Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa
File:                     4fb9524c-0027-3b38-a16e-a042538273be.roa (raw, json)
Hash identifier:          7PQnpAqvf3CPBdUI8d3If7HW7QiN0AQyHCXXAPicXIg=
Subject key identifier:   7F:A1:1C:49:26:79:99:75:DE:51:99:59:82:3D:78:F9:E2:74:3F:67
Certificate issuer:       /CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7
Certificate serial:       010D0C9F4328584ED9C75D928635287401E7A540
Authority key identifier: 32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     399036
IP address blocks:        208.52.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5d:92:86:35:28:74:01:e7:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=8ebf6fb1-4907-49a5-8018-a19f4d8e10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:af:49:be:bd:f5:78:99:96:a7:12:31:a9:
                    d9:c8:d4:34:5a:08:9e:48:e9:7a:fd:ef:18:58:a4:
                    c5:98:2f:3f:29:f3:aa:5c:0a:55:5f:9a:8e:5f:96:
                    14:a4:4a:7a:3c:31:16:8b:03:6e:b7:28:d3:84:be:
                    ba:17:98:80:d2:28:70:64:61:c1:10:b5:eb:ce:21:
                    91:7e:1d:63:c1:91:a6:53:19:a1:85:cf:75:19:35:
                    de:c8:24:14:18:23:87:5d:eb:af:6e:33:28:d4:46:
                    46:b8:b3:d4:f1:9e:3a:68:a0:74:92:41:5e:6c:75:
                    ea:0c:cd:68:eb:95:34:ab:d4:2e:fb:2b:cb:81:2f:
                    f6:1a:5b:f0:3a:41:48:4c:77:c8:be:9c:8d:09:ea:
                    1b:6c:88:fa:b1:89:e2:70:f6:e1:e4:a4:ed:b8:99:
                    53:f1:44:9b:6c:3a:c9:b7:1f:9b:c0:0d:8b:3f:21:
                    8e:46:02:0b:36:f7:76:b8:d6:c7:2a:6b:e3:3f:d4:
                    99:b8:c9:7a:05:cb:0a:12:3c:0f:ff:79:d9:64:5f:
                    a7:00:22:30:57:af:5e:c1:bf:3f:bb:77:c0:b8:d1:
                    15:c3:c0:69:49:15:ac:b3:1e:ad:86:54:97:8d:c5:
                    bd:30:d9:1d:c3:73:da:d1:1f:a1:a0:ea:3b:cd:91:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:1C:49:26:79:99:75:DE:51:99:59:82:3D:78:F9:E2:74:3F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl

            X509v3 Authority Key Identifier:
                keyid:32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:49:10:21:27:ad:aa:ea:ce:dd:02:fb:63:ae:24:57:04:20:
         33:8d:ec:c5:e9:81:ea:40:a1:96:cf:7a:c2:23:dd:d6:b7:a0:
         ca:6e:1c:48:6a:47:26:12:a1:f3:75:81:48:17:1a:a6:46:7d:
         01:2f:70:0e:60:0e:c8:fb:5e:52:a8:4d:8f:cf:9d:0f:42:9c:
         c8:34:c0:c8:9b:77:34:8a:0f:e0:9a:07:c9:49:58:0c:3f:87:
         b4:ef:12:88:3b:cb:46:45:91:99:a9:6b:4a:a4:9f:91:c9:82:
         47:4c:a1:23:22:3e:8a:1c:b1:bb:1e:1c:40:7b:33:8d:b6:1b:
         d5:b7:57:5c:0b:42:dc:93:df:18:53:87:2b:48:34:dd:5c:f7:
         b9:25:6b:79:68:ec:00:00:ab:db:88:52:45:97:0a:75:7f:f7:
         3c:fd:d0:f0:cc:e4:84:85:ff:e4:95:a2:39:82:29:6e:5b:b3:
         17:af:a0:62:cf:b0:39:7a:46:cb:34:4e:7d:53:a7:68:68:b1:
         ff:03:01:f6:be:df:c0:b4:b3:a9:c5:17:3c:d4:d6:29:fa:ae:
         2b:3a:f8:1a:5d:d8:a2:25:13:ea:c3:77:85:29:0b:9e:a8:35:
         75:1c:93:d8:ed:11:bb:c4:8d:fa:2c:af:50:42:9e:dc:b8:1c:
         25:5c:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:53 2026 by rpki-client