Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53a4f106-c80f-3ac2-bcd1-34df8f980c1e.roa
File:                     53a4f106-c80f-3ac2-bcd1-34df8f980c1e.roa (raw, json)
Hash identifier:          9OLHBzBsAhADGWFPLiYJlNdrAI7dXx+3qw3uWCO51FY=
Subject key identifier:   39:57:88:E0:31:E4:38:07:79:82:61:67:F0:B2:98:9A:06:E2:41:ED
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234D1C11EBD7A59A498D00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53a4f106-c80f-3ac2-bcd1-34df8f980c1e.roa
Signing time:             Fri 31 Jul 2026 18:26:06 +0000
ROA not before:           Fri 31 Jul 2026 18:26:06 +0000
ROA not after:            Thu 29 Oct 2026 18:26:06 +0000
asID:                     53785
IP address blocks:        152.40.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4d:1c:11:eb:d7:a5:9a:49:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:06 2026 GMT
            Not After : Oct 29 18:26:06 2026 GMT
        Subject: CN=80b04fad-3caf-4781-ae48-bbcea61888cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:13:cb:9b:0d:af:9d:44:fd:bb:53:b0:db:
                    d7:3a:cd:a1:7d:1f:b7:5b:de:08:85:4b:5f:d1:7c:
                    c0:0d:28:5e:43:27:a6:4b:aa:23:69:c6:dc:e5:43:
                    8a:34:0d:bb:b1:dc:25:c8:fc:b7:d7:92:15:35:36:
                    a0:c4:e7:0c:8f:5a:5b:76:cc:c3:17:57:37:3e:2d:
                    a4:fe:d7:20:7a:11:e2:0c:cb:c1:37:0a:37:5a:6b:
                    0f:cc:68:5a:e8:ed:11:9e:22:d1:35:04:c0:b7:d0:
                    f3:44:b5:e8:58:aa:40:77:5a:a6:d3:7f:1e:69:5c:
                    1b:4c:9d:ad:2c:77:f2:3c:f6:00:93:2b:a9:cc:f9:
                    38:3f:4e:8e:e3:e3:16:62:5f:c2:86:74:75:72:ce:
                    05:23:8a:55:e3:bb:71:96:66:94:ff:bf:73:11:3b:
                    f4:b4:c2:0b:41:43:17:07:32:a6:3d:08:55:43:20:
                    59:91:f4:10:23:d6:a5:71:7a:ad:e6:68:87:fc:4a:
                    20:ff:b6:ce:df:a6:c7:40:ca:f9:a8:11:15:bc:93:
                    59:6d:1d:25:e5:f8:62:23:ce:89:17:f7:db:cd:38:
                    18:e6:e5:29:b4:4a:83:09:b7:08:e3:2e:03:73:d6:
                    01:25:27:55:5e:ef:da:30:8b:0f:53:40:7e:5c:53:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:88:E0:31:E4:38:07:79:82:61:67:F0:B2:98:9A:06:E2:41:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53a4f106-c80f-3ac2-bcd1-34df8f980c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.40.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:76:05:a8:c0:6f:8c:ce:58:45:07:a4:ff:23:ce:fc:dc:c6:
         ad:7f:94:76:37:76:42:2f:38:46:3c:59:00:12:49:0a:1a:17:
         33:10:f3:3a:30:02:21:84:c6:47:d3:a5:97:4c:4c:56:66:af:
         c2:6b:9f:20:85:95:e3:8e:02:63:39:a3:00:d9:a7:bd:ac:f1:
         c2:7d:9b:6e:92:87:cf:1d:8a:86:a6:3a:51:20:03:8a:4d:bc:
         fd:43:51:57:3c:2e:4c:3e:b4:0c:b5:e3:d7:81:15:c8:cb:26:
         cd:7e:c5:a7:ca:ac:b2:95:8f:db:66:12:f9:88:0f:c8:28:18:
         d3:32:db:a9:99:5d:0e:46:bd:18:db:c7:77:77:8f:d2:9b:88:
         00:76:15:53:00:1f:74:8c:46:65:dc:af:68:1d:0f:d6:87:a7:
         3a:2a:f3:b1:55:2f:a2:f0:6d:dd:54:83:90:56:65:c2:3a:de:
         25:b6:36:eb:50:c9:ce:59:87:27:a0:38:ef:f2:f9:0a:d5:7b:
         e7:a9:8b:62:85:65:b5:e1:f6:6d:59:2d:36:ef:5e:b9:e2:1c:
         da:4f:81:66:93:fa:fa:b2:a6:30:09:44:21:1c:d3:0b:45:38:
         0f:16:d1:ee:dd:b7:44:00:fa:f6:55:20:dc:ac:c3:60:8a:bc:
         c6:b8:50:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:19:58 2026 by rpki-client