Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5d3f1ef5-221b-320e-96d8-bccfb719b655.roa
File:                     5d3f1ef5-221b-320e-96d8-bccfb719b655.roa (raw, json)
Hash identifier:          bD7gEoOwyeJAoBBRJ3o+KyOnhbkQIKOzRZBu/VqwBVg=
Subject key identifier:   FE:93:3E:72:77:BF:94:53:FC:24:E4:FF:B0:55:73:BD:AF:23:A3:18
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234F2022C049A799A43E40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5d3f1ef5-221b-320e-96d8-bccfb719b655.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        152.46.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4f:20:22:c0:49:a7:99:a4:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=69868aa6-368b-47ea-b7f0-fe744fcbf133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:87:20:2e:e5:d9:6f:c4:c0:d1:11:4d:e2:
                    0e:14:31:b4:41:76:88:23:d9:36:a2:a0:9a:3e:69:
                    36:80:18:9a:b3:81:ee:c8:a8:22:f2:47:59:ef:37:
                    33:de:eb:32:ee:4e:4c:16:18:50:84:55:be:21:a7:
                    7a:96:d8:10:ce:89:58:f2:c2:63:70:0c:d7:cf:34:
                    18:a9:57:e2:5a:cd:09:34:fb:1b:cb:35:79:ff:62:
                    72:cd:b3:1f:2b:cb:ad:e2:2c:29:a2:ab:be:95:53:
                    68:c4:bb:76:9e:dd:c9:d8:53:f7:22:9c:dc:8f:b8:
                    16:b0:93:99:51:b7:3a:98:b9:75:a5:3c:89:13:e5:
                    90:8b:7e:5b:ce:62:78:2d:a1:6b:aa:61:eb:98:0f:
                    cf:76:31:5b:13:bd:ef:d4:e9:26:18:bc:01:35:6a:
                    45:1b:80:f0:ab:ce:91:a7:c1:4c:7a:71:6e:bc:31:
                    c9:f1:b9:73:d4:68:aa:ce:b8:8b:1b:60:b3:16:7a:
                    1e:d8:df:5b:e7:1e:53:51:58:fb:7a:a2:55:a2:d1:
                    ff:f6:71:97:ba:42:1f:6a:24:0a:63:f6:37:50:8c:
                    0c:14:31:8f:0d:cb:e5:87:9e:ef:4e:8d:6e:a2:49:
                    30:4d:eb:54:e7:6b:97:06:fc:ae:bf:78:4b:71:82:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:93:3E:72:77:BF:94:53:FC:24:E4:FF:B0:55:73:BD:AF:23:A3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5d3f1ef5-221b-320e-96d8-bccfb719b655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:22:91:fd:93:6f:3d:b5:ea:3d:70:2c:1c:69:7d:76:93:5b:
         8d:eb:b3:e3:6d:f5:84:d1:b6:b8:3d:7b:49:2f:10:0b:30:d6:
         cf:d2:97:e5:88:c3:ca:a0:e9:53:bb:7f:18:33:ca:35:a1:a7:
         e5:19:2b:61:ce:28:d0:88:3f:38:f1:e7:65:2c:d4:ce:1c:d8:
         79:48:81:3a:fa:3f:c9:5f:d9:22:19:1c:42:69:d8:c3:90:04:
         a7:ac:9d:ec:1e:c2:0b:6e:6b:fa:c7:ad:c8:45:7f:85:f3:69:
         10:70:e7:14:c1:0d:bf:35:c0:62:ed:54:dc:8c:ab:23:23:2d:
         76:e2:0d:02:e9:43:33:e0:6d:c4:a1:b2:34:db:80:fe:4e:64:
         98:dd:cd:9d:50:45:c2:a5:e3:40:87:95:34:e7:1a:57:07:e4:
         76:6e:00:73:74:43:52:02:cc:b9:f6:8b:94:57:ff:58:58:92:
         ba:75:a8:4d:14:8b:bc:28:7a:02:45:cc:e6:0c:c6:ef:71:85:
         0f:33:ee:de:57:9c:df:38:94:bf:83:73:de:f4:c7:56:19:68:
         58:94:cc:cd:b9:02:26:1b:62:e0:b7:28:b2:fb:73:d8:9c:7f:
         b3:7a:4f:21:04:b1:ad:08:d3:83:1e:3e:1f:e8:65:f8:3d:74:
         62:b7:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:44:26 2026 by rpki-client