Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa
File:                     f1518e60-c475-3f73-9434-16c8301c3714.roa (raw, json)
Hash identifier:          5hkpMYmpBJFIk1YcSPyEvtIm+MbIFhlgzwvZQCG1UYk=
Subject key identifier:   2F:16:C2:D5:F9:9D:48:B2:29:52:6A:48:54:EC:72:1B:EB:12:29:39
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA7980D78B6D85A2EF20A9B80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        152.39.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:0d:78:b6:d8:5a:2e:f2:0a:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0daf7939-d45f-4632-9637-71112446cf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:75:18:1f:a0:90:3b:7c:40:ff:c6:16:03:
                    f9:0f:54:02:f1:ec:ab:81:df:59:03:59:e6:bb:7b:
                    80:d1:95:43:0c:e8:f7:a9:c9:13:c1:cd:b0:33:db:
                    b1:5c:b1:a3:64:ff:26:f6:6e:ca:7a:63:92:58:59:
                    b4:32:27:0a:bc:ee:e3:fb:b6:d9:1d:9f:07:6c:9f:
                    4d:e0:f4:2f:5c:40:65:76:1f:5a:02:f7:55:42:e8:
                    b3:8a:03:8e:a5:70:42:8d:69:18:94:a1:e6:aa:fd:
                    eb:8c:2a:8b:23:44:1c:a1:e2:23:8f:45:a5:31:e6:
                    99:07:7d:07:3b:d7:c0:f0:91:ee:4d:c5:e7:a1:ce:
                    d7:c2:14:fa:fe:b1:e0:bc:30:8b:52:e5:a3:81:16:
                    e2:1e:51:b5:87:9b:ec:8b:f7:fa:ab:eb:13:73:e0:
                    d3:36:63:a5:3f:0a:3f:53:e4:d3:b1:a7:dd:3c:61:
                    c5:b4:da:4f:74:89:3a:02:2f:4e:59:cd:25:35:0a:
                    d1:9f:9d:f1:f4:8d:0f:a3:ac:97:d8:7d:11:70:0c:
                    dd:66:50:b8:11:d0:df:fa:91:d7:33:ea:df:38:d0:
                    a4:b9:c7:88:37:aa:9c:72:06:08:77:f7:d1:8a:0a:
                    34:dc:21:22:bc:6a:76:5f:a6:80:eb:37:d9:73:63:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:C2:D5:F9:9D:48:B2:29:52:6A:48:54:EC:72:1B:EB:12:29:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.39.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:01:85:47:2a:1f:49:49:0f:a3:7b:85:00:b7:3e:35:50:06:
         56:ad:72:44:dc:a8:f2:52:b9:81:47:9b:d4:b2:00:c2:8d:09:
         6c:9f:05:22:55:34:85:da:5a:84:c4:60:bc:ea:bb:46:03:b2:
         cb:c6:ca:5c:8a:47:3a:bb:96:f7:52:2b:82:b8:dc:09:3b:44:
         b0:f1:76:f0:bc:1b:0e:0b:7c:e9:cc:28:62:c4:0e:e6:85:3c:
         cb:70:4c:92:cf:5f:4e:af:e1:9e:c7:6b:7d:ab:38:ee:df:d1:
         23:76:63:25:03:1c:14:b6:da:1c:be:f4:6a:c0:c4:29:33:eb:
         f7:94:96:8f:da:74:21:92:51:1d:6f:d8:00:4e:80:36:3a:a3:
         c3:a1:ab:bd:ce:1c:34:63:b7:67:84:7c:18:5c:98:92:67:c9:
         42:2d:27:9e:8f:53:9e:1e:ff:36:f3:78:13:84:ce:59:95:1f:
         ec:a0:e5:13:68:98:2c:14:bd:c5:b2:5a:3d:df:cd:64:32:3f:
         80:3e:20:4b:2a:5c:31:16:9c:1a:e4:7e:2b:10:52:1d:47:59:
         91:b3:82:64:50:7e:f6:27:6a:59:33:50:a2:e3:d3:7b:a0:60:
         7f:ec:bd:67:1d:68:29:d4:a2:7b:c7:90:72:d8:d9:7f:6f:f9:
         b5:35:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:28 2026 by rpki-client