Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/750d170b-e681-305c-a089-521d57c9bda9.roa
File:                     750d170b-e681-305c-a089-521d57c9bda9.roa (raw, json)
Hash identifier:          E/ULC+9H+npRYtQH0pIa4b536TISC1ErGVd8L+4drwM=
Subject key identifier:   D4:48:D9:A7:2C:86:B9:BC:8F:BB:70:CA:F4:4E:1E:F7:1B:13:66:55
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A166A9BFBA244D5D2A1000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/750d170b-e681-305c-a089-521d57c9bda9.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:66:a9:bf:ba:24:4d:5d:2a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=bef2dc09-c627-4fbc-93f6-af7a464588cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:c1:5d:f7:0b:96:c8:91:82:c0:e7:3c:b8:
                    c9:95:29:22:9e:ac:46:a8:8d:56:2e:3c:9f:d7:af:
                    43:b3:75:07:2f:f6:fd:eb:72:84:15:85:49:34:c1:
                    ce:bd:bd:2b:c1:37:1a:a5:2e:5d:c3:0f:8d:09:5c:
                    68:3b:3f:08:16:b0:e1:e4:1a:d5:e9:ab:d6:9f:20:
                    eb:f8:0c:39:a6:2d:40:d6:6d:26:f5:3f:4e:f4:7b:
                    1a:19:a8:8a:84:00:c9:f8:0a:21:ee:77:54:aa:f1:
                    8d:0c:49:7a:19:15:56:7d:c8:ac:26:83:22:8c:3f:
                    9c:ce:f1:8f:3f:dc:cb:29:3b:b7:df:8d:7c:5b:62:
                    90:9e:da:0a:0f:ad:9c:3f:de:28:03:e6:ff:d0:d9:
                    7a:1a:8d:a2:92:5d:43:1d:0a:ad:e8:f5:74:82:65:
                    72:a0:8e:9e:f2:bc:81:4b:9f:19:7c:7c:9b:96:5d:
                    2a:6a:d6:0c:0a:e8:d8:42:05:3f:54:5a:4e:e1:e0:
                    b1:c3:7d:28:60:d9:b3:66:b2:61:8d:f7:c2:43:d4:
                    ce:ac:5e:cc:f5:d5:cd:fe:3a:98:ee:25:40:ef:48:
                    6a:68:00:7e:2f:c2:86:dd:66:f4:c2:79:cf:a6:d2:
                    c9:3f:70:b3:c8:0f:3d:dd:fc:50:dc:46:b8:d0:6c:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:48:D9:A7:2C:86:B9:BC:8F:BB:70:CA:F4:4E:1E:F7:1B:13:66:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/750d170b-e681-305c-a089-521d57c9bda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:86:c5:07:2d:ee:fd:d2:a6:a1:1e:c7:50:a4:bd:a4:d0:
         91:41:ff:02:0e:6b:1e:4a:50:27:32:9e:73:c5:7b:98:d9:42:
         6a:ef:11:9f:91:d9:b6:c3:0d:2d:89:af:31:51:aa:53:0b:0c:
         6b:97:83:bd:b2:95:e6:6d:40:fe:44:21:d8:37:a8:e8:2d:6a:
         93:a0:94:d7:32:b5:25:38:56:90:77:f8:b9:81:1a:d4:90:52:
         ce:bd:52:63:a0:6d:f9:f1:97:77:e7:a9:11:44:f9:b1:f1:4a:
         56:81:35:4f:a3:78:34:55:d0:c3:c6:73:d5:00:77:87:91:45:
         94:d4:48:31:cc:66:3d:8d:b5:7a:35:fc:d2:bf:80:98:01:0d:
         0b:dc:f7:23:32:de:b8:16:56:aa:92:94:54:2d:cb:38:83:6d:
         30:e4:2a:ed:1a:fc:f1:45:24:a9:90:58:15:ad:6e:0e:92:54:
         87:c1:2b:01:69:5e:2c:2b:a4:e7:ba:d6:00:71:30:3a:f1:52:
         cf:d2:d2:9e:4d:95:af:d2:0c:8f:f6:f3:ad:dc:78:f2:76:da:
         ad:e8:38:e8:31:f2:86:d1:85:24:6b:b5:bf:c7:c5:d8:34:1f:
         8e:e2:15:32:55:13:10:00:e2:f5:cf:e4:f8:d3:0a:15:50:36:
         a0:12:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:58:36 2025 by rpki-client