Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/51f7cb19-0416-3d22-892f-f653b5165072.roa
File:                     51f7cb19-0416-3d22-892f-f653b5165072.roa (raw, json)
Hash identifier:          YMkkSkq0ouJ1LX88+KRxRXTmvnp7yofP7EBiD+YMieQ=
Subject key identifier:   FD:9C:19:4D:A3:A5:86:4B:AA:EF:5F:00:A3:4E:50:C4:C8:3C:5D:3E
Certificate issuer:       /CN=dd81569f-1124-486c-94a7-7956a67b6ead
Certificate serial:       010D0C9F4328584DEF460437F4D0C01B22FF3820
Authority key identifier: DD:7A:1A:EC:1B:97:F2:78:1F:43:6D:80:D3:70:00:68:DA:3E:A0:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/51f7cb19-0416-3d22-892f-f653b5165072.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     4989
IP address blocks:        192.208.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/dd81569f-1124-486c-94a7-7956a67b6ead.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/dd81569f-1124-486c-94a7-7956a67b6ead.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:04:37:f4:d0:c0:1b:22:ff:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd81569f-1124-486c-94a7-7956a67b6ead
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=f3d91604-b30b-44d9-892a-b2275ca7e9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:07:8a:e1:d0:4d:8d:fe:00:e3:36:64:24:
                    4e:f0:5c:24:12:58:38:4b:81:03:7d:77:e8:7b:70:
                    2d:34:b5:33:10:6b:f6:5c:30:34:1c:ab:bd:7f:fa:
                    35:13:7a:32:38:47:14:6e:a9:23:4b:9f:8f:fd:2a:
                    fb:c6:27:da:79:6b:92:ee:fc:e4:c0:54:55:52:2b:
                    ac:6b:d0:ba:5d:5a:13:ed:3c:96:c0:a0:3f:b4:80:
                    bf:6f:5e:bc:a2:8c:8c:a0:f9:92:3b:7b:73:e1:c7:
                    81:4c:b4:2f:9f:72:74:53:9b:1e:ef:6b:8e:34:77:
                    2b:f2:05:96:53:0f:cc:c7:8a:fb:d1:7b:12:e0:bf:
                    66:70:7f:5c:76:99:dc:9a:a0:d3:92:ce:62:03:16:
                    31:08:51:67:0f:ce:84:b3:c1:ca:fa:35:34:8d:22:
                    b3:c1:09:63:23:49:dd:f1:66:33:fd:05:57:09:81:
                    2e:55:85:75:ec:d5:a3:94:13:37:a2:79:c1:48:ec:
                    dc:4c:ee:e0:50:41:6c:e8:26:25:93:17:af:08:d4:
                    59:14:d8:42:e5:8b:d5:fa:fb:cd:17:cc:f1:77:cf:
                    2f:4b:75:14:ce:d3:3d:a2:60:ff:31:85:cd:07:96:
                    88:ea:86:95:df:2e:25:ec:e1:f9:4c:33:97:92:5a:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:19:4D:A3:A5:86:4B:AA:EF:5F:00:A3:4E:50:C4:C8:3C:5D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/51f7cb19-0416-3d22-892f-f653b5165072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead/dd81569f-1124-486c-94a7-7956a67b6ead.crl

            X509v3 Authority Key Identifier:
                keyid:DD:7A:1A:EC:1B:97:F2:78:1F:43:6D:80:D3:70:00:68:DA:3E:A0:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dd81569f-1124-486c-94a7-7956a67b6ead.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:e1:f2:4f:de:80:e6:be:a2:82:9d:46:74:68:da:13:1d:
         53:29:ed:92:3b:cc:5b:6b:e8:6a:ee:54:0a:79:9c:5c:0e:40:
         b8:d7:3a:bf:dc:b1:64:75:43:30:3b:5f:dc:e7:26:fa:35:9a:
         b3:ea:ef:97:dc:79:6a:d6:ad:f5:2c:5f:9b:cc:c0:51:ec:41:
         67:fc:0f:40:0a:ee:ef:d0:e6:c3:b9:3a:12:bf:e0:36:9f:ad:
         5b:a9:0b:0c:2c:16:6a:d0:d0:de:17:1e:e3:eb:57:86:0c:9b:
         cc:75:4f:1b:a8:c8:7b:a0:b2:93:9d:46:c7:ad:4e:57:3d:b2:
         6e:fe:0d:eb:59:aa:e6:28:ce:65:38:94:04:2d:7d:fa:48:61:
         f9:ed:0a:15:d3:83:79:66:97:dd:2a:07:b4:73:a0:35:f5:de:
         88:1d:1a:7a:42:57:16:c8:f6:2d:8d:41:2f:2b:1d:5b:70:20:
         c4:3e:c0:90:f2:09:e2:d1:ef:de:3d:3e:b5:ab:ed:9f:c8:3c:
         87:7e:ef:e1:78:7f:01:c6:30:32:c6:ab:1a:72:c8:90:5f:d7:
         2d:d2:4b:e7:4d:42:5b:bc:0c:ca:39:ad:00:0b:4d:c5:c9:53:
         5d:e6:72:9b:59:aa:d2:19:6e:a6:f5:13:e5:9c:7e:8e:30:78:
         90:4a:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 03:44:50 2026 by rpki-client