Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7b248dce-40b5-38ed-b266-365b1acc5256.roa
File:                     7b248dce-40b5-38ed-b266-365b1acc5256.roa (raw, json)
Hash identifier:          PeXQEvhQIrNhMJYhpwBFw6ETDqCth96ovBdnXBt0uWo=
Subject key identifier:   6A:6E:7C:2C:23:42:A1:17:1A:22:F5:C4:D4:C7:D8:C9:21:79:E1:12
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1601FB28851ECCA579A10
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7b248dce-40b5-38ed-b266-365b1acc5256.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:60:1f:b2:88:51:ec:ca:57:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=8d0f8af0-889c-4c1c-87ae-b5340b0e2b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:25:d4:9d:3b:72:a3:12:b4:40:74:9a:57:
                    d6:b4:e7:8c:eb:e0:42:b5:a0:d6:94:1b:76:98:70:
                    81:3a:d8:d9:ce:11:31:38:e7:57:b0:a5:4b:1f:20:
                    eb:07:fa:8c:bc:ac:aa:65:21:50:e8:43:45:58:25:
                    0d:ca:53:99:8d:71:33:42:3c:57:a7:7f:37:57:fa:
                    71:80:f1:4d:29:45:e8:6c:a0:9e:43:27:ef:87:2b:
                    89:29:27:6b:de:52:e1:c1:f7:9f:4a:cb:b5:22:2c:
                    df:44:d8:91:da:c9:bf:ab:35:bd:39:b6:9e:33:81:
                    90:3c:6a:50:35:9c:92:53:0d:13:14:9b:99:a7:76:
                    d8:11:7f:1a:a0:0a:91:72:db:7e:70:93:43:15:25:
                    f5:56:e4:b5:7d:68:ca:5c:ed:12:82:de:f2:4a:64:
                    c1:6f:d8:12:90:89:f5:4c:a8:6b:d5:09:81:87:c5:
                    03:ed:97:c8:5c:6a:4c:00:bc:06:45:56:d1:9a:c0:
                    c8:6b:bf:f4:42:9d:b5:a5:f3:fb:e7:90:ed:c0:d0:
                    4b:ff:d6:5e:6c:8c:3b:20:11:9b:c4:8a:54:21:a3:
                    63:07:74:f0:1f:d8:67:18:3f:d9:05:42:76:5a:6f:
                    b9:8c:de:8e:9a:29:4f:57:e9:66:77:36:cf:58:b7:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:7C:2C:23:42:A1:17:1A:22:F5:C4:D4:C7:D8:C9:21:79:E1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7b248dce-40b5-38ed-b266-365b1acc5256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:25:7d:32:3b:c8:06:7c:78:1d:9a:a3:b8:25:38:b6:17:08:
         4d:08:66:a4:be:71:d8:50:86:39:64:21:32:5b:04:73:2d:39:
         a3:5c:29:ff:db:f2:91:9d:d7:5f:07:04:7c:70:c7:22:d2:35:
         97:18:af:1a:e1:05:fb:3e:f9:23:77:a7:ff:de:76:48:8a:43:
         9f:e5:ce:b3:17:74:6e:70:91:31:22:cd:22:c5:aa:0b:8c:89:
         26:45:65:41:90:7c:a4:8f:aa:86:6c:75:06:e1:d1:f2:2c:6e:
         d3:85:9d:a8:a0:9a:5f:a2:7e:19:92:fd:94:83:77:2d:28:6e:
         fd:7d:d8:24:47:9f:ad:d3:2a:23:12:0c:51:05:b3:d3:85:3a:
         c9:bc:c8:8a:6b:7c:f7:05:27:1a:d6:1a:15:f4:48:ae:f2:06:
         56:fc:67:2d:db:50:9a:44:e0:23:27:23:05:6c:d7:d2:1d:ac:
         b5:10:30:9a:62:c5:22:56:69:4f:41:0a:de:73:bd:81:02:3c:
         ea:b6:6c:28:a0:fc:9b:c2:d8:5e:60:c9:af:60:bd:f9:9b:d3:
         87:35:64:d7:0d:e6:13:4a:70:7c:b0:3e:fb:dc:45:71:28:b9:
         8d:40:e7:68:20:64:53:0d:2b:b8:7a:47:ba:89:67:03:cc:b7:
         97:c5:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:03:40 2025 by rpki-client