Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/daf565f6-4026-38d6-a0ba-80c4006fc1d3.roa
File:                     daf565f6-4026-38d6-a0ba-80c4006fc1d3.roa (raw, json)
Hash identifier:          /nSD1EifVFE9FtwVIBjoFsGIzpHxsUhfEuaEuzS0V3Q=
Subject key identifier:   49:93:04:E5:DE:48:ED:5D:08:F8:80:69:4E:79:F5:29:9D:73:20:0F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234E9B5D13D5A4A4B9DA80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/daf565f6-4026-38d6-a0ba-80c4006fc1d3.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        152.46.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4e:9b:5d:13:d5:a4:a4:b9:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=287b088d-c4e7-41f0-b22b-7b0f0b320542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:b0:34:1b:da:fc:60:4d:a2:9e:e1:ae:b6:
                    bd:58:d1:f8:12:4a:00:8e:c1:08:48:c9:ce:83:18:
                    ba:df:19:23:5f:c9:36:f1:55:67:42:ab:9b:53:83:
                    4e:ef:6e:43:79:f5:e7:2e:75:8c:c4:3e:bf:92:af:
                    e7:bb:cf:f7:32:0d:df:e3:b4:3d:e3:50:41:04:9f:
                    f3:3e:62:04:31:e0:03:21:fa:bc:37:93:60:d4:28:
                    34:ea:58:f3:a7:d6:20:2e:90:12:b9:90:1a:c5:cd:
                    41:4c:37:99:98:e7:2f:7a:fa:dd:96:b7:5e:3f:f1:
                    2b:28:30:95:1f:75:26:ea:e1:b5:68:f4:42:c2:ce:
                    47:66:a5:e4:13:0b:85:2f:72:22:88:3a:7d:6f:9e:
                    22:0a:9e:60:97:fc:9b:f5:ae:51:e3:7c:4c:03:fb:
                    20:1f:a8:fb:fa:55:18:89:ce:62:fb:6d:30:0e:3c:
                    e9:76:6e:04:03:84:aa:e3:a1:51:eb:a8:32:2a:16:
                    21:5a:e1:24:5e:e5:5c:ce:cd:e5:c1:3a:f0:c7:69:
                    cc:af:4d:f0:34:54:78:a2:73:cf:dd:39:c4:bd:7b:
                    93:e9:86:7c:de:5d:f1:1d:41:b2:93:57:fd:ec:dd:
                    3a:21:43:48:90:75:ee:34:5d:32:50:b1:49:89:24:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:93:04:E5:DE:48:ED:5D:08:F8:80:69:4E:79:F5:29:9D:73:20:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/daf565f6-4026-38d6-a0ba-80c4006fc1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:c7:f1:f1:56:56:04:7e:36:ef:be:45:a8:a7:ee:10:e1:
         e8:92:94:dc:45:8f:42:55:d4:6f:5c:6a:98:b1:d2:fe:f6:60:
         dc:d3:dc:47:0f:fd:21:81:d5:a7:b6:ed:6b:81:26:bd:c6:d1:
         e7:5a:d4:76:c8:f3:3f:22:6a:19:de:e7:24:59:32:50:45:51:
         d6:eb:98:8a:bc:ed:1c:13:a9:4c:a9:6f:3f:63:43:64:8d:cf:
         27:c1:57:46:87:54:ea:74:c8:66:fe:6d:3c:bf:13:96:72:97:
         5a:c0:5e:fc:98:ac:7f:98:c9:ab:04:72:e2:4d:07:02:d1:e7:
         a9:9f:0e:e9:22:67:1b:4b:97:8e:aa:3e:e9:ea:a5:4f:bc:3d:
         9c:f8:b2:53:52:69:8e:c1:26:ad:f8:d6:b8:c4:0d:c3:1f:db:
         57:7c:7d:4b:5d:0b:a5:5d:5c:a6:80:9d:63:08:ff:3c:71:9c:
         be:1a:59:71:52:5f:43:a3:ec:bb:1b:7f:90:40:7c:ba:54:10:
         18:a3:e0:db:b2:0c:71:d1:1c:29:28:3d:0e:ae:bd:e4:51:c1:
         30:33:8b:2c:0d:5a:4d:73:36:94:3f:e4:40:c2:04:bf:af:d2:
         8c:f1:e2:2b:a6:37:a3:e4:cb:6d:22:76:17:22:fe:b7:20:68:
         5a:46:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:23:58 2026 by rpki-client