Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa
File:                     52a98281-143a-37cd-966c-808bd9db6981.roa (raw, json)
Hash identifier:          bJfxGT5Wf4tHzuKuWFd5JJDrtTvnhMTn7nidETIbiVo=
Subject key identifier:   ED:6E:36:9C:1F:FD:B5:F7:07:E3:82:7E:89:1C:1B:EB:6F:79:29:FE
Certificate issuer:       /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
Certificate serial:       010D0C9F4328584ED431E85572CA81A9EF87D140
Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     12099
IP address blocks:        162.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e8:55:72:ca:81:a9:ef:87:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=eed95cf2-f839-47d9-9475-8ecc98692c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:b7:88:aa:f6:8e:9f:71:0e:37:ee:33:2c:
                    e7:9e:75:28:d0:5e:2f:ff:46:76:f1:17:02:bb:88:
                    e0:26:5b:49:99:eb:8d:f1:53:86:47:28:c3:9e:e7:
                    ba:23:4f:f0:0a:6b:f2:aa:97:2d:b8:b3:ae:a4:6f:
                    b5:18:2d:b4:d5:33:55:bc:67:be:41:75:0e:7b:c9:
                    ad:d9:db:e4:b1:9e:7c:14:ca:d5:b9:7a:2b:7f:d9:
                    aa:9f:22:6d:1c:50:b2:b3:47:2d:22:07:22:ba:34:
                    56:7e:67:ed:d5:b5:a3:be:25:dd:ec:db:e5:85:27:
                    fa:40:6a:2b:4b:5f:87:ab:00:ee:28:c2:84:3b:20:
                    d0:fc:a1:d2:3b:b4:27:28:bd:31:3e:46:0a:0b:ea:
                    07:2e:02:31:11:35:8a:1e:6d:0c:53:ec:79:aa:e6:
                    2e:90:c2:04:fd:0d:37:7d:68:12:e5:f8:ce:78:d0:
                    0c:50:af:a0:e2:0a:08:32:82:ac:09:f3:d5:95:31:
                    b6:e8:55:f7:fb:a9:1f:45:ae:e5:84:d0:51:11:5f:
                    fd:0e:51:b9:96:94:2c:77:da:b2:54:0e:ba:fa:85:
                    f2:fb:11:1c:2c:ea:d0:e2:ce:f1:ef:9c:51:18:9f:
                    39:f5:d2:62:a7:84:c8:df:e5:8b:2f:09:aa:d7:ff:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:36:9C:1F:FD:B5:F7:07:E3:82:7E:89:1C:1B:EB:6F:79:29:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl

            X509v3 Authority Key Identifier:
                keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.82.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:8e:f7:3d:b9:e8:41:6d:40:80:2b:89:7e:69:12:b6:a5:
         74:2f:98:af:a2:bf:48:ea:3c:24:ce:54:ad:63:e9:3b:87:5d:
         b3:be:88:da:aa:61:a9:3e:6f:98:73:fe:0a:28:47:a6:60:4d:
         08:cc:98:7e:bb:74:b4:d1:21:c1:17:51:46:be:e6:21:56:fc:
         45:cb:47:73:50:3d:1b:66:e6:ac:b4:d4:f8:1f:f4:46:d1:48:
         f3:da:7f:ff:f6:12:07:73:89:8f:0d:7e:66:8c:0d:71:f6:0d:
         4e:fd:45:f3:e8:04:69:d7:ff:e2:9b:48:61:aa:f6:6f:5d:a5:
         fc:61:1f:ea:bd:f1:fb:41:09:27:ad:22:f8:5a:ee:a2:c4:a7:
         c5:73:96:dd:8b:b2:71:6b:4d:24:cf:43:5d:cf:89:f6:f7:7e:
         d9:2d:34:d7:ac:08:c0:84:90:8e:e2:54:ee:09:9e:d0:5d:42:
         17:7b:9f:88:98:16:60:e5:12:55:7b:07:dc:b0:07:6a:8c:37:
         40:76:98:47:83:94:fc:25:c9:00:e3:72:e2:b1:b8:62:6f:69:
         1e:55:73:1a:69:e3:26:cd:85:25:4e:f3:be:b8:64:94:2b:68:
         8f:1b:98:99:76:db:86:f1:01:22:06:67:eb:8b:1f:df:05:60:
         d6:28:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:38 2026 by rpki-client