Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b02f96d9-27e4-39c3-9055-ac8959088bcd.roa
File:                     b02f96d9-27e4-39c3-9055-ac8959088bcd.roa (raw, json)
Hash identifier:          GmV0PoiFJrfFO8G1xMFUSV4uYhE+jPdCC/Ya5xokeTo=
Subject key identifier:   FE:4C:91:69:C6:4C:E2:0F:83:57:1C:AE:D7:4C:68:19:A8:97:71:35
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A1696F50E0800C476C7B10
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b02f96d9-27e4-39c3-9055-ac8959088bcd.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.46.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:69:6f:50:e0:80:0c:47:6c:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=49cf136f-9876-4ff6-812a-cff0bd934a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:6d:a1:d2:e1:16:2a:bd:71:b5:19:62:ff:
                    36:23:df:8b:d3:0d:50:e4:80:9a:90:ef:40:ed:1b:
                    5b:5b:3a:09:80:94:e7:32:06:76:d1:0a:db:1f:a2:
                    14:e2:cc:51:d0:08:86:0d:d4:e5:85:e2:b3:b0:7d:
                    ae:1a:6b:15:7f:24:67:c4:cc:35:b0:be:54:8b:09:
                    45:c9:d2:3d:cd:a5:e2:24:44:29:28:94:43:4b:d3:
                    00:5c:92:99:0d:8e:24:1e:eb:17:a9:91:72:3f:fb:
                    cd:48:b9:e7:91:d9:5b:8e:a4:5e:49:f2:f6:fb:7e:
                    af:e0:b0:41:13:6a:f5:d9:ae:68:91:47:f7:07:8a:
                    3d:f4:46:c0:4d:bf:cc:50:52:7e:cc:83:24:e7:fb:
                    3d:93:81:ef:ae:86:9f:22:d3:dc:d3:42:ac:17:1b:
                    55:bc:d5:29:f3:3b:f3:b6:53:55:e1:c7:1e:a4:88:
                    23:15:6f:4f:75:c8:3e:d1:6c:b3:fa:46:09:dd:ba:
                    86:2f:29:5f:dd:89:05:24:b4:53:a9:ce:f5:07:0d:
                    a5:7d:94:25:1e:18:bc:6e:39:b9:a3:77:34:74:51:
                    6a:cb:07:76:cc:d7:e9:cf:99:4c:29:72:9a:f8:da:
                    56:20:62:f9:73:d2:68:af:cd:58:58:74:35:6a:eb:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4C:91:69:C6:4C:E2:0F:83:57:1C:AE:D7:4C:68:19:A8:97:71:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b02f96d9-27e4-39c3-9055-ac8959088bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:ad:b1:4a:a7:31:07:ea:0d:02:11:3f:89:1c:10:29:13:
         8c:ba:ac:58:f5:eb:ff:b1:9d:9a:fc:bd:26:c1:ce:f1:cc:52:
         79:10:a7:86:62:59:e0:17:e2:e2:bb:a6:3a:7a:54:08:8a:4f:
         ab:7d:62:76:9a:60:49:7d:d8:e5:9d:e1:1d:31:77:e4:3a:14:
         ea:c1:58:b8:7c:ae:f6:be:06:75:28:d3:d7:8b:8d:13:58:70:
         a7:06:af:1c:75:3e:a6:ed:47:87:8d:5e:5f:a3:5e:89:e0:fd:
         ed:47:81:f1:d7:7c:84:69:de:b1:14:db:7b:3b:2f:d3:83:13:
         dc:e6:9b:9e:5b:40:e0:de:0e:6b:8d:17:c8:80:01:9d:7c:42:
         46:9f:dd:fe:70:e2:ab:e5:56:76:42:22:b1:0c:f0:70:06:9b:
         22:30:24:7e:fc:0d:94:39:63:7e:37:05:dd:ed:67:2b:ae:06:
         6b:37:1b:2e:1c:e6:4d:d1:6d:2b:67:cc:ac:11:69:2a:30:9b:
         6f:6b:02:55:ef:43:4b:26:5b:0a:8e:8d:90:6d:c0:9d:73:18:
         20:48:0e:45:74:a4:e1:96:c7:5b:ac:3c:ea:3c:f6:5f:60:c8:
         18:00:6f:3d:88:e8:03:50:f0:5e:51:fd:f2:ad:a6:97:2f:26:
         51:be:ca:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWlvUOCADEdsexAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NDljZjEzNmYtOTg3Ni00ZmY2LTgxMmEtY2ZmMGJkOTM0YTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh81todLhFiq9cbUZYv82I9+L0w1Q5ICakO9A
7RtbWzoJgJTnMgZ20QrbH6IU4sxR0AiGDdTlheKzsH2uGmsVfyRnxMw1sL5UiwlF
ydI9zaXiJEQpKJRDS9MAXJKZDY4kHusXqZFyP/vNSLnnkdlbjqReSfL2+36v4LBB
E2r12a5okUf3B4o99EbATb/MUFJ+zIMk5/s9k4HvroafItPc00KsFxtVvNUp8zvz
tlNV4ccepIgjFW9Pdcg+0Wyz+kYJ3bqGLylf3YkFJLRTqc71Bw2lfZQlHhi8bjm5
o3c0dFFqywd2zNfpz5lMKXKa+NpWIGL5c9Jor81YWHQ1ausoJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5MkWnGTOIPg1ccrtdMaBmol3E1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjAyZjk2ZDktMjdlNC0z
OWMzLTkwNTUtYWM4OTU5MDg4YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+6rbFKpzEH6g0CET+JHBApE4y6rFj16/+xnZr8vSbBzvHMUnkQp4Zi
WeAX4uK7pjp6VAiKT6t9YnaaYEl92OWd4R0xd+Q6FOrBWLh8rva+BnUo09eLjRNY
cKcGrxx1PqbtR4eNXl+jXong/e1HgfHXfIRp3rEU23s7L9ODE9zmm55bQODeDmuN
F8iAAZ18Qkaf3f5w4qvlVnZCIrEM8HAGmyIwJH78DZQ5Y343Bd3tZyuuBms3Gy4c
5k3RbStnzKwRaSowm29rAlXvQ0smWwqOjZBtwJ1zGCBIDkV0pOGWx1usPOo89l9g
yBgAbz2I6ANQ8F5R/fKtppcvJlG+yuo=
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:16 2025 by rpki-client