Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/148136db-7643-3193-a2c8-e184d85f7657.roa
File:                     148136db-7643-3193-a2c8-e184d85f7657.roa (raw, json)
Hash identifier:          NuU8YFN1IDI43MdS3uYBQdnZQ8O+To2tmC7Fq9eoTlI=
Subject key identifier:   78:00:9A:4B:2F:A0:D8:14:32:28:7F:2A:1F:4D:94:90:17:B8:AB:A7
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D298000E35FE48AEB63680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/148136db-7643-3193-a2c8-e184d85f7657.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.60.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:98:00:0e:35:fe:48:ae:b6:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=adcca056-54ec-477d-9d36-54f49c140a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:7e:1e:34:32:f3:c8:5c:6d:c1:fc:7b:05:
                    2a:fc:6c:2b:0b:df:1e:92:22:b3:64:b7:48:41:a8:
                    58:ce:df:ba:db:90:68:61:12:de:a6:6a:8f:0a:45:
                    8f:7a:5c:96:d0:69:25:1b:91:c2:26:bf:76:15:ef:
                    85:75:4e:8b:0b:a1:99:f7:f7:de:18:8a:7c:a8:b1:
                    d2:c0:e9:9f:f6:d3:97:e3:a8:84:63:36:49:1d:f6:
                    1c:df:e7:6f:92:cd:eb:07:87:fb:b4:d1:ed:c5:23:
                    38:3b:db:70:da:f3:e5:54:0e:ea:5e:82:15:a2:77:
                    3e:e4:04:df:b3:66:a4:e6:6e:6f:05:57:e9:ae:d8:
                    cd:ae:14:21:0e:fd:d7:04:00:67:4b:e3:0b:86:b1:
                    3f:2a:b8:27:c1:42:58:5a:71:7b:dd:76:98:e8:55:
                    9e:c2:a1:ab:e2:dd:3c:bf:8b:e7:c0:36:43:0b:97:
                    e0:f5:ff:de:27:bf:d4:ff:53:c6:29:30:ed:bf:2a:
                    b4:9c:28:3e:a9:a9:e0:07:6a:3c:cd:91:e3:56:09:
                    c0:20:87:b0:16:be:30:1d:2f:88:3c:60:f4:8f:5a:
                    6f:83:6b:67:45:a0:2d:9f:c6:e1:8b:9a:eb:4b:d2:
                    e7:48:e1:12:1d:0f:18:e4:03:ab:62:17:22:75:ad:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:00:9A:4B:2F:A0:D8:14:32:28:7F:2A:1F:4D:94:90:17:B8:AB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/148136db-7643-3193-a2c8-e184d85f7657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.60.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:78:c2:3d:1b:1c:c8:04:2b:b1:0d:a4:ad:29:8e:1c:40:
         54:86:db:45:bb:26:b0:c2:23:39:05:9b:56:f3:db:9b:4f:a4:
         93:58:79:fe:31:b5:41:a5:a0:ae:4b:6e:1d:fb:2e:cc:02:e7:
         27:9e:81:e1:16:a2:fb:ae:f8:df:c9:55:4d:83:7f:8d:c9:e5:
         23:47:1c:f1:74:b7:c6:04:bc:57:5f:0c:39:86:23:a5:29:4d:
         d2:84:1c:95:c3:68:ce:9d:b5:4e:a9:74:de:f7:ec:de:d3:23:
         3c:53:73:ee:5c:89:ac:25:f3:a5:e4:b5:28:57:c1:be:a1:49:
         17:c3:f1:0c:44:ec:fe:29:ed:42:b6:27:6b:3c:dc:48:b1:ab:
         33:e9:45:04:43:73:29:4f:f5:6f:61:e3:9d:4e:c1:43:26:3d:
         55:89:32:c5:80:69:2d:1b:90:9e:9c:44:75:9b:28:7d:55:48:
         bf:04:11:9b:99:ad:11:2d:42:67:ca:97:6d:36:fd:6f:9e:ea:
         ad:94:08:c6:c9:b8:5b:66:8b:12:f1:5e:02:8b:f4:a3:ce:a7:
         73:c1:ec:4b:d9:b2:0f:d1:82:a8:58:94:f6:5e:ba:14:8a:58:
         88:8c:56:6d:ac:58:fc:ae:b3:42:56:1e:73:97:15:63:86:b9:
         51:f2:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:08:16 2026 by rpki-client