Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/109f710c-4efb-306b-8fca-e84fd253af69.roa
File:                     109f710c-4efb-306b-8fca-e84fd253af69.roa (raw, json)
Hash identifier:          1zP4cQB+xLKiGb7la7pPTIxOXmrAkLIsc4wQdIBZbRg=
Subject key identifier:   C8:82:AD:D6:B6:E6:0D:3B:3E:2B:87:36:2D:8D:0A:0A:0E:0D:FD:87
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234DB235871F1EC31475CC
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/109f710c-4efb-306b-8fca-e84fd253af69.roa
Signing time:             Fri 31 Jul 2026 18:26:06 +0000
ROA not before:           Fri 31 Jul 2026 18:26:06 +0000
ROA not after:            Thu 29 Oct 2026 18:26:06 +0000
asID:                     81
IP address blocks:        152.45.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4d:b2:35:87:1f:1e:c3:14:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:06 2026 GMT
            Not After : Oct 29 18:26:06 2026 GMT
        Subject: CN=18df5c79-8e2d-48f9-b313-16f571dc6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:c9:87:ce:6c:97:37:81:e4:0e:a1:3d:dc:
                    84:df:31:b6:81:1b:cf:33:a6:88:f1:00:96:e6:bc:
                    31:38:12:f9:55:20:96:f3:c9:f6:0c:8a:71:0f:2a:
                    6a:e8:16:db:fd:84:01:15:d0:cf:9c:d1:a3:91:71:
                    93:7c:d4:ec:a3:a5:92:5f:27:5c:b1:d7:07:13:e6:
                    b8:a0:06:e3:f0:50:bc:57:99:60:78:c6:0b:f3:58:
                    b2:e6:0a:82:e8:1f:3b:f2:c6:8f:4a:f6:ae:b7:b8:
                    75:67:7e:86:76:da:5c:65:8b:eb:a5:ee:0f:09:4e:
                    63:71:d8:23:22:de:d3:f1:71:88:7c:f9:59:0d:07:
                    ff:e4:0e:af:6e:ad:72:e3:ff:82:5f:67:e0:1c:3a:
                    d4:6e:f5:73:76:c5:3b:e0:ff:14:f1:76:d7:44:1d:
                    f7:20:a3:7d:12:6c:33:6f:e3:1a:f3:36:8d:5b:29:
                    62:63:a6:53:ff:7b:7e:67:59:00:15:17:a3:d5:41:
                    42:3f:82:45:e8:cd:5e:bb:86:c6:7b:06:53:ce:47:
                    82:42:e2:3a:cd:89:5f:a5:8c:9a:9d:a8:80:bd:00:
                    9d:37:4d:c5:57:d2:32:29:40:1f:de:c3:fb:bf:85:
                    d0:f9:eb:c1:92:35:b6:02:7a:2a:ba:93:53:3d:1a:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:AD:D6:B6:E6:0D:3B:3E:2B:87:36:2D:8D:0A:0A:0E:0D:FD:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/109f710c-4efb-306b-8fca-e84fd253af69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:01:30:a8:39:81:dd:41:77:32:a5:68:a9:7a:9f:da:15:
         5f:fb:8a:17:c1:a1:d6:c6:9b:a5:a9:51:4e:b8:c6:7c:63:e8:
         c0:f2:a4:0c:42:7f:9b:b0:95:7c:79:c7:0e:58:eb:dd:97:35:
         65:2a:81:3b:df:20:12:bb:be:10:c6:b7:b8:6e:81:cf:08:8d:
         6a:5c:61:52:45:3d:7e:6e:29:77:a1:a5:1d:33:0b:74:ed:3f:
         03:e9:31:45:a6:e7:35:0d:54:c2:79:a0:b4:b0:06:e7:58:7a:
         7e:b9:57:a3:90:86:dc:d6:92:4f:0e:3e:06:de:d1:99:aa:f9:
         03:cb:00:77:c2:78:f4:88:42:00:20:b2:f6:d7:23:38:e9:86:
         39:8c:d8:47:2c:77:a9:16:85:5a:45:cf:63:b4:36:dd:da:b6:
         3b:cc:35:55:49:21:b7:4f:9a:13:fe:4d:d7:f4:73:7e:52:65:
         54:7c:42:81:26:93:02:8e:6f:8e:10:d5:cd:0a:15:64:fc:61:
         f9:7e:04:16:e5:ce:4e:96:32:5e:23:91:f6:f7:27:ae:d3:46:
         7b:19:8c:2c:8c:83:b9:d8:20:2a:73:1c:13:81:a2:a0:07:04:
         d6:3a:a4:43:95:57:7d:1e:c7:ed:25:7c:3f:76:2a:49:aa:51:
         45:53:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:08 2026 by rpki-client