Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/324a0985-010d-3509-a10a-848386b5f547.roa
File:                     324a0985-010d-3509-a10a-848386b5f547.roa (raw, json)
Hash identifier:          I4UqcaagqEE7qJRpGFCIugk0H5zhHKiuOeG6ig8viA8=
Subject key identifier:   10:AC:48:20:36:42:B3:A1:C4:A4:06:3C:89:6A:BA:8D:9A:A6:27:2D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29C38718027FBAE9D5400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/324a0985-010d-3509-a10a-848386b5f547.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.46.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9c:38:71:80:27:fb:ae:9d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=fde86248-7533-4041-b997-a8605182b29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:e5:a8:79:83:f4:3b:39:32:5c:47:28:c9:
                    27:67:81:c2:94:fb:fd:6e:98:6d:60:b0:62:0f:28:
                    44:fb:41:2b:eb:a5:67:2b:86:69:ef:c8:aa:b5:2f:
                    2f:44:92:a1:f6:cb:ea:78:c2:91:5e:77:13:b3:06:
                    28:7f:da:b2:d7:58:82:d7:c2:d7:be:c4:e8:94:04:
                    b2:4e:7f:13:15:94:b4:cb:04:b7:23:09:46:6e:67:
                    ce:69:f7:48:56:4a:8f:5d:43:cd:52:b1:85:d6:7d:
                    5c:f7:8e:10:75:99:ff:75:3f:65:1e:a8:6e:a3:0d:
                    73:11:df:82:f0:c3:e6:26:c6:3d:47:fd:5f:8c:4f:
                    f6:2e:0b:96:95:91:9b:8e:02:a3:aa:19:21:e5:ea:
                    1d:df:ce:6d:0b:dd:df:75:4d:2d:18:f9:51:7d:43:
                    7b:47:0d:a1:b6:3c:24:6c:cf:44:b2:d3:6a:e0:f9:
                    59:89:5a:e8:c6:13:82:87:1e:ac:3d:90:56:8a:fe:
                    69:47:ff:ef:8c:09:5a:c9:00:c5:c1:9c:59:37:be:
                    86:f7:8e:67:85:04:d4:35:2f:fc:7d:a5:14:ff:b8:
                    f6:fb:14:16:45:6a:24:8e:76:71:d8:be:93:a3:90:
                    1d:b3:41:3a:ad:6f:da:c7:74:6a:98:41:6a:2a:07:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:48:20:36:42:B3:A1:C4:A4:06:3C:89:6A:BA:8D:9A:A6:27:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/324a0985-010d-3509-a10a-848386b5f547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:97:72:db:c9:0a:99:d0:64:d7:92:eb:07:41:fc:3b:10:af:
         6e:8b:92:0d:94:09:7e:63:27:d8:f6:c3:15:e7:05:b0:51:4e:
         2e:65:ed:00:b5:d3:1a:2d:77:c9:79:4c:f8:a7:5c:21:c8:20:
         b8:13:8f:e6:34:6b:21:b4:2a:2b:d5:5c:b6:e4:84:39:33:f6:
         ac:dd:7e:85:34:8a:a0:a5:86:ed:8e:d4:9c:49:6a:1e:01:0d:
         2b:46:85:f1:a9:b1:f0:dc:81:d4:8c:1a:82:c0:bc:b0:08:6f:
         3e:16:67:9e:ed:e9:f0:30:52:75:56:9a:b4:a4:50:bd:fe:6b:
         ea:e6:d9:96:6b:19:23:91:18:10:78:90:42:f0:a7:a2:6a:73:
         34:47:57:0a:68:cf:18:79:02:ba:34:06:ff:c7:08:7a:33:16:
         7a:18:36:1b:5c:7b:34:85:bf:e2:36:e4:22:8b:08:c9:a1:b4:
         12:1a:9a:c5:d9:17:ca:69:4d:32:32:1c:ba:7b:1d:c2:de:69:
         da:80:4f:7f:c4:2d:52:9b:e1:29:67:10:9a:f1:7a:4e:be:22:
         52:0d:d3:8b:a7:75:1b:77:88:a2:f1:e5:cc:de:ff:52:a2:6f:
         51:19:b4:75:da:c7:91:60:9e:25:68:c9:51:36:3a:39:c1:36:
         21:17:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:22:41 2026 by rpki-client