Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad601645-0b89-34af-8b7f-a47c1449e54f.roa
File:                     ad601645-0b89-34af-8b7f-a47c1449e54f.roa (raw, json)
Hash identifier:          Rkl1E7yUhjxa5oAL8tF4vbkLdoebPnPhqj7zj2PSVmA=
Subject key identifier:   C5:E8:6C:32:73:F9:5C:C2:95:21:B3:94:78:21:44:CF:CD:A6:4F:30
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29A61E764CD17415F2000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad601645-0b89-34af-8b7f-a47c1449e54f.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.26.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9a:61:e7:64:cd:17:41:5f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=50f263be-eca3-4834-bee3-2b0fa9aecf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:d1:54:0b:44:e4:55:ac:82:5c:2a:87:09:
                    ce:79:3c:2f:46:82:ba:d1:d1:25:f4:0d:b0:d7:96:
                    c9:ca:25:2c:87:a8:d3:79:f3:1f:66:00:f3:fe:70:
                    76:48:e1:fe:c7:26:54:c5:94:4e:eb:49:f3:f1:03:
                    0a:61:4f:ed:ca:94:93:58:79:d2:5d:c0:53:be:37:
                    ea:e2:e5:ca:78:14:78:34:5d:c7:93:63:18:f0:c7:
                    05:08:c3:5d:5f:02:74:82:33:52:56:7b:06:93:82:
                    ea:20:a9:92:cf:aa:70:b5:dd:27:10:19:0f:e1:94:
                    bc:e5:e3:9c:10:eb:da:78:cf:96:b5:98:ee:df:c1:
                    00:ce:7c:74:4d:74:cd:43:2b:ab:df:3a:93:87:ac:
                    7b:f9:4a:ea:f2:60:49:e2:6c:f4:03:42:7a:0f:26:
                    30:ac:1f:7d:6b:f9:74:22:7f:24:ef:dd:ec:ac:8c:
                    a1:24:cb:79:be:56:cc:7d:f2:30:8e:1c:80:c2:f1:
                    ec:74:51:12:9f:9a:7d:66:fe:70:14:51:7b:7a:68:
                    c0:18:4d:cd:5c:1b:72:38:0a:03:b2:64:10:5b:ff:
                    be:6a:b2:ec:e3:0f:e9:70:00:54:c4:9e:df:3a:9c:
                    91:e9:36:8f:07:80:ef:65:41:3c:43:e1:a6:a0:c6:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E8:6C:32:73:F9:5C:C2:95:21:B3:94:78:21:44:CF:CD:A6:4F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ad601645-0b89-34af-8b7f-a47c1449e54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:a5:b4:80:ff:30:33:4e:9a:03:8d:d2:ba:29:1b:ad:0b:
         a5:9e:88:12:60:7f:eb:59:24:c9:86:e8:d8:ea:46:44:46:0e:
         f8:55:3f:95:1a:8b:7e:1c:82:d7:c7:ce:e4:62:3d:a2:55:d1:
         19:27:5c:5d:32:a0:d3:0b:78:13:22:71:c0:0a:72:16:bd:de:
         28:3f:e0:78:33:dc:c2:38:6b:0f:82:d2:a9:e3:e9:53:e5:1a:
         11:0c:6d:6b:4b:b3:6c:94:d3:73:49:ae:f7:6c:89:d0:7c:f4:
         d6:b4:7b:a1:d4:83:76:29:cb:a4:2d:12:3c:5c:f5:f0:f8:87:
         b1:fa:76:66:1b:ab:2f:02:cc:d4:fd:cc:de:56:4e:23:dd:5f:
         f8:92:06:76:57:70:15:c4:b5:40:88:f1:94:e2:25:cf:82:6e:
         a2:3b:f1:ea:e8:b0:a2:b0:d8:02:13:d2:55:75:ce:b7:53:57:
         4e:12:4c:a2:04:48:02:9b:b4:89:91:50:0a:54:fe:ee:7b:42:
         af:79:29:21:ec:0a:32:a8:2f:a0:c6:55:e3:97:0c:bb:10:04:
         37:8b:5a:73:dd:05:1f:2c:e1:f1:9f:e8:78:99:e2:6d:77:13:
         83:89:f4:37:57:7c:f3:6b:51:c5:50:e3:62:19:c3:01:6a:0c:
         9a:f9:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:10:51 2026 by rpki-client