Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c5481cfc-bb94-38d3-9912-21f26112a5b6.roa
File:                     c5481cfc-bb94-38d3-9912-21f26112a5b6.roa (raw, json)
Hash identifier:          mHgGMqleXahOxytNyvHsDBSWjyozhOhBWE6OET2JfMA=
Subject key identifier:   A6:86:73:62:B8:52:BB:8D:7F:BA:AA:0C:11:ED:70:26:E9:CC:49:48
Certificate issuer:       /CN=c9789d30-0da1-46bb-89d2-2d887198f2b9
Certificate serial:       010D0C9F4328584F91B9A6192ECA8B4695139900
Authority key identifier: 22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c5481cfc-bb94-38d3-9912-21f26112a5b6.roa
Signing time:             Tue 20 Oct 2026 22:21:43 +0000
ROA not before:           Tue 20 Oct 2026 22:21:43 +0000
ROA not after:            Mon 18 Jan 2027 23:21:43 +0000
asID:                     7046
IP address blocks:        199.5.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:b9:a6:19:2e:ca:8b:46:95:13:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9789d30-0da1-46bb-89d2-2d887198f2b9
        Validity
            Not Before: Oct 20 22:21:43 2026 GMT
            Not After : Jan 18 23:21:43 2027 GMT
        Subject: CN=e2b33f3d-c2e2-4793-9b96-8c47cb03638a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:56:36:65:9c:f7:bb:21:2d:75:73:c4:44:6d:
                    59:f7:46:fc:e3:50:fc:4a:87:56:5c:52:7f:be:db:
                    c2:cc:04:7d:04:30:a2:ea:97:f0:d2:ea:97:c3:35:
                    a9:21:38:84:21:bd:68:58:0e:33:36:95:98:a5:b4:
                    f1:ec:d4:3b:57:e8:c1:9a:4c:c1:28:16:bd:98:84:
                    78:89:fa:c0:78:d5:57:71:4e:02:70:91:34:ac:09:
                    03:ef:8c:df:12:07:d3:11:16:e5:7a:f1:10:7f:83:
                    86:e5:5f:7f:9a:bf:c1:33:7e:7f:a6:44:ea:3b:e3:
                    79:ad:4d:9b:59:77:26:bf:31:e3:3c:e2:ca:1c:06:
                    fe:26:a0:fa:38:82:77:09:68:7c:40:ab:a2:0a:5f:
                    15:3a:c7:11:b3:c8:46:4e:59:53:12:22:39:7d:e6:
                    e2:b9:46:02:2f:0a:4b:39:47:59:b0:fd:a9:fa:95:
                    96:6b:55:28:53:60:9b:8a:4b:be:44:e7:41:9d:57:
                    e6:0e:ed:43:d2:6c:5c:ce:2f:79:66:ca:14:d6:70:
                    c5:81:dd:db:ca:a9:3e:39:67:af:4a:02:7d:86:e9:
                    93:b2:06:4d:8d:48:f4:c0:7a:6d:21:95:1a:f4:ed:
                    28:af:17:82:2c:cc:d2:6c:32:60:2d:ac:f7:39:e3:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:73:62:B8:52:BB:8D:7F:BA:AA:0C:11:ED:70:26:E9:CC:49:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c5481cfc-bb94-38d3-9912-21f26112a5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9/c9789d30-0da1-46bb-89d2-2d887198f2b9.crl

            X509v3 Authority Key Identifier:
                keyid:22:33:94:58:F7:3B:3E:D1:F0:98:5E:73:90:DE:3E:32:CE:F1:EB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9789d30-0da1-46bb-89d2-2d887198f2b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:dd:83:8e:1a:d0:29:c0:f0:89:de:e3:b0:07:24:ae:4f:
         d0:29:5a:32:d7:df:ec:c1:f2:d8:bb:b5:e8:ed:36:c7:32:ff:
         91:8b:62:7f:0a:03:d4:ba:62:c6:2a:d7:6f:d7:e8:df:48:dd:
         4e:39:97:4b:76:e4:15:0b:36:86:77:f4:13:39:48:1d:c3:16:
         45:5f:8e:ab:78:f2:77:24:b2:08:13:e9:34:d9:5d:64:bd:ab:
         4b:76:fa:e4:6e:27:9a:37:48:50:cc:b0:5e:85:e8:88:04:b1:
         71:be:72:c6:63:d5:4a:55:e7:c6:24:f7:90:5d:3d:cb:f3:d5:
         34:a4:52:a8:de:f6:21:a1:17:c6:af:e0:84:ef:19:47:dd:21:
         9e:8c:5a:f3:71:5c:fe:03:6f:c3:e1:44:54:16:f9:f8:74:f0:
         13:dc:54:62:64:c9:db:2d:66:e1:c5:00:c3:c1:d6:49:2e:79:
         1d:bc:81:99:e0:0c:3f:d8:7e:4b:9b:2d:32:8f:10:0a:27:b8:
         af:56:d3:38:60:0a:01:fb:3e:87:eb:c2:f1:34:df:7f:2c:98:
         27:dc:3d:72:af:11:7a:8e:d3:c2:62:ab:a7:36:5a:28:4f:d9:
         7d:02:36:28:2c:ed:dd:18:48:c8:c9:f0:4f:cc:f7:34:12:77:
         44:a6:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:39 2026 by rpki-client