Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa
File:                     11e5723a-6711-3871-91a4-615d7b4e2eac.roa (raw, json)
Hash identifier:          AIO4wdDgKn/Ubho+KTfwJAud2FZttvx7SYEcCOZtt8Y=
Subject key identifier:   FA:8A:B7:FC:EC:6A:CA:4F:B4:94:84:80:9F:06:86:F9:15:21:B0:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B088388385295448F9D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     32787
IP address blocks:        72.52.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:88:38:83:85:29:54:48:f9:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=801ae0d4-6327-40b7-af20-8dbb49f7fa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:68:a6:40:15:bd:55:eb:a7:69:1d:50:2c:
                    73:ce:d7:41:28:29:78:f0:9f:f0:6d:a1:7c:41:e5:
                    69:ec:c8:57:48:e2:f8:f5:c3:67:c2:a0:0a:1a:7a:
                    52:d3:10:fa:f9:39:6a:65:63:77:c6:fe:78:54:ff:
                    9a:64:db:c5:1e:33:ee:93:db:07:0e:96:83:b2:2e:
                    1b:fe:6d:44:29:b5:e4:c2:6f:40:bb:f0:8d:80:c0:
                    43:35:06:cd:35:c9:57:55:1e:8e:0e:fd:9b:ee:52:
                    87:fb:78:e3:e4:f1:2f:ca:51:97:1c:53:5b:b9:ae:
                    87:44:ef:0d:3b:78:4b:6b:25:54:9c:bb:67:c0:7e:
                    40:dd:7c:9c:eb:7c:e8:53:ec:d2:c5:84:3a:83:82:
                    01:46:63:9a:37:2a:93:08:2a:cb:f4:77:e8:62:7b:
                    85:85:97:85:7f:99:66:df:55:7a:98:fe:0b:62:6e:
                    2b:49:0c:27:59:f9:0c:06:bb:0a:8b:8d:24:9e:c4:
                    aa:a2:0b:bf:db:00:9a:5d:b4:f7:a0:7f:98:d4:3c:
                    63:95:9c:fd:80:1c:28:a5:78:bd:52:9e:73:3b:ff:
                    41:97:93:a2:15:2d:6f:a4:b7:7a:81:51:9d:24:79:
                    a4:88:3d:d4:f8:33:f2:1a:ea:a9:9b:13:01:2e:05:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:B7:FC:EC:6A:CA:4F:B4:94:84:80:9F:06:86:F9:15:21:B0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11e5723a-6711-3871-91a4-615d7b4e2eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:59:a9:85:6b:9e:bb:bd:7d:d1:f1:ae:54:3f:f1:db:91:
         09:5c:ec:0f:47:8b:20:ce:5f:31:29:54:9e:08:35:c3:b1:aa:
         4a:7a:be:75:31:c9:d0:df:38:d7:ea:f9:2c:ca:dd:e9:c4:be:
         61:53:c8:7d:7a:ab:5c:72:66:c2:df:22:54:29:0f:48:6c:e3:
         24:5e:0b:d7:f6:e9:fe:18:98:77:10:72:a1:41:73:0b:ed:92:
         e6:29:a5:3d:1f:12:8e:98:07:60:98:ed:f0:ba:f3:0d:d6:b9:
         15:07:35:c9:7f:22:1e:ee:fb:d9:fc:d2:d7:f9:9e:19:83:8d:
         32:9a:d9:9a:3e:83:83:1a:d7:25:47:94:da:66:de:a7:a0:aa:
         2b:a8:5c:cb:47:51:df:3b:64:bf:66:de:62:14:d0:28:a9:99:
         47:8f:80:75:b1:6d:5d:37:e0:a6:5e:e2:3d:58:ca:52:63:35:
         c0:78:fb:e8:2e:5e:82:7a:ef:35:ca:a7:ac:d4:44:42:e5:34:
         97:a5:b5:58:d3:00:6d:d8:66:d6:28:6d:4a:05:4c:84:16:56:
         63:00:67:15:88:f6:0c:a0:d9:18:3e:b6:c9:08:51:80:05:3a:
         84:ed:c1:2e:fe:89:8b:9b:b5:a7:88:60:f9:61:01:8b:98:57:
         de:ac:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:08 2026 by rpki-client