Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa
File:                     e413581a-ea71-3211-9fa2-7956cacdf5d8.roa (raw, json)
Hash identifier:          wshNOxg0B+Jx/V/r7DD7A9isFbN92jG4xyOSV0hsLFg=
Subject key identifier:   12:4C:B5:4C:B7:7E:1A:50:3D:DA:27:8A:81:40:3D:65:15:51:C0:64
Certificate issuer:       /CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13
Certificate serial:       010D0C9F4328584E296F241CAE202A003D3D2980
Authority key identifier: 1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     395861
IP address blocks:        52.144.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:24:1c:ae:20:2a:00:3d:3d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe165d0-a9ca-4c8e-88ee-cb831681df13
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=22d2b4d8-f4be-44cf-94ca-f2b63a041e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:53:0b:a4:f3:ea:f8:bd:d7:f1:64:e6:de:
                    57:75:fe:e6:23:3f:1c:d8:7f:88:b7:66:af:fe:99:
                    d7:b9:86:09:1b:dd:65:99:9c:72:6d:53:7a:99:8e:
                    2d:67:5c:aa:18:0b:3a:9b:7e:82:1d:ad:1c:c4:c1:
                    dc:b0:a7:c8:85:63:41:f4:bf:59:02:09:1a:7a:b4:
                    12:d7:8a:ad:39:c6:43:5d:00:ce:16:95:ac:c0:ca:
                    a8:12:e8:b5:e2:82:eb:7a:7d:2e:f1:b8:e8:72:0e:
                    04:57:7b:3f:98:07:25:41:14:0a:3f:67:ec:3d:ce:
                    d5:d8:52:d7:61:53:98:2a:d3:c1:b8:6a:df:5d:24:
                    d0:f4:c2:a9:95:53:b8:f3:20:a7:06:14:3f:35:09:
                    8b:ab:c1:4c:0a:3f:79:97:a5:12:23:d2:bc:4b:4c:
                    08:35:66:2f:1b:3d:b9:dd:ef:ad:c5:3d:55:bb:f5:
                    16:33:34:f0:cd:a2:c9:c4:6d:6e:8b:8f:53:d6:11:
                    2f:50:2c:d2:95:a0:79:5e:89:84:54:98:98:f5:f1:
                    bd:30:34:9d:d8:e2:d1:c2:fd:dc:1f:aa:75:3e:95:
                    e5:49:30:19:64:28:d6:1f:95:6d:95:02:37:89:9a:
                    2a:42:a4:b0:e8:c3:fa:d6:e4:cf:7e:a7:ea:a7:58:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:B5:4C:B7:7E:1A:50:3D:DA:27:8A:81:40:3D:65:15:51:C0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/e413581a-ea71-3211-9fa2-7956cacdf5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13/ffe165d0-a9ca-4c8e-88ee-cb831681df13.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2F:DD:53:13:AE:F7:1A:E7:93:8C:9C:E6:EF:30:28:84:21:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ffe165d0-a9ca-4c8e-88ee-cb831681df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:c1:ee:93:c0:01:55:ac:45:ec:5d:cf:b8:1e:d8:44:52:
         77:67:55:31:4a:ee:89:a7:71:ac:07:63:11:a0:92:20:da:a1:
         17:d1:8e:df:8a:9d:dd:89:3b:e5:90:76:c8:20:fc:22:62:f2:
         c5:d5:fc:90:21:11:27:47:96:2e:a9:1b:99:ef:ab:be:55:a0:
         8b:99:23:cf:00:68:72:3e:20:d6:6c:ef:b9:69:1e:64:cf:b7:
         0b:d1:19:0e:07:4b:f8:6f:3f:9b:12:1a:52:c2:9b:c1:b3:52:
         6a:c8:08:53:fd:a4:26:20:f0:c1:a5:07:d6:87:26:63:be:7f:
         dc:69:2f:8b:39:f8:ff:ec:06:f4:a3:93:60:6b:b7:d4:ea:6e:
         f4:81:04:50:39:70:d0:97:4a:cd:fb:b1:e3:64:14:76:8e:03:
         2c:c5:d9:4a:b2:a9:c2:35:4e:68:85:19:10:c5:83:95:84:89:
         a6:84:0f:52:e8:6d:be:68:17:59:73:b7:72:f0:81:3a:88:f5:
         76:3f:f3:ab:6a:3b:da:f2:cb:93:69:09:6c:9a:28:1c:04:95:
         03:79:3c:20:97:43:ea:90:6c:9f:6d:3d:aa:1f:bc:5c:e7:9f:
         ef:24:63:f0:57:39:48:80:8f:74:bf:8b:c2:86:14:fc:c2:c9:
         f7:96:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:07:36 2026 by rpki-client