Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/29d8260a-b45c-3bf0-9087-096af723e8cd.roa
File:                     29d8260a-b45c-3bf0-9087-096af723e8cd.roa (raw, json)
Hash identifier:          qNXOH4vhqwqJ9YvnxOjO5UUrNuoDoy7dDhRmkG2qrLs=
Subject key identifier:   7D:DB:E8:BD:A2:EB:4C:32:30:AC:26:C3:6F:53:4B:EC:79:9B:F7:FC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29CD62F2EC63E9052DEC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/29d8260a-b45c-3bf0-9087-096af723e8cd.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.46.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9c:d6:2f:2e:c6:3e:90:52:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=c639cdf3-4698-4643-a143-439c7b7e06d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:3f:5a:fc:42:e1:ae:e2:fd:c6:a2:12:19:
                    89:82:0c:b8:35:8e:4e:59:18:b9:0b:6f:0a:5e:ea:
                    85:c5:a0:2e:15:93:2b:40:dd:c9:0b:ff:4d:b1:e0:
                    b4:71:be:ea:1b:ec:24:15:c4:0f:9c:27:8b:a5:27:
                    a7:91:04:18:4a:26:81:b4:74:eb:3e:43:7b:48:26:
                    63:58:5d:31:e4:e7:86:53:7c:99:ab:0d:9f:16:da:
                    11:83:24:5c:3c:a2:63:95:9a:ea:9f:ff:3f:24:2e:
                    29:8e:55:0c:fe:ce:d4:28:6c:12:a9:59:59:41:31:
                    fc:2d:98:ec:dc:7a:f4:40:00:e5:48:1b:79:e3:d5:
                    92:2e:9a:b1:e6:52:8b:a9:83:58:b1:c6:8c:e2:82:
                    19:87:5e:a4:bc:c8:7a:7a:86:4f:43:61:15:82:a6:
                    93:1a:4c:bf:9e:34:1d:5d:07:f7:38:78:ba:d7:3e:
                    e5:38:25:87:60:89:e8:d3:67:88:df:3d:ea:83:61:
                    31:57:5c:6c:05:dc:87:1a:34:8c:68:4c:bf:c2:44:
                    8a:67:0a:14:ac:6d:dc:b7:6c:d6:7d:d5:a0:08:ff:
                    62:22:94:90:e3:f4:6f:4d:7b:c5:b6:4c:0b:71:16:
                    59:80:e3:14:86:fa:55:59:bb:45:bf:ba:2f:b1:75:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:E8:BD:A2:EB:4C:32:30:AC:26:C3:6F:53:4B:EC:79:9B:F7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/29d8260a-b45c-3bf0-9087-096af723e8cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:38:53:4d:c7:15:c4:60:9d:91:e8:4e:d7:9b:2f:a5:5d:
         ba:8e:10:ce:54:64:e2:c5:c3:32:2f:47:85:aa:75:e1:89:16:
         e9:9b:1f:4c:58:16:9e:f0:03:23:e8:cd:34:fe:6a:70:d5:fe:
         5a:1c:1e:e7:6b:38:8f:0d:ea:9c:88:e7:99:55:95:93:06:16:
         25:05:1d:45:ea:15:81:0e:24:3b:b8:09:74:c3:c3:dd:06:ae:
         36:7b:cf:2a:dd:e5:d5:37:f1:b1:65:a0:0c:33:95:4c:ad:fa:
         dc:6e:94:0e:57:76:bb:01:31:8a:3a:7b:07:2c:80:1b:ec:10:
         69:c5:93:e2:05:61:01:9d:c3:a8:bd:83:78:d7:1e:be:37:f4:
         1f:4d:65:3f:29:33:8c:be:09:02:e4:11:d5:42:2e:85:58:87:
         da:8d:ef:08:17:70:fe:97:62:4f:4c:1d:81:52:ea:61:0f:f2:
         66:41:d1:dd:f0:f2:a2:25:3d:5d:2e:d1:dd:0e:86:53:5b:10:
         c9:bc:4a:7d:ca:5a:d1:e8:52:a6:bb:31:02:ce:3b:43:52:56:
         06:19:7a:7d:56:7e:7c:f6:e8:6f:f8:27:ca:89:4c:03:44:43:
         3d:f1:4d:84:f7:05:da:8c:61:2c:a6:49:ff:c8:de:33:73:c5:
         d8:22:71:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 05:38:42 2026 by rpki-client