Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55aa10f8-fb83-3be3-bee1-6a0889be4ece.roa
File:                     55aa10f8-fb83-3be3-bee1-6a0889be4ece.roa (raw, json)
Hash identifier:          Bv9fEnSTsZrGw8Fez2CuHbMFEPDJ7BnRpxwfmPPKJxo=
Subject key identifier:   29:CB:9A:B6:82:C2:E6:ED:6A:DB:A7:00:AB:01:48:8D:46:F0:95:C4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D2979765AE1C08AF845828
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55aa10f8-fb83-3be3-bee1-6a0889be4ece.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.40.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:97:97:65:ae:1c:08:af:84:58:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=cef42485-c293-4132-af76-9762759dda10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:5f:18:ef:9b:d7:27:c2:8c:3c:05:75:f3:
                    5c:99:ed:a4:d8:04:ae:e6:2b:ec:78:27:8b:20:bc:
                    77:66:7f:6c:dc:19:95:a7:3d:f6:50:0b:a0:d7:d2:
                    63:84:0b:8d:a5:75:b3:0b:2f:fe:17:17:2c:b2:93:
                    c1:3e:34:c5:da:5c:68:14:30:ea:8d:bb:b5:58:36:
                    f6:ed:17:fb:f9:47:1c:e9:fb:47:a8:35:30:ab:5a:
                    8a:b9:18:07:ea:da:d8:ba:74:f9:44:9a:92:bc:ff:
                    6f:85:0f:01:41:01:8a:10:99:26:cd:03:4f:73:08:
                    da:db:00:5f:81:ba:ad:84:73:c9:be:ac:1b:0f:9b:
                    31:41:e0:df:49:ff:a9:3d:e9:3d:80:94:1a:fa:0d:
                    89:40:1b:c6:20:56:a9:be:62:f6:f1:51:9c:a4:f1:
                    05:ca:c4:29:a7:60:79:28:02:e7:a3:d0:79:ad:d6:
                    c6:3e:bb:ca:aa:46:74:64:29:c5:34:a8:11:ea:48:
                    41:87:ed:73:66:3e:e6:93:27:ef:a0:9c:e3:03:eb:
                    da:bc:7b:eb:d0:a0:df:0f:62:a1:9b:7d:24:8f:5a:
                    e0:55:0f:e0:7f:4d:0c:44:12:94:4b:2d:88:74:ef:
                    e1:60:ec:be:3c:89:4c:51:c0:a2:c6:19:c1:04:8a:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CB:9A:B6:82:C2:E6:ED:6A:DB:A7:00:AB:01:48:8D:46:F0:95:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/55aa10f8-fb83-3be3-bee1-6a0889be4ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.40.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:17:de:2f:53:b6:a2:74:54:d8:ba:27:e9:fe:7f:3a:42:8d:
         e7:b9:6e:25:4a:36:bb:76:2b:59:3e:ee:d1:17:85:0d:19:b0:
         f3:88:bd:1c:94:e3:e2:61:60:95:6c:8f:a9:7e:62:c7:7b:4b:
         a9:fa:ef:65:44:bc:b8:60:e8:f3:f7:9f:9b:00:e8:fe:39:e9:
         2f:40:69:34:40:7f:41:88:81:eb:dd:00:85:c6:70:f9:88:62:
         34:1d:dc:da:ca:cf:c7:ec:5a:7d:83:c8:e8:aa:b3:02:0d:3b:
         88:7e:ca:fd:ff:0c:9f:7a:70:7e:b4:eb:d0:d5:aa:22:6a:1e:
         fb:09:ca:ca:77:f7:ef:ed:e1:89:83:49:47:80:c5:bb:0a:e6:
         d8:b4:f5:8c:16:4d:b5:6c:7e:5d:bc:3f:27:a2:a6:97:b8:af:
         bd:bb:7f:64:98:79:3e:7a:42:af:46:2a:d4:49:9b:3f:70:3b:
         e9:83:cb:7d:a1:08:6f:36:eb:bb:d7:46:16:dd:9c:e0:2d:e0:
         9d:37:5f:6b:0a:58:af:1f:a4:a9:89:91:22:ce:df:15:8d:42:
         cf:46:9d:21:35:e2:62:90:9e:f7:71:e4:25:e4:61:f6:6e:d2:
         ee:9d:ae:bb:0b:b6:d6:78:ac:96:e1:fd:66:ee:94:8b:8f:6e:
         27:d4:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:01:51 2026 by rpki-client