Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/97878ed8-3623-38cb-8e01-dbe6b737b4cc.roa
File:                     97878ed8-3623-38cb-8e01-dbe6b737b4cc.roa (raw, json)
Hash identifier:          lFiypVRBJFvfZzAjMnN2OzCJQj/FiPEHyv81E5/Wc6o=
Subject key identifier:   4C:00:79:E7:68:1B:95:64:2F:D0:F3:98:A3:19:E1:D6:C2:B4:50:45
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234FDDE1E36A37FD395F40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/97878ed8-3623-38cb-8e01-dbe6b737b4cc.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        152.46.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4f:dd:e1:e3:6a:37:fd:39:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=4028ba2d-30aa-480a-9c80-6d411970fb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:ee:91:13:d1:5d:38:22:f6:5f:05:de:f7:
                    89:69:a7:e2:c4:b8:f6:d8:b6:a9:e9:e8:4c:e8:e3:
                    c3:59:32:a1:80:c8:25:ea:bd:5c:d8:76:08:fa:af:
                    2c:ef:4a:33:f7:4d:39:fa:71:c7:a6:8c:c9:6f:16:
                    fb:9b:b4:33:38:51:28:b0:a6:8a:b1:8e:c1:03:6f:
                    4e:5f:45:67:67:e1:76:ca:3d:2c:e5:c7:e1:e7:38:
                    49:ef:38:78:29:a3:b9:8c:b4:3e:59:46:75:b8:c3:
                    df:fd:91:26:cf:9f:00:62:3b:e3:f4:1f:bd:72:0c:
                    78:43:6a:68:3c:5e:45:46:af:74:df:1a:2a:03:14:
                    3d:d7:49:c1:1f:20:6c:22:fc:d9:c3:c0:8e:de:cf:
                    08:b5:ef:83:d6:db:ce:33:75:82:8c:a4:cd:53:ee:
                    74:4e:00:21:6d:76:d9:bb:22:5d:b5:ac:71:76:a5:
                    00:cd:6d:64:e4:86:7f:b5:93:d3:09:e2:70:a1:81:
                    42:d4:91:d8:18:63:ed:e5:eb:1b:2e:de:9d:52:0c:
                    cc:96:17:06:a2:54:0e:19:2d:2e:e7:0f:61:67:1d:
                    89:c3:98:a2:71:25:26:3a:9a:5f:20:9d:17:57:0c:
                    83:da:0d:96:9d:ba:c2:33:c8:05:26:c2:6a:fe:e8:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:00:79:E7:68:1B:95:64:2F:D0:F3:98:A3:19:E1:D6:C2:B4:50:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/97878ed8-3623-38cb-8e01-dbe6b737b4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:c5:77:81:2a:73:64:d3:e9:25:0f:14:10:96:fd:e2:50:
         ea:b0:d3:48:ec:09:4c:35:bc:e4:c2:42:fc:c2:4b:28:88:c0:
         5b:25:11:f8:bf:02:d2:a3:31:53:03:c5:d7:7c:9a:30:ab:86:
         1c:ce:3b:bc:6c:0b:2b:0c:e2:be:d2:75:1d:ed:04:cc:d4:04:
         13:26:26:f0:0b:16:4f:85:ae:69:66:3b:08:b8:81:f5:b3:a0:
         90:9a:4b:60:96:2c:34:06:90:a3:ca:6a:26:f0:25:ec:cb:d3:
         37:42:39:52:65:2a:4b:ab:fd:83:a9:0a:bc:75:34:6e:fa:c6:
         73:1d:0d:71:ae:dc:e8:8e:5e:d1:98:e1:c6:8b:a2:2f:0c:87:
         44:21:22:5f:56:0b:62:01:e3:52:0c:79:73:87:ef:53:e4:d5:
         a2:ef:14:41:c4:65:cb:67:af:a5:1b:36:39:38:17:da:ce:f9:
         0d:38:9b:c5:ec:44:a1:fa:24:7e:7d:ed:de:7b:7f:72:ca:32:
         6a:06:83:15:37:7e:56:4b:a5:13:c2:ed:f2:12:6c:e9:e5:ce:
         13:90:7f:8f:f3:f3:ec:a7:22:bf:41:df:09:cc:0b:dd:24:b8:
         c4:86:4d:c5:bd:f0:c6:64:cf:ee:8e:84:88:ba:a1:26:b9:5a:
         3e:a8:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:00:52 2026 by rpki-client