Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa
File:                     9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa (raw, json)
Hash identifier:          AsI7FsNo38uDKkxqHujxZ4YkZhsTj2nr/Wt3L3eP6qQ=
Subject key identifier:   BB:52:82:12:EF:9C:0F:61:BE:61:29:94:D8:FD:D7:01:11:F5:0A:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F90A322049C897843B4A1EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     20940
IP address blocks:        72.246.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:22:04:9c:89:78:43:b4:a1:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=d9175608-84dc-45b8-94fe-7040023d92bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:ed:dc:52:32:ff:15:51:c1:73:b4:da:1c:
                    83:82:5f:60:31:b4:29:e3:51:b1:64:3c:0e:d9:f1:
                    0c:5f:ba:3f:6f:7a:7e:4a:98:1d:8e:db:5e:e5:73:
                    ab:10:e1:ff:d3:4d:15:26:63:27:e1:fb:1e:34:29:
                    74:17:ed:9a:be:4f:e0:18:2e:aa:5c:6f:7a:d9:26:
                    12:b9:1b:1d:7d:a2:fe:c7:73:98:3c:d3:3b:f7:00:
                    43:91:ad:50:87:94:12:6c:42:20:48:2d:e9:b7:73:
                    c4:45:49:5e:40:f1:83:f2:66:86:74:67:51:26:c3:
                    5c:d4:fe:8e:dd:cd:d4:b3:80:72:9d:e1:c2:86:85:
                    7d:58:22:0c:ef:a0:01:7e:5f:e5:58:03:52:54:eb:
                    32:d4:c7:3e:1d:3d:a1:02:50:63:ab:34:73:e9:cd:
                    64:bf:e0:80:c0:06:3f:d4:44:8f:fb:fe:58:29:d0:
                    31:d4:38:3a:07:a7:44:d5:2b:c5:74:5f:a7:be:ea:
                    e3:00:b4:8f:8a:4b:54:3f:4d:8c:30:c5:3a:d2:69:
                    07:8c:de:3f:13:08:f1:81:b3:9e:7f:36:01:a0:15:
                    88:fe:c5:b5:a6:03:bd:7f:91:3d:36:32:be:f2:fc:
                    22:05:a9:b8:08:d8:60:43:b3:58:dd:4a:c0:b0:63:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:82:12:EF:9C:0F:61:BE:61:29:94:D8:FD:D7:01:11:F5:0A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f7cf9ec-6ebc-30b9-a43d-0b7e17e7b255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5b:12:41:0d:ac:66:b3:3d:82:9c:04:2e:fe:c0:86:e9:ab:
         f3:a5:ab:13:8f:d3:59:8e:85:6d:90:f8:8b:ff:12:c7:5d:e8:
         06:53:ba:d1:bf:c4:03:79:0b:8d:8f:7e:57:d5:c0:be:f1:29:
         f3:98:3b:ed:31:8d:c4:64:d9:27:a2:ed:27:46:27:e6:98:f0:
         54:bf:e3:6d:88:79:c7:33:8d:4a:5b:97:c1:1c:16:5e:73:b3:
         77:c2:be:32:0b:0f:ac:3e:40:e8:90:9a:26:ed:fb:08:1f:5f:
         55:10:1d:3c:66:1f:71:60:f3:5f:f2:1b:7b:43:17:38:d2:e4:
         0d:0e:2b:bd:ed:85:67:e4:1e:50:25:d9:59:7b:6f:2e:b3:da:
         87:4d:22:92:8e:7f:20:a8:3c:1a:7b:8f:5a:e8:71:b9:54:b0:
         03:e0:68:95:d6:8d:6f:a8:2e:07:f5:3e:ec:d4:ad:f9:b7:6a:
         eb:8f:2f:20:b7:68:2e:14:f0:1b:01:4b:bd:e8:9b:51:fb:40:
         73:f6:de:8f:f9:d4:76:06:fd:7a:6c:59:53:b8:7e:6a:db:54:
         1b:fc:7f:0c:ed:02:f6:fe:45:b1:53:49:1f:e4:2f:9f:35:2e:
         15:a1:ef:95:99:66:bc:00:93:d4:39:7f:ba:a5:c4:02:b1:0b:
         a4:52:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:16:44 2026 by rpki-client