Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f9035fe-b09c-3e7c-8849-07a2e3d80853.roa
File:                     4f9035fe-b09c-3e7c-8849-07a2e3d80853.roa (raw, json)
Hash identifier:          WyQMG27drhtY64j8zrB1nYKGrCO/+IYH3AEneCKAWgk=
Subject key identifier:   EA:58:CC:4B:6F:22:73:C8:C3:F7:AC:F4:B0:20:4A:24:41:29:74:36
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29AE1510D79CADBC28280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f9035fe-b09c-3e7c-8849-07a2e3d80853.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     15153
IP address blocks:        152.26.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9a:e1:51:0d:79:ca:db:c2:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=cd5f4b7f-b2d6-4a5b-905f-944fa1f63513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:97:9f:ba:b8:70:d7:82:06:38:86:28:1c:
                    89:08:a3:2a:a0:3b:a8:c4:f0:3a:59:46:81:eb:a7:
                    b7:cc:89:b3:52:98:9c:01:15:06:36:a1:c9:75:ff:
                    36:cc:ef:c2:6e:1c:6c:0e:13:cb:11:32:1d:3d:98:
                    ae:15:04:a8:21:f5:5c:e6:8f:93:1b:c3:90:16:d4:
                    94:5f:93:05:d3:ec:5d:5e:14:55:70:fb:2d:bd:fb:
                    ab:47:ea:f1:38:70:51:ad:81:8a:55:9c:05:15:50:
                    74:8d:40:12:f8:e9:68:7e:9e:95:7a:eb:04:8e:d5:
                    51:04:f3:51:a5:f5:c2:9f:05:9f:1d:55:ae:53:93:
                    9f:90:48:ad:86:a9:78:60:ba:16:c9:2b:5c:11:12:
                    a2:34:12:50:c0:38:75:e9:60:ad:0f:66:0e:b3:52:
                    ee:d3:4f:c2:34:fe:8a:0c:48:82:57:43:b2:ac:d7:
                    23:82:82:bf:32:02:04:12:9d:c7:f2:c5:e5:cd:96:
                    fb:55:3d:32:21:3b:31:3c:b9:ac:a5:1c:3f:b3:6d:
                    e2:01:1a:4f:f0:31:f6:12:52:08:f1:ca:77:e3:a9:
                    72:ae:37:0d:0b:3c:a4:b0:38:ee:27:09:c4:bd:4e:
                    c0:70:95:1c:be:55:22:6a:8a:af:42:e1:03:ed:66:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:CC:4B:6F:22:73:C8:C3:F7:AC:F4:B0:20:4A:24:41:29:74:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f9035fe-b09c-3e7c-8849-07a2e3d80853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:1f:1c:71:3a:ec:2e:b9:81:07:84:d9:5d:32:58:e6:72:
         42:18:de:af:15:c6:18:83:a1:de:10:3f:52:40:7b:d0:01:5b:
         3c:88:ff:f1:38:6e:64:b0:5f:5f:97:c6:0c:d1:61:03:f5:eb:
         a1:fb:19:4c:c3:09:df:50:48:42:41:77:c3:fb:93:5c:ae:52:
         fd:79:4c:b5:c6:f9:fa:22:d6:bf:88:84:97:41:3e:be:ff:ba:
         94:a4:e5:0f:23:6b:7a:1c:d3:4e:01:1b:5e:27:c3:46:dd:e9:
         94:4c:15:dd:76:57:b4:52:81:5a:a8:9a:97:f8:5a:97:f8:d2:
         7a:27:a5:d0:2d:14:12:c4:8d:3e:b6:00:5f:ca:6f:08:51:a1:
         16:a0:01:74:bc:16:0c:41:13:ca:b1:a3:cf:f6:cf:67:8a:ef:
         81:25:db:f8:2f:93:e5:4a:b4:b5:af:07:48:cc:87:86:1a:a8:
         58:24:49:39:a9:3d:36:2f:d9:25:02:b7:c2:34:eb:e9:4f:b2:
         96:16:b1:7c:32:a9:c7:12:89:5c:5b:8b:9f:a2:0a:8b:d8:07:
         25:a5:6d:f0:74:3a:a0:c4:1d:d1:53:48:07:41:13:53:45:5b:
         29:96:f7:35:30:7e:03:b4:a6:32:ff:2c:08:da:7e:2b:28:ac:
         74:ac:a2:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0prhUQ15ytvCgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
Y2Q1ZjRiN2YtYjJkNi00YTViLTkwNWYtOTQ0ZmExZjYzNTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoSXn7q4cNeCBjiGKByJCKMqoDuoxPA6WUaB
66e3zImzUpicARUGNqHJdf82zO/CbhxsDhPLETIdPZiuFQSoIfVc5o+TG8OQFtSU
X5MF0+xdXhRVcPstvfurR+rxOHBRrYGKVZwFFVB0jUAS+Olofp6VeusEjtVRBPNR
pfXCnwWfHVWuU5OfkEithql4YLoWyStcERKiNBJQwDh16WCtD2YOs1Lu00/CNP6K
DEiCV0OyrNcjgoK/MgIEEp3H8sXlzZb7VT0yITsxPLmspRw/s23iARpP8DH2ElII
8cp346lyrjcNCzyksDjuJwnEvU7AcJUcvlUiaoqvQuED7WZASQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOpYzEtvInPIw/es9LAgSiRBKXQ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGY5MDM1ZmUtYjA5Yy0z
ZTdjLTg4NDktMDdhMmUzZDgwODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBo4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHyHxxxOuwuuYEHhNldMljmckIY3q8VxhiDod4QP1JAe9ABWzyI//E4
bmSwX1+XxgzRYQP166H7GUzDCd9QSEJBd8P7k1yuUv15TLXG+foi1r+IhJdBPr7/
upSk5Q8ja3oc004BG14nw0bd6ZRMFd12V7RSgVqompf4Wpf40nonpdAtFBLEjT62
AF/KbwhRoRagAXS8FgxBE8qxo8/2z2eK74El2/gvk+VKtLWvB0jMh4YaqFgkSTmp
PTYv2SUCt8I06+lPspYWsXwyqccSiVxbi5+iCovYByWlbfB0OqDEHdFTSAdBE1NF
WymW9zUwfgO0pjL/LAjafisorHSsohE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:20 2026 by rpki-client