Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3b13263-897f-330e-b53f-a83608d7377e.roa
File:                     e3b13263-897f-330e-b53f-a83608d7377e.roa (raw, json)
Hash identifier:          Gkn+7g1NDJGg2aKGkajBsEQaNx+eCQMJ4Kyd1iAZPYQ=
Subject key identifier:   1C:0B:EA:AD:31:52:A5:D0:43:90:71:A3:1F:BD:35:B7:C8:7A:1A:0E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B16A164D66ABAE0C12DCC99C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3b13263-897f-330e-b53f-a83608d7377e.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     81
IP address blocks:        152.26.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:64:d6:6a:ba:e0:c1:2d:cc:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=e9109d9c-d1d7-4fcc-a375-c8bf2f6435d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:b5:ae:44:d9:84:09:da:ce:4e:82:0d:60:
                    d9:2e:92:28:2c:da:95:e7:2e:36:73:3f:65:8c:d0:
                    35:c7:f2:4d:93:86:4f:a7:78:f0:db:44:aa:fb:9b:
                    fe:e9:cd:08:0b:9b:1f:1e:fd:54:75:c9:4e:ea:f0:
                    3d:03:fd:f4:a8:57:62:7e:5a:4d:15:9d:b7:3b:e9:
                    b5:b1:0b:ce:af:a3:0c:8f:5e:23:8e:fb:fb:95:80:
                    cf:9a:23:41:e2:48:31:ed:12:40:c2:c5:1b:e6:b8:
                    3f:90:8f:eb:1c:71:de:99:dc:99:d8:e4:ec:dd:44:
                    8c:1f:68:61:8b:cf:7e:0d:f1:db:c7:3d:0d:95:4d:
                    8b:96:39:61:c2:3b:66:4e:2d:76:3e:5d:bd:e7:60:
                    99:cd:2c:d8:06:5f:31:52:56:e4:63:c1:31:32:74:
                    f6:64:2b:5e:c8:a8:d0:00:77:0c:cd:e8:c0:ff:f6:
                    f3:ac:61:2d:b4:03:d4:7d:45:9f:d9:67:4c:ac:98:
                    6c:1c:80:89:65:f5:8e:be:d6:9c:10:d2:ed:17:7b:
                    d9:99:ec:07:6e:60:3c:dc:dd:70:7d:9a:ec:6d:a1:
                    70:3a:1e:70:f2:ac:21:62:e3:b2:0c:19:6e:cb:ea:
                    ef:df:63:65:78:89:12:41:e0:71:a5:1f:47:1d:17:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0B:EA:AD:31:52:A5:D0:43:90:71:A3:1F:BD:35:B7:C8:7A:1A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e3b13263-897f-330e-b53f-a83608d7377e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:dd:99:34:24:3a:51:a3:c1:bb:fc:6e:c9:33:4b:89:c6:
         e7:9a:a8:05:7b:47:c5:6f:c4:d7:46:ec:f0:67:8c:f4:5f:b0:
         b4:fc:b6:0f:05:dc:0b:a9:81:e0:f9:19:dc:f6:cf:08:57:64:
         22:0d:b3:ec:92:eb:9b:0b:12:9f:80:0c:04:9c:da:e8:59:63:
         fd:7b:ac:76:82:b1:20:7b:65:8d:87:90:71:72:37:3b:b1:75:
         39:8c:71:d2:7d:52:81:5b:0c:8f:0b:08:52:5f:07:b1:3b:ed:
         b9:b8:8d:a6:21:c8:de:5a:5f:e8:06:a6:a2:0f:c7:37:f3:b1:
         8a:1c:e7:9b:bc:11:70:92:12:47:e2:32:dd:aa:11:91:02:e0:
         e8:43:a0:1e:c4:18:d7:f3:a9:55:c3:26:e0:94:02:4f:e6:a4:
         a6:de:54:2a:df:79:36:68:4a:8c:d3:56:b9:df:a0:31:f0:23:
         43:26:1a:0a:33:fa:d5:f9:de:bb:23:f5:ab:be:dc:13:17:c4:
         71:e6:c3:03:8c:1f:e2:81:13:d6:f2:ca:65:ca:bd:f0:03:29:
         b4:2c:3a:ef:d6:03:ec:96:b4:76:e8:02:54:0e:84:19:f6:79:
         5e:11:22:f3:e0:4b:28:ed:12:97:c4:3d:dc:74:69:4e:12:ce:
         63:98:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:16 2025 by rpki-client