Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d96a47f4-7e65-3883-bdac-2090717be52b.roa
File:                     d96a47f4-7e65-3883-bdac-2090717be52b.roa (raw, json)
Hash identifier:          9p+9M7w9ZSyAy+4pMCwUO5ZCRvk/tyK66VBYTnAyBEg=
Subject key identifier:   D8:34:A2:EB:5B:0F:9B:D5:12:1B:78:22:97:D0:69:7D:81:46:49:C8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D29B9A2F51D02CF211DF00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d96a47f4-7e65-3883-bdac-2090717be52b.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     81
IP address blocks:        152.45.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:9b:9a:2f:51:d0:2c:f2:11:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=f639f55f-d130-495c-a7c0-0ddfcec6ddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:09:bb:e6:bd:f5:c7:40:6e:e3:83:34:55:
                    94:ed:82:51:3e:82:22:49:9d:2b:8f:90:32:b6:6f:
                    2c:18:a4:62:30:2e:11:99:c6:51:ea:0b:9e:e7:cb:
                    7f:16:5d:89:ef:1e:d2:2f:50:09:89:f9:b2:89:bd:
                    24:74:82:a8:68:e0:72:97:30:2d:69:fa:c3:13:b6:
                    2f:32:48:2d:07:4c:f9:a7:77:0b:b1:9e:92:1f:96:
                    72:17:be:31:85:a0:ff:d2:4d:44:4b:0d:c6:63:76:
                    02:51:db:d0:58:21:1a:aa:2b:20:21:03:59:be:2a:
                    24:d9:16:d8:27:79:92:39:fb:2c:15:9d:54:de:f5:
                    0d:74:15:91:00:dd:80:7e:a7:b0:36:58:4d:59:ae:
                    70:8f:30:d7:95:a2:ec:44:6f:0f:99:4b:e1:9b:99:
                    2c:f7:a4:8d:12:59:71:25:9f:c9:e8:bb:0f:5c:6e:
                    82:61:cb:e5:7e:9e:25:d2:d9:3b:4e:f6:07:85:c3:
                    30:18:de:df:5c:a2:ea:7f:1a:16:10:9c:47:7a:5f:
                    3f:d3:04:c6:6f:55:c7:9d:a6:44:a5:53:08:5a:ac:
                    4f:ee:f7:a5:e1:5f:fb:06:bc:1b:d6:6c:d0:62:53:
                    70:29:4e:51:a6:6d:05:3e:6b:6b:9a:92:aa:1e:5a:
                    07:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:A2:EB:5B:0F:9B:D5:12:1B:78:22:97:D0:69:7D:81:46:49:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d96a47f4-7e65-3883-bdac-2090717be52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:a6:ed:40:f9:46:80:70:f1:4e:6c:32:bb:5b:c7:6d:66:
         a8:03:65:bb:f6:fc:f1:35:dc:5a:a0:08:4f:31:a7:bf:df:ba:
         09:a0:20:b8:9e:40:d8:e0:f1:48:d7:65:0f:b9:22:f4:9c:d9:
         8e:81:c7:a9:e4:64:0d:7b:66:94:88:c0:ac:5b:cf:f9:fe:7a:
         34:2d:0a:24:e3:12:5f:67:71:5d:ab:c5:96:5d:98:88:50:ca:
         04:ee:c4:c1:3e:40:c0:f1:ba:9f:23:c0:2a:6c:9a:bd:6f:95:
         7f:27:fc:e8:2b:03:1c:e2:bb:a3:2f:3c:ce:c8:fb:c0:0a:06:
         b1:7a:cd:bb:41:92:ff:fa:87:47:05:f4:2c:2e:1f:86:f2:fc:
         15:c1:3f:fb:05:31:5d:d0:fb:d5:db:c9:29:4c:e2:03:c4:e8:
         a2:41:1a:98:3b:d0:1a:5b:0b:54:0a:25:25:47:f8:a7:4b:c0:
         56:46:2b:9a:d2:4f:a4:0e:ae:1f:74:18:47:07:a3:b3:21:d0:
         52:d6:59:5f:4d:cb:b0:a9:e4:cb:6b:d0:d0:f9:37:b4:ce:31:
         0c:32:74:64:35:94:11:cc:54:9e:38:b0:76:dd:fe:02:fe:66:
         eb:a9:e2:55:ea:6e:f9:f2:1c:3e:2f:9e:1f:40:e6:39:2c:cd:
         8d:8d:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:29:34 2026 by rpki-client