Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a3d7252c-9963-3542-a055-beb862ab1457.roa
File:                     a3d7252c-9963-3542-a055-beb862ab1457.roa (raw, json)
Hash identifier:          iP92eW2SLXjwD1J7xax3bj2sAdFbf4pfzWfNOoSGULE=
Subject key identifier:   C3:AE:D1:E9:7F:43:96:1A:43:5C:D4:74:A0:4D:57:93:5E:53:C3:FF
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584EA7881CA9EE08A346B0273C00
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a3d7252c-9963-3542-a055-beb862ab1457.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     812
IP address blocks:        152.232.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:1c:a9:ee:08:a3:46:b0:27:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=823d44fb-09fb-4225-b108-15c4af896a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:6c:28:cb:b6:18:77:fa:25:d7:d5:8c:fa:
                    96:30:34:1b:82:bc:80:01:0f:46:0b:77:57:cf:e4:
                    58:62:d3:99:51:3a:7c:7e:b7:28:a7:03:9f:1e:c5:
                    16:cf:b8:a2:b4:4a:58:0d:66:9a:d9:df:0b:73:e3:
                    bc:3e:75:68:74:59:f1:2a:ec:36:1c:7b:37:a3:b3:
                    ed:f2:ef:b1:b8:67:01:d3:46:73:ca:f3:0d:fc:31:
                    0b:83:05:ca:9c:56:ab:bc:13:6c:56:b1:5c:6f:ad:
                    92:9f:f7:07:62:fc:d1:f9:36:21:d9:45:ce:0f:4a:
                    32:2c:b9:33:37:00:eb:02:e3:01:fc:20:c4:99:a9:
                    bb:2e:ea:73:73:dc:9b:2e:c7:f9:d9:de:cf:3e:33:
                    ac:cd:05:99:25:ff:b2:34:9e:1f:c1:2b:31:11:f5:
                    6c:4b:37:4d:33:99:d5:2f:b8:c6:99:cc:6d:46:74:
                    0f:81:bd:b6:1c:91:86:68:2b:ff:e1:27:29:24:29:
                    36:4a:6d:75:cc:eb:fe:b8:05:84:b6:41:d2:56:1a:
                    6a:5b:22:7a:09:92:08:0a:4a:17:ab:f4:4f:df:50:
                    65:3c:7a:1f:4f:40:72:e6:e5:8a:53:be:ea:24:7a:
                    e9:38:d1:c9:5f:69:13:b7:6a:d9:35:c7:4b:0a:86:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:D1:E9:7F:43:96:1A:43:5C:D4:74:A0:4D:57:93:5E:53:C3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a3d7252c-9963-3542-a055-beb862ab1457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:df:86:be:52:02:01:a3:d8:50:cd:8c:fd:86:58:6c:b6:
         9c:90:52:45:84:4c:59:f3:ea:f2:39:f3:d2:6a:2f:69:24:4e:
         d3:e7:c0:63:ab:82:1e:d7:48:76:8b:d1:60:44:39:a4:e0:cb:
         29:84:15:a7:8e:86:8e:80:61:1f:d6:d3:2d:e6:76:54:1b:ea:
         e2:32:ac:35:23:10:9f:d0:ea:0a:08:d6:17:cd:e8:75:66:3f:
         81:bc:a8:08:2d:fa:0e:c2:23:b8:94:c4:4d:2b:8f:9b:07:ed:
         2b:bb:b2:3a:04:42:f7:bd:17:27:ce:38:a7:47:91:98:a4:47:
         b8:6b:02:4f:cd:b0:ee:4c:72:66:ff:51:fb:a4:62:72:97:5d:
         90:65:3d:6f:12:91:65:df:e0:a8:62:b0:df:79:38:cb:f8:57:
         11:ad:b0:67:34:de:b8:e6:b4:9b:dd:4e:58:a6:96:29:12:40:
         f9:0b:20:e9:7f:8f:31:40:45:0d:0e:50:36:ca:81:c6:5e:3c:
         59:89:1d:c4:4c:60:a9:3e:8f:d6:7f:4c:3b:12:59:4b:d4:8a:
         ea:1b:eb:97:e1:44:fd:a4:5c:c3:ff:f1:ce:c0:5b:ce:28:be:
         25:6d:03:f6:02:35:04:66:41:22:92:8a:5d:35:bb:58:f3:5c:
         58:3c:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 17:42:15 2026 by rpki-client