Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99c1b42d-1695-3663-be5b-f1e11e1a023e.roa
File:                     99c1b42d-1695-3663-be5b-f1e11e1a023e.roa (raw, json)
Hash identifier:          zJTHZlsikg/IcY7IgUcWZN+SWGNotZuQt9zw+52QHzs=
Subject key identifier:   67:60:BD:81:D3:AB:55:54:02:48:DF:BC:92:DD:CE:0A:DC:32:A4:AA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A165599F78128FC26F4480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99c1b42d-1695-3663-be5b-f1e11e1a023e.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:65:59:9f:78:12:8f:c2:6f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=68931862-67d6-47ec-9897-68e8a7dd7c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:65:77:75:0b:ba:b8:3c:95:d2:22:96:4e:d4:
                    7e:54:11:4a:44:c1:ea:fa:8a:1c:a7:06:31:12:90:
                    7e:57:c4:24:fd:70:74:2f:94:8a:6f:35:d3:19:ac:
                    be:d2:4e:f2:c9:b1:2f:db:64:0d:bc:88:15:27:3c:
                    64:2d:31:d8:18:47:9e:79:62:9d:22:59:e0:47:21:
                    44:23:4b:0d:87:1a:f2:c5:50:27:8b:2a:bf:71:01:
                    f8:32:f7:cf:53:0b:ec:3c:b9:ad:b2:c8:7d:bf:57:
                    40:21:b9:e3:7d:8d:55:1a:ed:03:75:f6:97:73:39:
                    11:5e:f1:e7:72:ad:ab:58:14:5d:46:d8:ec:e0:6d:
                    b4:49:20:c1:ee:2b:7f:25:41:5e:30:35:c2:85:7b:
                    1b:fc:62:7c:3e:10:8d:1f:4d:94:7a:36:78:43:bd:
                    d6:99:2f:b6:3a:72:e8:f9:41:b1:db:e9:51:c4:f3:
                    1b:9e:3e:75:d5:f5:f8:ba:34:49:b5:e7:28:2a:d8:
                    56:05:ae:97:59:c7:b5:90:f9:71:a6:72:34:46:fc:
                    57:0a:56:71:c6:8a:72:2f:67:a6:be:21:c5:47:3e:
                    9b:2c:ba:76:01:56:a5:9e:6e:0b:73:e9:66:79:f0:
                    37:5e:cd:4b:c9:fa:34:b1:d6:07:c2:65:6f:74:a5:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:BD:81:D3:AB:55:54:02:48:DF:BC:92:DD:CE:0A:DC:32:A4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99c1b42d-1695-3663-be5b-f1e11e1a023e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:31:92:b4:74:2e:bd:19:6f:f2:44:d9:15:44:39:20:5f:
         8a:6f:eb:1f:c9:6e:31:d2:29:f6:bf:05:19:68:2e:8b:c2:4d:
         13:70:64:24:49:17:46:81:d8:b1:02:91:62:41:01:f7:24:50:
         f7:f9:c0:08:83:f2:c2:b5:22:ef:bc:41:b4:3a:fa:58:c8:95:
         09:69:9e:05:4b:dc:03:8c:2f:a0:9d:e2:25:63:23:ba:cf:31:
         f5:81:ee:d9:66:69:76:7e:60:43:f5:32:a1:3c:db:85:3b:d6:
         6b:2c:4b:03:32:16:6e:b5:af:dc:50:da:ea:f2:ca:25:69:dd:
         50:49:23:dd:bd:2a:91:61:33:93:08:c4:77:11:da:0a:ad:e0:
         69:e1:07:96:05:79:2a:1f:65:e3:eb:6e:b7:dd:7c:68:61:ee:
         4a:99:f6:71:a7:18:77:c9:b7:b6:83:24:ad:04:ee:55:b1:01:
         23:7a:88:b6:c5:4f:7d:be:91:ec:1f:d6:8b:ea:42:6a:80:8b:
         fb:d6:e1:12:3d:a2:cd:be:5a:6d:50:6c:8b:57:21:2d:39:bd:
         ab:e7:e8:84:02:a3:e7:b2:d9:35:70:20:c8:be:ed:69:a8:d5:
         58:1a:a7:15:41:ae:39:3d:ed:6d:82:45:6e:65:d3:d6:43:3e:
         be:0c:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:11 2025 by rpki-client