Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b2dee4d-0e47-3b8c-92b3-d93b64b8f737.roa
File:                     2b2dee4d-0e47-3b8c-92b3-d93b64b8f737.roa (raw, json)
Hash identifier:          0xgdDiKGiigvNehgNEJA1hNqEpmgiXSZJ583JRsOqV4=
Subject key identifier:   79:62:CC:CB:08:DA:28:0B:49:98:BF:2A:35:68:98:6A:95:C6:A0:91
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29E3BF9092A89746B49A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b2dee4d-0e47-3b8c-92b3-d93b64b8f737.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.60.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9e:3b:f9:09:2a:89:74:6b:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=96414a31-c7ba-49a2-902d-bac7cf3a19e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:4d:88:ec:9f:60:42:19:f2:70:d6:02:1b:
                    a4:8a:40:d4:5e:93:86:44:d0:8d:a9:92:ea:90:eb:
                    71:c2:d0:bb:37:02:ef:f4:c4:fa:34:5f:ff:de:9f:
                    e7:5b:92:1c:bf:ba:a4:6a:95:b6:f5:78:ab:bb:7b:
                    f8:72:37:db:00:69:75:08:86:e5:d1:71:89:0b:ac:
                    07:10:1a:1d:4c:54:1c:b4:9a:24:be:16:a4:d3:bd:
                    8d:fe:2d:e5:e3:0f:6b:bf:55:40:f2:89:c3:ac:26:
                    47:89:68:5f:01:ef:05:74:f1:0a:37:96:8c:e7:1a:
                    bb:03:5f:24:68:0f:a8:df:1e:dc:ca:b9:1a:c1:35:
                    2c:73:8e:63:b8:78:26:56:47:85:a9:d4:58:c3:55:
                    20:32:bb:83:07:3e:3e:50:40:df:be:e5:0f:a0:59:
                    83:28:17:30:3f:fe:f0:e9:93:d5:e3:4b:2d:f2:af:
                    84:b3:40:bb:ab:1b:73:b4:90:2c:c5:0d:7b:16:4d:
                    a0:e4:0b:90:6c:a7:5c:ff:3c:dd:ef:2a:9b:9a:ca:
                    8e:41:58:1a:7c:7b:ab:72:35:bd:cd:7b:ce:5a:d9:
                    95:8e:3d:88:8f:6e:10:2e:4b:55:98:d4:09:8a:bf:
                    5a:88:13:bf:e7:8c:f2:36:eb:dc:9d:b1:b1:04:bc:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:CC:CB:08:DA:28:0B:49:98:BF:2A:35:68:98:6A:95:C6:A0:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2b2dee4d-0e47-3b8c-92b3-d93b64b8f737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.60.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:a3:34:10:b2:ab:13:18:38:de:8e:8b:e3:d3:e5:1e:cf:
         f3:21:7c:11:6e:11:cb:2a:34:a6:a1:4b:0b:6b:d5:a3:8b:f5:
         a7:c8:d0:b1:78:4b:44:1f:56:2e:67:df:37:3f:8a:a4:ce:d7:
         af:cf:74:ec:d6:46:c5:14:3b:74:f8:d3:a4:5e:13:c9:58:5f:
         27:aa:64:62:dc:26:af:ab:75:32:16:43:d7:3d:e6:58:30:b0:
         49:0a:b5:2a:bf:31:47:06:6e:9f:15:8c:ce:d4:f1:b5:0a:6e:
         08:17:08:97:c5:15:0d:d3:18:e9:d1:6b:19:48:2a:b6:20:66:
         45:9d:af:76:d4:62:c4:82:cd:17:5a:06:02:ce:00:9a:32:ac:
         2d:7b:1e:39:91:f1:aa:1f:56:3f:cc:93:86:01:2d:42:11:e1:
         67:e7:39:6d:a6:c5:0a:23:36:c4:35:3a:c7:21:4b:02:1a:f0:
         6a:7f:7d:e4:59:5e:49:d0:94:19:24:c6:d9:9e:87:70:1d:f4:
         28:39:34:e6:57:21:34:ba:53:a2:83:e5:af:48:e3:15:21:e1:
         45:19:c7:d5:9f:e3:c9:48:38:7f:36:85:33:d5:11:5d:45:57:
         4a:e5:27:ef:ee:63:75:24:ca:c8:7a:5f:63:93:57:f3:60:2c:
         8b:e8:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:09:54 2026 by rpki-client