Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7197bee-536d-3bbd-a5e1-57013548ab70.roa
File:                     f7197bee-536d-3bbd-a5e1-57013548ab70.roa (raw, json)
Hash identifier:          rqKzcc4Krrk1vKD5I3TLVd9c08Wdr6jR7WTejhNGtEw=
Subject key identifier:   68:04:55:AD:DA:F8:EB:94:9C:47:74:B1:F9:C5:46:18:70:F2:1E:35
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234FFA9C2F71F81B12F280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7197bee-536d-3bbd-a5e1-57013548ab70.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        152.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4f:fa:9c:2f:71:f8:1b:12:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=04ff6009-6419-471e-a647-5c0a098af0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:d7:c9:26:28:65:4c:c4:eb:38:b3:a8:b4:
                    ca:16:ca:05:de:85:24:2d:9d:1d:14:91:5f:01:72:
                    07:f6:22:9c:bd:97:f2:5a:20:8a:32:8f:41:d0:9c:
                    5d:2b:4f:dc:96:48:0e:e0:be:ba:9c:f3:a5:59:06:
                    33:8b:83:73:4f:e7:3f:b4:32:12:37:f0:c2:ba:01:
                    4c:57:ff:fd:e1:60:41:47:bb:9d:04:78:ff:7d:a7:
                    4c:35:a3:8f:72:d0:7e:9e:b3:7a:bf:2e:3b:f7:52:
                    9a:36:d0:61:ba:70:f2:ea:6a:96:5a:d6:8b:69:1d:
                    54:47:c3:7e:c5:ec:41:69:b0:93:59:24:13:d5:51:
                    b0:33:82:d8:d2:3f:53:03:dc:c2:b9:ad:a4:87:28:
                    49:b6:3e:cb:11:09:3e:79:d6:68:7e:57:dc:5a:ab:
                    50:2c:73:f3:fe:bb:bd:ea:15:0a:3a:fa:d8:4a:38:
                    13:5e:4b:cb:60:a5:5a:af:ec:e1:9b:ce:e6:fd:50:
                    0e:c7:99:79:77:50:86:e6:ed:aa:f8:11:09:e8:b4:
                    f8:a7:9a:b7:f3:a9:5a:95:e8:c8:49:30:1e:91:bd:
                    ab:2e:70:24:62:44:45:53:c0:c0:88:8a:c0:59:9c:
                    97:63:09:c5:ee:ca:0c:77:58:d6:5a:a3:6e:b5:8c:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:55:AD:DA:F8:EB:94:9C:47:74:B1:F9:C5:46:18:70:F2:1E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7197bee-536d-3bbd-a5e1-57013548ab70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:27:27:66:1c:be:52:c0:d6:e5:92:37:f9:4d:1e:60:88:9b:
         11:21:ba:2a:0b:99:48:a1:ca:0f:ab:3e:ba:2a:34:c5:56:12:
         32:d8:6c:36:8b:c6:f2:5a:b0:46:15:46:5c:4b:3d:7e:6e:eb:
         ba:f6:ad:bf:67:b8:27:1a:bb:e9:cf:11:50:ef:5a:dd:82:ea:
         8a:d8:a3:a8:2a:3b:94:d9:67:39:d6:98:c8:76:d6:57:e2:81:
         40:69:8b:9a:11:5c:cc:5e:a2:ea:d2:81:64:83:94:9c:d3:37:
         e4:b5:64:8a:a8:ec:70:82:b4:24:c1:65:97:b1:05:0c:42:09:
         37:b3:a6:8b:ac:9a:c8:0b:9d:29:f1:09:bd:f1:17:cd:bd:d4:
         bc:d7:49:4d:7f:27:b5:33:30:9d:ea:1f:4d:5b:94:7a:91:ce:
         88:bf:6d:95:4a:1a:41:45:2c:27:93:66:e0:87:74:ed:90:6f:
         e4:10:f0:10:c2:43:f7:b3:00:2b:b2:95:53:38:db:00:59:21:
         54:58:fc:e8:fd:bc:f6:19:02:9f:9f:cd:92:f4:dc:2a:6d:aa:
         5c:ef:8e:98:4f:7c:cb:87:73:1b:01:75:e3:10:09:df:6d:08:
         1a:df:63:86:04:dd:49:56:fb:24:18:61:27:4d:02:3b:53:40:
         e3:42:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:25:18 2026 by rpki-client