Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa
File:                     f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa (raw, json)
Hash identifier:          izQy9HIvHRuNXQnCr6gSxE0UeCGHLEy7mzkREEpk6jE=
Subject key identifier:   A0:49:E1:BC:C0:16:96:60:87:DA:CB:58:AE:21:C2:86:79:38:9C:BF
Certificate issuer:       /CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
Certificate serial:       010D0C9F4328584EA7933138FE96581553E46D80
Authority key identifier: 8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7328
IP address blocks:        159.14.0.0/16 maxlen: 16
                          159.14.197.0/24 maxlen: 24
                          159.14.224.0/21 maxlen: 21
                          159.14.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:31:38:fe:96:58:15:53:e4:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bd006825-0465-4b36-8154-96c385733af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:3a:b3:a9:10:e4:d2:5e:c1:c4:db:c9:8f:
                    e5:ee:71:07:c9:46:43:81:69:73:42:62:a5:ee:d6:
                    1e:5e:5b:5c:c4:45:6a:5e:03:32:67:28:0a:e1:bb:
                    7b:68:f3:48:95:5d:90:2f:82:ab:ce:91:f7:dc:07:
                    a2:53:8c:46:45:6e:e1:9e:85:76:50:29:9e:33:32:
                    9f:32:93:45:5a:3c:45:e8:62:59:83:f4:01:50:7c:
                    15:b8:e8:01:42:1c:01:60:47:83:a5:64:c2:11:69:
                    27:90:18:51:1d:09:b6:c3:25:d7:b8:1f:bb:6b:18:
                    cb:2f:6c:39:b1:48:2f:d3:6a:65:b6:9b:9d:78:5f:
                    e7:69:c7:5f:dd:22:dd:27:b1:82:0f:da:a9:a2:48:
                    d3:67:37:1a:3a:d2:65:ec:88:f0:bb:a6:7f:a1:c1:
                    b9:6b:a5:e2:81:d6:3e:cc:1b:4e:90:bb:97:77:92:
                    a5:4e:8a:2d:f8:5d:cf:1f:cd:5b:67:fe:dd:20:ef:
                    1f:2c:93:5e:30:8e:0a:78:60:0b:ee:dc:a8:93:96:
                    c0:05:3c:fe:cd:92:8b:80:2b:b5:7b:7f:63:99:01:
                    31:b7:27:82:df:7e:ab:78:49:a1:8e:0b:e6:71:2c:
                    99:4c:a9:46:40:ba:44:a8:cc:d8:e1:e7:3e:ac:76:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:E1:BC:C0:16:96:60:87:DA:CB:58:AE:21:C2:86:79:38:9C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl

            X509v3 Authority Key Identifier:
                keyid:8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:62:82:9a:f0:d3:19:5d:e6:b1:ae:bc:4e:19:75:dc:b0:
         44:2b:2d:55:4a:b0:b4:81:69:b3:9f:94:fa:e3:f9:ea:34:1f:
         75:53:d9:83:3f:e7:90:ac:07:f4:2d:1e:3e:07:73:05:76:49:
         86:6a:8b:7a:51:d7:37:82:5c:a1:e3:0a:d8:65:f9:a3:cc:fc:
         58:8c:9d:f5:d4:87:9a:a3:52:e4:46:a4:c9:b4:58:36:34:c2:
         c6:3a:45:f5:a7:12:f2:b8:79:6d:a2:fb:11:a3:7f:1a:e8:6e:
         d1:3f:43:91:b1:21:dd:15:5f:44:53:43:90:c4:75:96:73:67:
         5b:be:24:71:0d:d3:c4:d1:03:67:b8:4b:cc:8b:b9:7d:93:d6:
         35:16:c3:5e:db:39:90:64:40:ca:fe:16:bb:a1:cb:82:56:e2:
         f3:3f:85:01:fc:fa:23:42:30:f6:4f:81:18:4a:a4:2d:72:95:
         9b:29:19:c7:b5:65:42:15:3a:bf:03:08:02:e1:19:28:0d:d3:
         c2:14:0e:fe:af:fc:0e:74:30:05:24:56:12:6e:21:5f:3b:a6:
         e9:02:d5:fa:68:cb:e7:1a:d5:49:de:50:84:6a:3b:ee:2a:bf:
         21:af:51:08:28:d8:b9:ac:a5:c7:5b:96:c2:e6:c8:6d:fd:e8:
         38:13:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:05 2026 by rpki-client