Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a58cdcac-630f-3f2d-ac52-55b2a637c20d.roa
File:                     a58cdcac-630f-3f2d-ac52-55b2a637c20d.roa (raw, json)
Hash identifier:          tVgz0GZjeLiUDqAwEtK7a+ZprQp51VMFxu9xbv9hbls=
Subject key identifier:   8B:0B:BF:15:9C:05:2F:00:73:77:F7:74:62:14:0A:41:5C:6A:99:88
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF95237F2DD1AB43AC8AB2D00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a58cdcac-630f-3f2d-ac52-55b2a637c20d.roa
Signing time:             Thu 27 Aug 2026 08:10:27 +0000
ROA not before:           Thu 27 Aug 2026 08:10:27 +0000
ROA not after:            Wed 25 Nov 2026 09:10:27 +0000
asID:                     834
IP address blocks:        173.232.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:52:37:f2:dd:1a:b4:3a:c8:ab:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 08:10:27 2026 GMT
            Not After : Nov 25 09:10:27 2026 GMT
        Subject: CN=bb7c8a65-8734-4006-914e-461d9d26c179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:f0:ac:ab:0b:e9:b7:77:13:8e:94:7c:ab:
                    60:8b:a9:55:54:46:ca:3f:db:36:98:64:e5:84:75:
                    22:b5:a5:e6:8f:2e:fb:b9:99:4d:c3:1c:3d:ef:bd:
                    c1:3a:da:0d:ea:1a:94:52:e1:78:0a:27:84:be:f7:
                    aa:ba:87:38:26:91:e9:20:4c:63:aa:d3:f0:fd:c5:
                    f4:76:48:8c:97:36:cb:6e:93:db:1c:5d:ee:a8:66:
                    fc:01:8b:b4:6a:13:f1:f5:28:4b:fe:b8:4e:f5:76:
                    1e:f4:81:f8:ee:51:24:fb:d1:5c:4e:cf:c2:e0:b3:
                    32:93:a9:6e:64:9a:ae:ee:f0:66:cf:7a:2e:51:43:
                    97:a5:34:75:02:6b:2b:b9:53:7b:fa:2a:f6:09:66:
                    68:75:a4:fc:06:69:43:71:3c:7f:2b:56:d7:f3:5e:
                    45:fd:82:d8:3e:5e:53:88:4b:36:a2:3c:cf:5b:ea:
                    5f:ad:33:e0:bd:0d:7a:59:79:92:63:b0:3a:23:96:
                    b6:db:e5:c0:0f:1e:77:8e:38:e8:53:48:05:71:69:
                    e1:20:b8:3a:a6:3c:cb:d4:3f:dc:87:a3:91:d1:f6:
                    25:96:61:a4:32:86:91:df:39:e8:7f:65:f5:5b:af:
                    e9:70:44:ae:c6:9b:c1:07:cb:14:0d:28:81:88:54:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0B:BF:15:9C:05:2F:00:73:77:F7:74:62:14:0A:41:5C:6A:99:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a58cdcac-630f-3f2d-ac52-55b2a637c20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:56:03:a7:ec:3b:da:ad:11:67:0b:84:98:c2:d8:55:b8:6d:
         1d:c4:81:df:34:9e:3d:9b:f5:6e:81:ef:b9:ba:f6:33:fe:ce:
         cc:61:75:a2:3f:3a:eb:b4:25:42:3d:b9:d8:ef:2e:c3:19:fd:
         1f:4b:5c:c7:c9:c1:2d:e7:ef:b3:04:89:6c:49:a6:60:35:f7:
         3c:94:d5:49:3c:f2:20:69:c2:52:79:26:03:b2:74:c1:60:93:
         03:63:d8:d2:b3:ff:b0:f4:c3:c1:8a:83:f5:b8:99:46:b5:09:
         8b:f0:5e:47:14:15:1d:37:a5:c7:5c:a0:8e:0f:e9:72:a5:81:
         94:77:89:52:74:b5:02:0d:e2:75:b2:17:11:da:ab:d9:55:ee:
         8f:bd:55:b3:e4:89:b6:71:e9:8b:57:2f:6b:39:95:d5:82:cb:
         8d:47:c2:07:a7:82:67:c0:68:b9:0e:d3:66:0d:dc:a5:cb:f9:
         c9:df:4e:da:db:b1:fd:cc:54:03:47:a8:6f:58:65:ff:50:06:
         9d:54:01:1c:24:ac:93:6e:8b:d3:90:ab:0b:36:86:41:39:d9:
         d6:92:d9:09:ba:db:9c:22:62:fb:c0:82:3c:dd:9b:37:55:24:
         e8:70:69:ce:84:d0:68:e5:cd:56:42:17:d3:fe:b8:07:72:84:
         fb:96:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:44 2026 by rpki-client