Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa
File:                     52effa5b-6376-385f-a351-c1d3d0ab0b74.roa (raw, json)
Hash identifier:          GZsy26BZ7RHisJcBNDCvpNEUFniI7Na9Z+nUxyvbVpQ=
Subject key identifier:   D5:4F:F5:2D:47:F7:91:76:80:65:AC:63:CA:02:73:C6:2A:3F:88:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588FC9234610A3DDCE2B2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa
Signing time:             Tue 23 Jun 2026 22:35:18 +0000
ROA not before:           Tue 23 Jun 2026 22:35:18 +0000
ROA not after:            Mon 21 Sep 2026 22:35:18 +0000
asID:                     5650
IP address blocks:        172.99.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:fc:92:34:61:0a:3d:dc:e2:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:18 2026 GMT
            Not After : Sep 21 22:35:18 2026 GMT
        Subject: CN=f9dc78b6-9aa1-4a7d-a518-8fce9f2b2aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:57:83:5b:fd:05:b2:47:c5:b8:7c:e5:de:
                    26:7a:4f:2f:d2:5a:24:48:0b:7b:ea:ee:76:46:b2:
                    db:6c:ff:90:35:7b:c9:70:bf:a4:b9:95:fb:8e:7c:
                    6c:a2:04:18:41:97:a5:12:48:de:4c:7d:1b:f3:5d:
                    eb:67:e0:05:5f:38:6a:cf:19:df:45:ed:35:df:d8:
                    d5:76:c8:74:23:19:05:89:35:23:c7:9f:51:66:43:
                    df:05:c9:e7:10:26:d7:10:68:a8:87:70:48:d6:de:
                    b6:ac:ea:8a:09:cf:70:d3:c0:a8:7b:c2:9a:de:15:
                    d2:7e:5c:b9:3a:f5:32:35:e0:5d:1a:c3:5a:ca:32:
                    28:0a:0f:15:5b:ce:5e:12:3d:ae:89:94:61:15:c8:
                    ea:28:f9:21:00:67:b1:71:90:54:7e:03:1d:ce:32:
                    c8:a6:f0:04:49:51:b4:d0:0d:7f:36:b1:c5:bb:27:
                    00:c0:7a:15:99:06:c5:33:08:e5:d6:5f:c3:68:a9:
                    23:5f:95:b7:6f:69:2f:bf:0c:8c:b3:43:0a:a6:0a:
                    3d:d1:f6:11:f8:df:7a:3c:76:bc:ec:70:00:0a:14:
                    9a:b9:dd:3e:37:66:c3:ef:a3:1e:5c:ab:7e:8a:30:
                    d2:98:fa:d5:7f:65:77:8f:05:de:08:09:6c:89:1c:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:F5:2D:47:F7:91:76:80:65:AC:63:CA:02:73:C6:2A:3F:88:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:da:c4:55:65:80:61:cb:db:7e:4f:fd:f2:5e:94:59:9d:43:
         7f:7d:cd:c6:8b:7a:f5:d3:31:a8:51:2e:ba:e9:39:4d:1e:3a:
         33:5a:51:13:3c:d9:20:c9:cb:48:c9:e2:88:d7:e2:cc:de:c5:
         c2:31:ef:48:2a:79:2c:48:75:75:23:e7:5e:b3:dc:2e:46:a1:
         69:00:47:66:7d:40:9d:8d:90:ff:53:4d:6e:af:ec:1f:0f:a2:
         dc:93:8e:47:e9:bd:fe:82:d7:38:77:39:d9:56:bb:f5:03:a8:
         aa:59:d6:3b:48:e1:dd:05:ac:3f:96:92:21:84:a2:63:f8:b5:
         a5:c1:08:e2:82:f6:d2:46:b6:b9:2b:a8:01:c1:7c:bd:17:8c:
         78:c7:dc:78:56:18:7d:eb:bb:1b:60:b3:72:2b:cb:39:b1:af:
         89:dd:c4:af:da:74:5d:9c:00:3b:bb:98:13:98:5c:06:dd:1f:
         c8:ca:37:11:8c:56:2d:73:46:e4:b3:60:b9:44:8c:a4:a1:67:
         c5:9e:49:0d:9f:f3:4b:28:31:98:0a:38:27:bc:fe:60:f6:1a:
         9f:b6:c4:73:f9:c3:8f:44:be:e5:84:b4:5b:cd:ec:54:cb:3c:
         7c:c7:b7:85:2c:d5:a4:b5:48:ba:f4:84:f6:ec:04:84:44:16:
         cc:f6:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:32:07 2026 by rpki-client