Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66f2d5e3-4f74-3c24-99c1-70ca28f7fcbd.roa
File:                     66f2d5e3-4f74-3c24-99c1-70ca28f7fcbd.roa (raw, json)
Hash identifier:          ig+T1UHVosjlmoZy18gmlIkrO8GXKQQbIHVmzPFnsFw=
Subject key identifier:   F9:24:BA:4E:F7:39:A5:56:76:84:D5:1B:80:9E:22:88:26:29:C4:B9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A166467FB35CFAE387D500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66f2d5e3-4f74-3c24-99c1-70ca28f7fcbd.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     22862
IP address blocks:        152.26.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:66:46:7f:b3:5c:fa:e3:87:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=98a1dcad-6078-4242-b97e-a9fe6892ecd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:ad:0f:9a:c0:44:8d:c6:db:71:40:99:a3:
                    02:8a:5a:8e:f9:66:b7:e7:eb:bb:5e:52:cf:6f:21:
                    ce:aa:70:01:4f:2d:d4:ac:32:a9:5c:f9:9a:a2:1f:
                    6f:d7:fa:b7:09:16:ff:ea:13:13:dc:7d:d0:13:1f:
                    28:93:29:8d:21:41:f1:f0:11:6c:c4:c8:03:06:fe:
                    e8:85:9a:bf:37:9e:ff:19:62:09:64:63:45:11:9c:
                    8c:e2:7f:cc:94:e2:ee:cb:bb:6c:06:a1:86:ef:9a:
                    98:6d:9d:6e:58:22:65:0f:ff:0d:9c:73:af:2d:b7:
                    04:38:cc:d5:56:d1:67:c4:ba:cd:4d:f2:04:70:c0:
                    43:4a:80:f0:ce:8b:3c:ff:70:d1:c3:35:c4:be:40:
                    f8:5e:33:79:4e:4c:88:00:3b:36:13:90:a0:59:e1:
                    d1:50:30:0a:74:7f:a7:6f:22:92:f1:09:32:04:95:
                    e4:78:70:08:6a:b7:77:ae:52:87:c6:58:bb:a3:c7:
                    84:3d:57:7a:71:23:90:60:3e:20:35:25:be:40:0a:
                    f6:94:7f:3f:df:e9:3e:9e:bc:67:b2:99:20:b6:d9:
                    17:3d:78:76:70:3b:d8:61:9b:c0:61:d5:25:a8:13:
                    d5:33:ef:b2:72:12:06:39:4c:63:a6:a2:b1:eb:50:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:24:BA:4E:F7:39:A5:56:76:84:D5:1B:80:9E:22:88:26:29:C4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/66f2d5e3-4f74-3c24-99c1-70ca28f7fcbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:69:73:55:c7:50:fa:e4:66:b9:57:0f:c3:a6:64:00:0b:
         04:8d:11:ac:fe:c3:8d:ae:9c:7b:ee:f4:10:35:1b:3d:43:bc:
         18:9f:1b:b8:dd:61:af:2d:25:21:44:09:55:d7:24:21:52:84:
         93:2d:24:30:6f:cb:c3:d9:53:7e:87:47:27:27:7f:dd:bc:c1:
         a4:db:dc:11:2c:1e:a0:4a:c6:14:0a:41:21:1c:33:66:dd:04:
         e9:05:45:90:fd:6f:79:56:b4:3f:78:ca:8d:7a:1a:bd:8c:31:
         db:a7:74:5e:e5:9c:04:90:5b:e7:a8:bb:48:4b:9e:17:cb:a9:
         f7:2a:c2:3c:0e:12:87:f3:42:f7:7c:e1:61:39:3a:2d:6b:7a:
         4e:26:e2:82:85:05:7c:4a:25:e9:c9:b5:33:c0:02:c0:48:d7:
         bc:77:1e:03:6f:99:8e:25:db:da:45:d6:57:6b:16:c1:45:c8:
         8b:e5:6e:16:b2:f9:55:b4:d5:25:4b:b5:49:07:6d:57:04:2d:
         a6:0a:57:a0:4b:13:10:58:17:5a:69:0d:99:bc:ab:97:f4:c1:
         dd:c1:33:29:6b:79:c0:d9:b7:11:24:ed:8b:11:18:8c:ce:01:
         94:fc:a3:d2:80:51:29:61:3e:af:b8:44:e9:d9:20:41:1f:43:
         11:a0:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:31:02 2025 by rpki-client