Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a9c961d-a5bb-3aa4-b71d-8eb066672bd1.roa
File:                     7a9c961d-a5bb-3aa4-b71d-8eb066672bd1.roa (raw, json)
Hash identifier:          m0oxIBqYyMp22bKPi23OyvVkzci1gHYHyEalTbnLlG0=
Subject key identifier:   08:39:3C:33:9D:87:B6:F6:2A:59:3C:38:0B:0A:D9:2B:6A:B5:29:5A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234C5A880E2BDAD77FEF40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a9c961d-a5bb-3aa4-b71d-8eb066672bd1.roa
Signing time:             Fri 31 Jul 2026 18:26:06 +0000
ROA not before:           Fri 31 Jul 2026 18:26:06 +0000
ROA not after:            Thu 29 Oct 2026 18:26:06 +0000
asID:                     22862
IP address blocks:        152.26.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4c:5a:88:0e:2b:da:d7:7f:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:06 2026 GMT
            Not After : Oct 29 18:26:06 2026 GMT
        Subject: CN=e8e488dd-5abd-4b56-b4ff-aee9c659266d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:b8:85:c2:e7:90:aa:c9:80:11:e9:b4:3e:
                    20:88:6a:0e:88:d3:12:bf:1b:56:91:e0:42:90:20:
                    d3:f7:77:33:ef:70:88:bc:fe:01:a9:71:71:1b:38:
                    33:ad:3d:94:0d:74:71:7e:97:8e:46:52:f7:cf:fd:
                    11:15:3c:59:40:0a:79:e0:d1:0f:f1:63:66:c3:7d:
                    07:a1:96:28:e7:52:64:f2:29:10:33:f4:7e:05:0c:
                    f4:54:4b:64:ea:5d:3b:93:42:97:7f:b3:3e:be:98:
                    ee:ec:6f:6e:91:17:ee:d1:14:1b:a1:74:63:42:5e:
                    ea:7e:44:1a:47:fa:ad:79:68:b9:17:61:5d:0e:dd:
                    59:90:67:b6:ab:6d:0e:e7:87:ec:9c:7f:7f:5d:52:
                    fb:6b:d1:7c:61:79:46:1f:90:bc:94:e9:d6:af:ae:
                    9d:02:b4:82:6c:e7:7d:44:e2:c1:d3:be:10:c9:82:
                    cd:4f:eb:26:9d:f2:a0:93:b4:0b:ad:84:ae:b7:6c:
                    58:c9:1b:57:68:a6:2e:a1:4d:56:67:85:5e:82:91:
                    33:6d:e8:94:e7:ff:48:62:60:e2:56:63:cb:2e:24:
                    b3:1f:2f:48:a8:2f:66:ea:29:91:b7:2c:2c:bc:16:
                    cb:91:e4:c5:04:a8:7c:c4:6e:7d:12:5c:f0:3a:4e:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:39:3C:33:9D:87:B6:F6:2A:59:3C:38:0B:0A:D9:2B:6A:B5:29:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a9c961d-a5bb-3aa4-b71d-8eb066672bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:38:fd:36:a3:a8:6d:25:97:5b:2d:58:a3:e7:a3:c3:9b:
         2c:9c:75:3c:d0:7b:8c:84:d1:d6:5f:ca:53:67:8d:41:d9:2d:
         07:c2:04:a8:c6:c9:7e:44:ad:fd:86:67:d0:d5:7d:a7:87:63:
         d5:4e:9c:b0:f3:4e:74:64:af:d5:66:9e:4c:f0:50:8d:cf:56:
         55:46:36:ec:e8:31:fd:e2:ac:71:60:4a:71:f9:15:43:74:35:
         90:ba:3d:36:15:96:b3:13:d3:e0:28:de:e3:46:d5:53:05:40:
         a3:62:0f:dd:cd:51:c5:e2:a2:7e:bc:bd:14:5a:15:3a:5d:fd:
         c6:da:4a:11:09:77:05:1a:4e:fc:d5:61:5c:f2:69:87:2f:af:
         80:22:1c:67:cb:7c:37:cd:03:d4:bd:c3:4b:74:96:52:ad:2d:
         b3:ee:1f:29:7c:4b:af:d3:51:22:79:b0:32:89:15:f7:74:c6:
         cb:f1:18:22:de:27:22:c2:ad:b0:e1:65:00:6e:89:2b:bf:36:
         b1:40:31:94:6e:6c:44:ec:17:98:ee:05:5b:e6:0a:b6:a8:43:
         9d:39:3c:5f:9c:38:66:cb:05:49:6b:44:d9:e6:b6:f1:2f:9a:
         67:45:79:0b:e7:c2:78:5c:c1:7d:b8:15:89:c0:06:78:ba:3a:
         ad:f4:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:44:16 2026 by rpki-client