Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8d02d2d6-9ce1-38ab-8bf7-1a9c1cc4dc6b.roa
File:                     8d02d2d6-9ce1-38ab-8bf7-1a9c1cc4dc6b.roa (raw, json)
Hash identifier:          /7uIEN74UDzJL4xGrKo79tUbu38vp/HH+uScIieVEMM=
Subject key identifier:   02:0C:6B:0F:01:D1:7C:A4:09:EA:0A:DA:50:71:3B:F0:EF:85:55:98
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234C2E184F0165DB0E2D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8d02d2d6-9ce1-38ab-8bf7-1a9c1cc4dc6b.roa
Signing time:             Fri 31 Jul 2026 18:26:06 +0000
ROA not before:           Fri 31 Jul 2026 18:26:06 +0000
ROA not after:            Thu 29 Oct 2026 18:26:06 +0000
asID:                     81
IP address blocks:        152.26.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4c:2e:18:4f:01:65:db:0e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:06 2026 GMT
            Not After : Oct 29 18:26:06 2026 GMT
        Subject: CN=cddec76a-fed6-4514-82b2-51cd047252ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:39:58:34:72:1b:6c:ab:5b:0b:5f:72:88:
                    82:f7:bc:4a:b2:09:71:81:60:2a:4d:6c:24:88:7d:
                    74:b2:bd:03:b2:38:71:56:a5:83:b4:60:77:98:9c:
                    62:cd:4c:00:02:1d:05:6f:95:a0:5f:79:ee:4b:dc:
                    55:be:18:2c:99:f9:cc:13:5a:83:a1:09:2b:56:8f:
                    bf:60:d5:f0:38:75:87:b3:ea:57:01:41:57:6c:91:
                    13:6e:91:51:49:a4:a9:76:3e:1e:50:a0:b6:ea:26:
                    ca:9b:ff:fb:3a:3e:76:5f:90:00:ef:25:74:ab:fd:
                    56:d7:ac:78:28:4e:7f:10:68:8d:ae:67:b6:7b:59:
                    63:61:88:18:f6:5a:12:00:5d:25:26:25:07:c6:a6:
                    6b:2b:48:d5:19:93:db:ea:03:e6:ee:96:c1:ce:28:
                    a8:a1:f7:39:6f:c5:d7:44:53:fa:fb:35:0b:cd:3b:
                    e3:96:b8:a9:37:2d:7e:eb:14:7f:83:ed:4c:b7:fc:
                    98:f6:5c:2a:e7:8d:21:03:e5:4b:e5:a5:0c:e7:05:
                    bd:a7:67:94:49:fe:2a:10:07:26:7b:bc:f7:d9:c4:
                    07:69:fe:e1:ae:cd:3d:87:f2:e5:a8:fd:22:ce:2d:
                    3a:f1:1c:04:a3:df:82:aa:1c:1a:a2:33:35:ba:f6:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0C:6B:0F:01:D1:7C:A4:09:EA:0A:DA:50:71:3B:F0:EF:85:55:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8d02d2d6-9ce1-38ab-8bf7-1a9c1cc4dc6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:de:ac:21:c3:1f:03:af:e0:88:52:c3:9e:b6:dc:ea:48:d8:
         e7:5c:d1:e7:96:c6:59:7c:e8:73:14:b9:40:f8:91:04:d9:df:
         fe:71:a6:58:c9:ba:51:f9:73:b9:6b:92:ec:e4:f0:eb:f7:94:
         d4:98:ba:31:40:73:d6:8d:b7:73:9a:0e:7a:81:ce:ca:3d:17:
         c4:62:dd:53:e6:9e:35:2c:bd:b9:a8:36:9f:23:61:8b:95:88:
         59:ad:10:bc:ed:f4:d8:72:b7:9b:86:c1:44:c9:d7:3a:d6:e8:
         76:44:7a:ee:63:f5:6a:b5:6b:09:28:6e:72:a0:15:73:57:49:
         24:db:5a:19:3a:40:2c:dd:d7:61:f6:50:1b:eb:dd:e4:53:6c:
         fe:d5:8d:1c:4e:80:6e:00:de:1d:95:b7:3e:2c:81:d5:61:e6:
         c0:32:eb:db:9a:c7:ee:4e:77:40:ae:b9:12:9b:dd:6b:9d:4f:
         f1:69:ee:c0:37:75:5b:b9:16:e1:92:99:36:33:c1:59:3e:2b:
         57:fc:ef:c1:34:1a:ce:cd:7a:c4:20:53:a8:46:c0:7e:ae:ef:
         01:2c:58:e7:f9:b1:0f:27:f5:17:60:a1:85:da:a2:23:22:1b:
         0c:13:2d:15:28:d1:a4:21:d4:92:e0:ed:2c:cd:32:1b:8d:1c:
         d5:b5:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:20:23 2026 by rpki-client