Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/52e725fe-f61f-3cef-a020-5c676339d34a.roa
File:                     52e725fe-f61f-3cef-a020-5c676339d34a.roa (raw, json)
Hash identifier:          UH0VVuLWcZIjWjR+x44QnRa0hcNyx8KSIfDHTXJrRl0=
Subject key identifier:   68:03:EF:DA:B4:00:75:C2:68:53:51:5A:5D:FD:6A:A2:80:06:65:59
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E329978B459F22585F89CA740
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/52e725fe-f61f-3cef-a020-5c676339d34a.roa
Signing time:             Wed 17 Jun 2026 03:48:09 +0000
ROA not before:           Wed 17 Jun 2026 03:48:09 +0000
ROA not after:            Tue 15 Sep 2026 03:48:09 +0000
asID:                     63023
IP address blocks:        136.176.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:32:99:78:b4:59:f2:25:85:f8:9c:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 17 03:48:09 2026 GMT
            Not After : Sep 15 03:48:09 2026 GMT
        Subject: CN=c0cbca53-d1f0-4eab-99df-5884abc61fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:dd:a7:c3:11:9e:4d:f5:5c:51:04:56:e4:
                    98:5c:78:4e:70:8b:07:de:a4:a0:82:11:8f:92:2c:
                    de:a6:4a:6c:95:79:ed:af:c3:ab:d4:b2:0a:49:28:
                    b3:19:88:50:44:b3:a7:44:ae:cc:c0:50:d9:3e:6d:
                    81:53:33:da:65:a6:cb:63:5e:ca:0c:4a:79:e1:64:
                    5b:fb:56:db:27:d8:a4:37:e3:77:83:f4:4b:10:00:
                    8b:76:11:67:3f:36:75:d3:71:d5:ae:e6:76:54:a7:
                    ad:c0:3f:5a:50:68:1d:da:7f:42:16:ee:b1:e4:0a:
                    18:8e:69:14:fc:d5:3f:0b:1e:47:d5:7d:da:f1:0f:
                    79:92:26:a7:16:03:5c:69:ad:f2:85:5b:39:cc:a8:
                    7e:53:9b:60:58:83:78:47:74:9e:ac:86:dd:4b:28:
                    f2:d3:f6:ef:75:3e:a9:1d:7e:9d:d6:7e:98:ac:57:
                    50:62:e0:6a:b2:39:db:df:a7:59:a4:de:df:65:c4:
                    a5:bd:82:82:57:18:63:9c:58:48:6a:b9:8d:f6:0a:
                    aa:23:34:a0:56:42:3a:96:09:d2:5d:2b:4f:67:bc:
                    93:3a:3b:85:c5:19:1f:b0:fb:98:aa:69:7b:52:a0:
                    23:9e:75:ff:53:52:54:a8:d9:98:1f:69:12:91:30:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:EF:DA:B4:00:75:C2:68:53:51:5A:5D:FD:6A:A2:80:06:65:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/52e725fe-f61f-3cef-a020-5c676339d34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:a6:b1:36:38:31:2a:a5:ac:4a:4f:d4:22:7b:e3:8d:48:
         2b:83:f3:74:88:2e:6d:fa:51:14:20:72:08:59:a1:12:9a:ff:
         83:b2:eb:4d:a1:50:6b:13:c3:94:99:ac:e2:d7:09:1c:f8:ba:
         22:4c:26:d1:40:59:3f:46:91:1b:7a:c8:60:a0:f9:3e:43:bc:
         9f:5f:fe:65:53:22:9b:a3:ad:c4:cb:8d:67:ba:72:ba:f6:b1:
         3c:51:81:09:6b:a2:63:64:f8:c2:3b:53:aa:35:ef:98:e7:2c:
         9d:8f:f5:d4:8a:98:e4:53:42:5d:7f:e5:84:2d:49:2f:40:89:
         28:48:bd:0f:88:f6:bd:52:84:97:6b:c4:07:35:bd:60:46:34:
         7b:f1:25:48:de:b7:5f:10:b5:8c:4f:78:6e:0a:fc:8f:9c:97:
         50:bf:ff:38:67:c6:bd:60:41:d2:9a:6d:8b:52:94:b3:c1:f6:
         ee:3a:c3:91:bf:85:d3:f9:84:21:c5:2a:b2:58:65:2e:a1:be:
         fd:23:fc:18:2c:20:9a:e6:36:d5:e8:a4:0d:37:0f:2c:f7:35:
         98:d3:3e:bc:2f:c2:3b:93:08:80:af:8b:43:8f:0e:44:5e:75:
         3b:75:ad:a2:b7:48:12:ce:b8:03:5f:c9:c3:86:08:58:5c:49:
         39:ef:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:21:30 2026 by rpki-client