Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d44781c-0f86-35ab-be70-f7bd0c23e6cb.roa
File:                     2d44781c-0f86-35ab-be70-f7bd0c23e6cb.roa (raw, json)
Hash identifier:          V3/v3RSNC/ZVZsKBV9W54nFls+HDWi/W9WfOtZ39b2c=
Subject key identifier:   04:15:8F:09:B1:2C:3F:73:FF:3B:E4:F3:0F:C9:8F:D2:24:BC:75:D2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29AFC688AE39A8EB80B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d44781c-0f86-35ab-be70-f7bd0c23e6cb.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.26.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9a:fc:68:8a:e3:9a:8e:b8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=da190427-b763-4c16-a709-c599ee331ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:d5:2e:e4:18:9a:e0:d2:ea:e7:fc:f8:9f:
                    d7:15:99:0f:f1:ac:b6:51:c5:24:88:3f:d7:d5:9b:
                    52:55:f8:89:aa:9b:d0:ff:73:40:6f:e8:4d:90:4b:
                    77:f3:3e:f5:6a:21:d6:41:29:a3:a1:8d:20:c4:93:
                    2a:df:f2:22:ee:9b:97:be:bf:b7:7a:40:11:0b:6a:
                    fe:b6:14:3f:98:5d:e6:3d:9b:83:5f:86:c0:84:3b:
                    37:45:05:12:1e:65:09:0f:8f:c1:d4:fe:77:ee:76:
                    11:dd:bd:7c:7f:37:cf:04:29:27:f5:46:13:da:ea:
                    75:14:e2:ef:34:ea:07:80:7e:36:15:8f:87:71:5c:
                    ed:55:97:de:2f:b8:95:1d:44:ae:1e:6e:0d:ad:cb:
                    33:19:30:2e:bf:12:83:d5:54:4e:69:11:79:d8:60:
                    f7:68:88:af:8c:86:b6:8c:92:1c:51:12:90:d0:db:
                    5e:4f:82:5e:7b:3f:ef:45:47:3b:3d:9e:3e:0c:a5:
                    0d:9f:12:df:10:6a:2c:c1:7d:94:01:a3:9f:fd:5a:
                    b5:76:33:c9:41:e2:c3:4a:46:1b:77:74:d6:53:ac:
                    d3:38:9e:ce:6c:0c:58:6d:96:bf:0c:54:98:38:32:
                    c8:19:6a:6b:82:38:c6:b0:3f:18:67:e9:1b:6e:36:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:8F:09:B1:2C:3F:73:FF:3B:E4:F3:0F:C9:8F:D2:24:BC:75:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2d44781c-0f86-35ab-be70-f7bd0c23e6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:6d:50:49:90:3e:79:6a:ad:3d:52:a0:98:d8:e1:99:81:
         44:99:d9:d1:ae:e3:3a:33:9c:47:84:e8:93:97:3a:e5:9f:80:
         92:07:1a:e0:b1:83:e3:1d:b2:7f:81:97:06:19:83:ba:44:09:
         76:fd:85:0d:a7:1c:be:9a:1f:a3:3b:95:85:68:75:77:df:2e:
         02:cd:e3:8f:26:7e:42:c5:eb:88:44:8e:cc:0b:d4:88:2d:ba:
         12:74:ee:5b:65:28:90:3e:d8:05:da:04:41:d8:26:0c:1c:e8:
         4d:ea:64:33:e0:5b:a5:ea:77:1c:47:2f:47:e8:dd:a7:0e:31:
         a0:e2:41:de:f5:7e:2b:cb:87:c9:46:81:93:f8:27:a2:82:74:
         53:de:87:6e:d8:05:0e:a5:e0:50:86:19:67:7d:65:da:3b:be:
         f4:25:09:13:01:c6:19:54:53:2f:2e:0f:ab:c6:6e:ac:06:3f:
         b6:d8:1c:b0:a3:f7:42:78:fe:99:a1:72:aa:6d:60:d4:e3:67:
         d9:4c:3e:ba:72:d6:46:24:76:31:45:df:31:7b:8a:45:7c:55:
         4a:aa:24:46:69:5c:31:a6:db:be:ba:2e:d7:a7:3c:f4:ec:7e:
         6c:38:60:e8:20:7b:2b:48:f6:2c:61:59:35:85:15:b2:f9:18:
         bf:1f:04:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:58:48 2026 by rpki-client