Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30a21ac3-78a8-3e5e-b9e2-7a3f12eeedae.roa
File:                     30a21ac3-78a8-3e5e-b9e2-7a3f12eeedae.roa (raw, json)
Hash identifier:          n/q/hydjIaATCDZq8Z6B7ChvORGxA8ntPZHo3UqRIVE=
Subject key identifier:   C8:45:75:0B:D5:F2:CB:12:F9:E6:E8:80:34:40:5C:1F:A8:EB:66:91
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29A44160A340A4EB56480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30a21ac3-78a8-3e5e-b9e2-7a3f12eeedae.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.26.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9a:44:16:0a:34:0a:4e:b5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=0da205ea-ebb9-400f-80cb-8c472708c25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:30:70:8c:e5:0b:dd:b7:bb:e6:3b:5e:06:
                    c8:40:a1:e3:ec:34:0b:28:a9:f9:f3:fe:63:42:48:
                    85:27:15:54:1a:fa:a5:79:98:bc:b7:43:73:53:9b:
                    b4:23:2f:e2:67:bb:93:9f:99:36:34:a5:34:70:8e:
                    fc:91:da:2e:9e:b8:b5:aa:3b:73:80:30:1d:2b:7b:
                    dc:a7:11:29:8f:da:f4:35:89:fe:4d:9b:b4:fa:5a:
                    c1:4d:f5:85:61:95:ad:89:61:d6:55:ef:41:94:97:
                    77:c3:85:a8:08:2b:4d:ad:0b:58:3a:08:01:2f:77:
                    23:1e:2e:66:c6:2b:7d:1f:7b:f8:2f:5d:73:8f:d5:
                    29:35:b0:62:69:ea:11:2b:65:8a:27:40:fa:31:29:
                    e5:d1:91:22:47:d0:83:66:0e:05:8b:d5:78:e3:35:
                    ac:eb:24:31:8b:10:1f:1f:1c:2e:6e:ef:65:5a:d6:
                    79:b3:02:60:cd:45:5a:4c:e5:a1:d8:7f:98:5d:f8:
                    c3:1e:35:50:21:d8:19:fa:bf:a9:41:7f:10:37:1a:
                    9e:c2:0e:45:d9:08:69:aa:8f:6e:33:47:fe:24:8f:
                    9b:a0:51:eb:92:72:95:a4:12:93:d7:4d:46:46:ac:
                    fe:bb:bc:e5:a7:31:1d:ca:31:69:82:25:f0:84:80:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:75:0B:D5:F2:CB:12:F9:E6:E8:80:34:40:5C:1F:A8:EB:66:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30a21ac3-78a8-3e5e-b9e2-7a3f12eeedae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:a0:02:eb:d1:e2:4e:a5:bd:58:00:b2:ae:ba:22:fd:b1:
         24:52:fb:54:62:44:5c:29:62:53:15:22:37:b5:5e:31:e3:27:
         d4:f3:43:d7:52:cb:1f:cb:a2:95:bc:49:a7:fb:32:a5:36:09:
         b0:c3:b2:e4:28:19:f9:29:1f:a3:4c:c1:44:a3:98:b6:83:1c:
         52:4a:93:3e:4a:9a:e3:66:9d:81:1e:9b:3b:9c:49:55:db:db:
         9b:35:87:31:7f:cc:4d:37:bb:90:30:23:dc:77:ea:8c:c2:eb:
         f3:05:70:73:60:a1:d0:ff:af:b7:51:c2:40:bd:41:26:ed:17:
         1d:99:35:d0:7f:1c:c8:5b:7f:c8:30:ed:2d:33:3c:8e:57:2e:
         c5:ce:d2:97:5d:d5:0c:b0:42:51:a0:44:e3:f9:4f:bb:ec:df:
         3e:37:3d:c3:bf:0d:73:55:41:23:1f:32:1c:6b:5b:af:86:ff:
         19:06:bb:f4:45:68:44:4b:20:b9:54:c4:72:65:de:26:3c:56:
         ac:3f:e0:b6:33:06:c3:c8:1d:b6:a2:de:e0:c7:7c:59:33:a3:
         52:8d:7b:ab:1e:41:bb:df:2e:64:84:24:21:6b:74:21:7e:df:
         65:f7:b3:02:26:d9:6e:99:94:04:1d:77:90:7f:7e:11:95:3e:
         47:d1:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:34:49 2026 by rpki-client