:47:e5:
                    86:a1:81:ad:b1:52:8d:ff:ea:54:5e:74:35:48:a6:
                    6a:fa:da:f8:e9:d7:cf:6e:7a:cc:d6:e8:63:ea:8b:
                    aa:9b:ba:80:e4:87:93:bb:bc:63:42:5e:9e:01:74:
                    d8:75:8c:d1:35:67:68:27:46:25:f2:f6:2b:8c:ba:
                    4f:d9:e7:0c:b9:51:ea:8b:7d:f6:14:80:e1:eb:04:
                    a6:01:c9:e4:02:99:50:f8:7a:de:cd:f1:b0:0a:a3:
                    d1:3d:77:e1:97:fa:22:9b:ab:1b:d3:49:bb:a8:ba:
                    78:ec:6b:af:86:ea:f5:0c:36:b3:96:d0:a1:fb:8d:
                    7f:93:2b:e1:e3:6a:ef:e6:84:ef:a8:51:87:b6:41:
                    9c:53:8c:77:2b:96:e9:4d:94:48:e4:7b:6a:9c:9a:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:A2:A0:B8:80:E3:77:08:2A:06:9F:D9:0C:F4:B5:4B:E7:0E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/f65ed4c1-8a9f-3edb-882e-a353e8df08ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252/13dce77e-3ef0-4689-ad89-1c001e2f4252.crl

            X509v3 Authority Key Identifier:
                keyid:7B:81:2C:D0:03:17:E8:78:93:6A:35:50:B3:A2:2A:77:B9:8F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13dce77e-3ef0-4689-ad89-1c001e2f4252.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.52.0/24
                IPv6:
                  2001:504:129::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:28:54:c5:6d:b9:40:82:f7:11:91:42:0e:68:32:8c:7f:45:
         77:a7:7f:69:e9:8a:9d:45:0e:d1:fc:1e:85:e6:cb:8f:89:8a:
         8f:5d:65:0f:66:dc:1a:d3:4e:d6:11:50:b7:02:f1:97:c3:64:
         2f:02:bf:91:e9:97:12:6a:44:32:fc:c6:97:37:e1:6a:7a:e1:
         5a:11:fd:64:17:7d:48:62:16:2e:2c:9a:78:28:43:47:b5:48:
         65:da:75:7a:b7:29:ea:99:8c:91:35:af:7d:ac:cb:16:ce:ae:
         e9:8a:96:b2:e3:1c:31:82:38:44:7a:26:d0:1b:63:42:79:d2:
         48:c2:31:74:45:6d:e7:e7:ea:87:79:d0:24:ce:12:9b:c6:a5:
         0b:6f:d9:f7:47:b6:ec:1c:8a:1f:f5:6a:af:28:05:55:0a:38:
         a7:cc:6b:8e:62:03:d8:50:83:3a:1c:40:6d:d7:e7:c4:d7:35:
         7b:96:57:3d:be:2a:ae:af:30:a1:fa:c6:6f:49:f4:f5:17:17:
         b7:79:b7:ad:2e:7f:fd:56:6e:4e:07:2f:f3:6a:9f:a1:8c:5d:
         fd:c4:ef:3b:55:ba:63:74:07:ee:d4:7a:b6:dd:df:d4:e7:b2:
         ae:72:51:bd:60:d6:52:9d:5d:e2:8b:03:49:31:64:16:e1:15:
         78:c0:8c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:17:00 2026 by rpki-client