Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51f8e735-0f5c-36ff-a74b-834b1d2cec09.roa
File:                     51f8e735-0f5c-36ff-a74b-834b1d2cec09.roa (raw, json)
Hash identifier:          iT7VB5t2yBK4d2/Oi0MjUKhScAi1pXA/KLMBq/9fPW0=
Subject key identifier:   19:F4:7C:3B:EF:98:19:57:D1:80:90:0F:8E:56:1F:F5:31:8B:4C:63
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1646E5F97224B15BF9E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51f8e735-0f5c-36ff-a74b-834b1d2cec09.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:64:6e:5f:97:22:4b:15:bf:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=ce4188f3-6345-4bcd-bd9e-497befa7afbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:24:66:87:6e:14:c9:ec:fe:97:17:52:3a:
                    9d:df:a8:f6:c8:ef:30:a7:46:eb:5b:03:47:be:5e:
                    2c:12:bc:8c:9f:3e:a2:e2:b4:ff:4f:ee:45:7f:68:
                    70:0c:d9:92:19:bf:64:6b:59:8d:26:f6:d9:e1:12:
                    0b:76:13:e2:a0:bc:41:cd:a2:3a:06:ef:ab:19:f4:
                    d3:4b:c2:75:78:90:a0:d5:5a:bc:7a:82:20:86:a6:
                    ae:07:4c:29:ac:0d:ba:50:3b:92:79:88:04:82:18:
                    92:61:c2:d7:80:f5:30:81:4e:3f:fc:f3:a2:11:1e:
                    54:2d:ed:71:38:22:0a:d1:3c:61:91:43:ad:ba:a6:
                    50:f6:29:d3:53:b5:81:40:4a:96:c7:3b:7f:bf:54:
                    e6:5d:f6:d2:02:87:0c:0c:0e:77:a9:35:bd:99:70:
                    30:27:3c:de:79:1d:30:fb:72:e1:a5:44:6c:de:80:
                    eb:dd:31:cc:3f:ed:a2:14:34:5e:15:4b:5c:53:19:
                    d3:fc:84:b4:90:b0:bf:e2:6a:a2:ab:bf:dd:7d:69:
                    e3:c3:cb:2a:9e:c8:73:78:57:19:a0:27:93:76:ea:
                    f2:9c:71:4c:d4:42:dd:21:0e:50:4e:f8:5e:e5:6a:
                    50:e4:c4:6c:d9:54:b9:70:b6:9b:00:b1:51:b3:36:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:7C:3B:EF:98:19:57:D1:80:90:0F:8E:56:1F:F5:31:8B:4C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/51f8e735-0f5c-36ff-a74b-834b1d2cec09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:11:8c:08:c7:0a:c3:2d:50:5a:62:6d:22:1b:65:a2:04:
         63:ea:1c:9b:11:a9:e9:88:27:fb:54:3d:c0:7a:f8:d6:83:e8:
         66:21:fb:14:76:c1:9b:b5:5c:a8:13:0d:10:3b:f1:56:0a:c3:
         6a:94:37:1c:49:ed:db:3e:8f:15:e2:5d:24:49:70:6c:9e:43:
         2f:3d:04:f6:0f:a3:55:fc:7b:cb:c9:fd:f6:de:43:51:7a:06:
         08:1a:95:48:95:90:0d:3c:29:f3:a9:88:aa:44:0e:31:12:eb:
         c8:bf:6d:95:c6:56:21:b1:ea:b6:52:18:73:0c:44:45:c3:d0:
         41:05:33:2d:49:f9:51:75:0f:82:5a:4b:14:18:ba:30:f6:59:
         1f:58:33:e7:2b:7a:06:54:86:b6:e5:84:71:97:35:e4:7d:69:
         33:f9:dc:73:2e:8a:dd:6f:fb:9d:76:8b:09:36:9d:7c:9a:01:
         64:f2:f1:12:8d:5c:48:64:9c:a2:f7:41:5b:9c:62:47:51:74:
         6e:35:2d:64:80:17:13:8f:c3:e7:58:4d:7e:75:27:3b:0b:71:
         bd:ac:6b:52:5f:60:c1:db:b9:27:6a:d5:e8:d0:34:f1:88:da:
         a0:cd:01:80:fc:44:aa:dd:51:39:e6:6d:e9:b6:a1:2a:46:51:
         39:fd:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:05:58 2025 by rpki-client