Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31b6fcba-56bd-3a8c-8e25-66814070f57a.roa
File:                     31b6fcba-56bd-3a8c-8e25-66814070f57a.roa (raw, json)
Hash identifier:          O4dyPjCDg64fJx1xYteQXSgJReGQRBRXJJtpmL7Xy6g=
Subject key identifier:   40:78:FF:77:A0:9C:CA:C1:87:FF:F7:A8:CF:08:E2:A5:F4:4A:0E:4C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A166BF698B1BC8E8DE8D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31b6fcba-56bd-3a8c-8e25-66814070f57a.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:66:bf:69:8b:1b:c8:e8:de:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=127025b2-dc06-406e-9a6b-d13d73f3d85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:71:18:ad:cf:3b:14:f9:16:ae:b2:76:4e:08:
                    59:00:f0:b8:ce:5e:9f:6d:83:ff:dc:a0:98:03:c7:
                    58:56:d9:d3:48:e8:6a:83:9b:fa:ac:47:43:6d:8b:
                    c8:46:ba:b1:0d:65:79:61:7a:5d:8a:d7:7f:d4:d3:
                    5f:f1:59:92:48:f1:56:4b:e4:3f:94:c4:3e:1a:e9:
                    5a:3f:ec:b0:7e:a9:87:3f:2b:04:af:a3:94:e2:b8:
                    6f:5b:93:3f:6a:17:96:e2:e1:88:92:be:42:2c:a9:
                    1b:df:1a:76:32:1c:10:b2:95:4d:a4:0e:a3:ab:08:
                    2f:92:92:26:e1:d2:4b:e4:1e:b4:7d:25:7e:69:de:
                    c9:1b:0f:b0:43:2f:e9:2f:d0:ff:9a:6f:7a:66:4d:
                    5e:9a:e1:1d:37:3b:cb:2e:32:5e:1b:07:d5:73:b0:
                    5f:75:d9:ef:e4:63:d1:77:b8:d7:ca:b2:8f:44:0b:
                    08:6e:08:56:28:79:f1:5e:a7:36:5c:7b:47:1c:d1:
                    6e:13:36:95:fc:4c:e1:4d:c8:97:a0:81:fc:b5:2a:
                    48:90:cd:1b:ab:bd:cf:f8:7e:b1:03:26:f4:1f:51:
                    2b:ac:3e:d0:eb:07:79:72:28:03:93:70:c8:b3:f8:
                    29:93:f7:0d:01:dd:e6:94:54:11:ec:de:53:d8:ab:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:FF:77:A0:9C:CA:C1:87:FF:F7:A8:CF:08:E2:A5:F4:4A:0E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/31b6fcba-56bd-3a8c-8e25-66814070f57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:9a:fa:82:93:f4:5b:96:77:11:28:8e:37:5a:a0:d0:44:
         01:4d:49:e8:0d:ec:95:02:93:4e:f3:1e:72:03:fb:63:b8:9b:
         8b:98:39:1c:d2:a5:24:70:0b:bb:2d:d2:63:b6:62:01:de:fc:
         dd:87:61:df:7b:f9:87:6f:47:f7:9b:09:eb:79:1a:0c:9e:1f:
         96:aa:69:07:17:b3:19:e2:47:4a:96:9b:e7:b0:1d:4a:4a:78:
         d7:b7:43:e2:48:d8:d3:70:cf:c7:15:40:3b:02:c4:b3:7e:8a:
         b6:14:e5:01:d3:4e:a9:af:d1:ff:2d:48:4b:eb:67:5e:00:a7:
         e9:29:64:8f:16:87:5d:55:08:ae:97:c9:5d:e7:b0:c2:07:98:
         7f:ad:da:cf:6d:53:a9:3f:fc:e2:e9:dc:2e:e7:04:22:4c:6f:
         e3:db:6c:39:04:13:61:77:cd:f6:8b:34:a5:65:e3:1d:ae:92:
         87:5e:28:b5:b7:6b:23:3a:4b:bf:9e:64:22:5e:7a:89:7d:c2:
         49:3d:20:c7:30:cc:28:1d:1e:cd:6c:b5:3b:45:05:20:6a:2d:
         4b:0b:69:b8:4e:25:e4:61:cb:c2:aa:cf:91:5e:81:53:df:9e:
         bb:3c:81:c7:52:9a:5d:05:41:1d:ce:3d:ce:c6:39:28:6e:ae:
         9d:02:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:18 2025 by rpki-client