Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71a9607d-8bcb-32e1-9854-6545a0831aa7.roa
File:                     71a9607d-8bcb-32e1-9854-6545a0831aa7.roa (raw, json)
Hash identifier:          10Y0fRMk59TsTEVdiScMDM3XPvCIQetifa88+pTQtj8=
Subject key identifier:   F9:75:A9:07:3B:0D:97:4C:48:A2:8B:DE:4E:63:F6:11:24:4C:93:AC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234993DE6F3DA42AAAD500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71a9607d-8bcb-32e1-9854-6545a0831aa7.roa
Signing time:             Fri 31 Jul 2026 18:26:04 +0000
ROA not before:           Fri 31 Jul 2026 18:26:04 +0000
ROA not after:            Thu 29 Oct 2026 18:26:04 +0000
asID:                     81
IP address blocks:        152.54.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:49:93:de:6f:3d:a4:2a:aa:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:04 2026 GMT
            Not After : Oct 29 18:26:04 2026 GMT
        Subject: CN=a50a518c-a7d4-4bfa-a0ea-56aae7256a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:3b:f5:32:12:56:4d:8c:d9:4e:65:7a:a0:
                    f8:36:ed:d1:5f:6c:8b:4a:36:74:0e:f2:9e:5e:8e:
                    4d:3a:c8:f8:e2:47:f3:1b:ad:d9:be:41:b4:31:a7:
                    28:77:05:ae:d7:7b:74:1b:0c:6c:c0:e6:b1:b0:7d:
                    db:32:f3:88:18:7d:d4:64:a0:b6:fd:46:b5:0f:82:
                    16:f5:77:42:a7:f8:09:fb:65:02:d9:50:bc:f9:7e:
                    88:be:8e:fa:77:c2:17:d6:d0:b5:cb:cf:1b:f5:47:
                    69:c3:b1:4e:2f:97:1e:98:43:82:7b:98:d3:5c:d2:
                    27:ee:b0:92:ca:47:64:5a:59:78:1f:3f:d0:6c:77:
                    72:5d:c9:7f:c7:27:9d:c5:14:c7:f7:8d:e2:1d:5e:
                    b0:9f:1f:95:4f:2d:95:11:5e:65:21:77:55:ec:db:
                    d3:be:5e:db:7b:bf:54:03:42:96:8e:25:33:63:40:
                    69:4a:7c:07:11:00:81:66:34:d3:34:87:f1:03:c2:
                    a6:77:17:e8:81:3b:95:8f:22:8c:16:71:c5:05:7a:
                    53:d1:78:88:8e:76:6b:4a:ca:5b:9b:6e:44:ec:93:
                    38:8f:2d:2a:ff:3c:f2:e4:42:72:85:1e:18:ec:69:
                    8c:92:33:12:33:50:da:3d:b4:d1:f6:1c:af:fa:1e:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:A9:07:3B:0D:97:4C:48:A2:8B:DE:4E:63:F6:11:24:4C:93:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/71a9607d-8bcb-32e1-9854-6545a0831aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:c1:6a:71:61:0a:4e:12:81:6d:7a:e6:ff:cc:b2:ad:a7:
         2d:dd:d5:51:3c:7c:c4:0d:34:9d:68:2e:5e:24:d3:8c:22:d3:
         c1:50:ec:b6:f8:8e:50:d8:13:da:34:46:62:87:36:52:2c:cf:
         c6:8b:c4:23:c5:e0:d1:0a:c1:6c:89:b9:ab:03:a6:81:3c:ed:
         33:38:9d:49:57:48:ab:f0:fc:c3:c2:a3:a6:df:ee:d7:14:27:
         76:93:75:44:ad:14:40:b8:a3:47:c4:6b:15:83:95:a0:4a:05:
         3e:9b:1a:8c:2d:53:c5:ce:0e:bd:bb:5d:0e:0b:48:d8:83:ec:
         6a:ae:21:0f:dc:d7:fb:cc:a0:b7:58:ab:80:f7:01:1c:28:f6:
         e2:3f:84:7e:31:20:07:1e:8c:cd:19:bf:2b:87:9c:d6:7d:bf:
         8e:e2:96:ea:cd:40:ce:e0:f4:c6:9a:f0:4c:d4:e2:17:b0:67:
         38:b5:90:8e:78:db:aa:3d:c1:33:e3:4e:98:3e:da:02:e2:63:
         df:d3:19:5c:b9:48:1f:cb:05:f6:d0:de:fb:60:5a:84:f4:6c:
         8a:2c:d3:b3:b5:9e:a0:49:c9:4b:2d:5d:7f:5c:d1:2a:5d:b5:
         cc:2a:a1:4a:66:a8:9b:a8:a2:15:fd:44:bd:ad:50:f8:9e:93:
         6a:97:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:01:24 2026 by rpki-client