Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS152631.roa
File:                     AS152631.roa (raw, json)
Hash identifier:          zkYQJA4Osx0rvaG+zdnKvjUOJQQeVzdlDyqq1OCZ3gk=
Subject key identifier:   F7:25:32:DC:1F:AE:6C:3D:97:14:51:A6:5B:F3:25:60:64:87:35:B6
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0FE6261A23C39CC343C956878BE9F3A0137982B7
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS152631.roa
Signing time:             Tue 07 Jul 2026 03:33:48 +0000
ROA not before:           Tue 07 Jul 2026 03:28:48 +0000
ROA not after:            Tue 06 Jul 2027 03:33:48 +0000
asID:                     152631
IP address blocks:        216.75.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e6:26:1a:23:c3:9c:c3:43:c9:56:87:8b:e9:f3:a0:13:79:82:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul  7 03:28:48 2026 GMT
            Not After : Jul  6 03:33:48 2027 GMT
        Subject: CN=F72532DC1FAE6C3D971451A65BF32560648735B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:f0:d1:6a:98:e6:72:c5:3c:77:c3:f3:d7:
                    6a:60:6b:76:e7:79:7e:00:a8:b2:e3:46:e7:d9:10:
                    23:90:72:b4:09:a3:ca:39:d6:0e:5b:2f:f8:72:43:
                    85:b9:59:d4:94:2d:f7:b8:0e:af:18:51:d6:3f:4c:
                    5e:76:d3:44:51:31:f2:d8:53:77:44:eb:f5:e8:77:
                    d4:13:c2:3e:23:2a:d7:9d:01:d7:ed:31:e6:80:58:
                    ea:e7:53:46:37:c9:1a:4d:ad:d2:88:61:27:d5:a9:
                    25:9a:6a:3e:79:34:e9:4c:e3:51:9c:37:5c:91:3a:
                    d8:5d:74:5c:b2:d6:1a:16:76:0a:05:45:01:b3:b5:
                    97:62:f9:0e:fe:ca:6f:c1:2c:ea:78:d0:bb:2f:fd:
                    f9:2c:8d:ba:96:7b:8b:5e:e1:a6:20:e3:6e:d0:1c:
                    97:b9:c0:be:06:62:c3:cf:1a:91:d7:27:08:c9:b5:
                    a0:06:b9:42:fa:1a:7d:ee:9c:c0:28:20:71:0d:1a:
                    7f:5a:bf:7c:b0:b0:6a:8a:30:23:e8:c4:84:5f:03:
                    9c:e3:3d:57:73:49:d3:78:30:fa:58:7f:de:4a:22:
                    5f:d1:0b:81:95:bf:81:74:db:8a:56:0a:fa:fb:71:
                    d0:3e:1c:a1:fb:ed:db:d9:b6:4b:fb:3f:ee:26:e6:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:32:DC:1F:AE:6C:3D:97:14:51:A6:5B:F3:25:60:64:87:35:B6
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS152631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:4b:76:97:f1:fd:a1:98:9c:7e:3a:f5:f5:2f:9c:f2:34:
         25:30:de:a0:9e:79:6f:4d:e6:b7:8d:cf:58:a0:0b:7c:e2:28:
         6d:09:ee:ba:6a:9c:27:e6:1b:4c:80:6b:78:00:21:bd:fb:3d:
         73:21:e7:34:f5:4a:ff:95:b8:52:7f:71:03:be:bb:7c:51:49:
         01:a5:e7:9e:61:f3:81:04:57:1b:ac:4e:18:e5:58:ba:8c:6d:
         bb:48:28:8c:39:50:ea:2a:35:ba:96:5d:a0:1a:d3:4a:15:2b:
         d0:2b:77:af:e5:24:69:c7:3b:c6:0d:6e:40:a1:9e:df:2f:89:
         7f:2d:bd:98:5b:c8:f1:78:15:ef:cb:b3:4b:24:6b:64:54:62:
         fe:aa:04:7f:6f:f4:cb:ba:dd:8f:86:7c:62:9c:ab:37:a2:6a:
         bd:16:d2:b5:00:be:29:be:91:2f:b8:f5:6c:72:81:41:a9:78:
         f5:76:53:d7:d2:00:b9:38:11:5d:60:83:79:ed:3e:7a:3c:91:
         45:80:b2:75:26:5f:eb:fc:07:6d:a3:ef:af:76:e7:7b:a2:ac:
         97:8f:5a:70:eb:01:0a:cf:37:db:0c:99:e7:0b:a0:a3:fe:39:
         60:34:cb:d7:70:5b:ee:5a:b6:de:9c:78:91:7d:42:20:6c:8a:
         af:1e:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:58 2026 by rpki-client