Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe2d2313-b511-3f9f-a82f-68390808c228.roa
File:                     fe2d2313-b511-3f9f-a82f-68390808c228.roa (raw, json)
Hash identifier:          wZyQFD1we3+GR2J0zYwegq5cO+xBa7735xIDOsxtLhU=
Subject key identifier:   E4:5C:5F:24:C5:53:69:2B:89:54:D5:77:6C:30:02:A0:04:47:FC:4A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EAF234EB895E71A55FF4DFE7C
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe2d2313-b511-3f9f-a82f-68390808c228.roa
Signing time:             Fri 31 Jul 2026 18:26:07 +0000
ROA not before:           Fri 31 Jul 2026 18:26:07 +0000
ROA not after:            Thu 29 Oct 2026 18:26:07 +0000
asID:                     81
IP address blocks:        152.46.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:23:4e:b8:95:e7:1a:55:ff:4d:fe:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 31 18:26:07 2026 GMT
            Not After : Oct 29 18:26:07 2026 GMT
        Subject: CN=74e8327c-2986-44ab-8b56-2cc81569b12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:1e:62:83:97:87:b3:0d:7b:06:08:f6:a1:
                    74:b2:57:03:a5:ea:d2:4c:8c:ac:36:da:7d:36:4a:
                    95:3d:00:88:54:06:a8:00:9b:13:69:8a:43:63:90:
                    8c:a8:d3:38:62:5d:90:cf:ca:47:5e:d5:26:10:f2:
                    9d:fb:c5:08:5b:20:0f:4b:72:34:da:e1:a5:95:fa:
                    b4:e0:12:3f:6f:f9:ec:07:ae:83:69:5e:d6:46:9d:
                    80:77:14:12:f3:92:71:b0:b8:d9:7d:49:85:3d:8f:
                    82:e1:b1:8b:0a:d2:20:2f:62:cd:b6:e7:99:75:88:
                    e1:eb:51:12:f0:a2:c7:0f:81:e0:56:a8:1f:a3:12:
                    52:04:0a:e6:8b:2d:6b:73:bd:7b:2f:54:36:08:cf:
                    80:37:29:fe:4f:2d:fc:a1:ce:f1:d2:60:b8:e0:de:
                    24:d2:7b:70:31:65:4a:b0:6a:69:4b:fc:6e:7e:2e:
                    f7:34:74:81:35:8e:c0:af:dc:58:01:e0:85:1d:22:
                    a0:70:9e:c5:1e:d3:7c:6c:42:75:db:df:23:fa:51:
                    73:cb:94:32:3c:4a:d8:fa:b2:77:24:cc:b6:7b:a8:
                    be:d0:31:3a:f0:99:43:d5:d8:9e:92:85:08:05:39:
                    bc:1a:6b:bf:48:5e:bf:c4:cb:74:01:d6:c3:4b:a2:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5C:5F:24:C5:53:69:2B:89:54:D5:77:6C:30:02:A0:04:47:FC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fe2d2313-b511-3f9f-a82f-68390808c228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:5f:7a:8f:ef:a1:7b:16:9a:df:32:5b:86:ba:0c:8f:42:
         65:b6:e3:be:2d:f0:f4:e3:59:9b:7b:98:ea:d3:7e:f9:37:4f:
         64:62:14:66:63:f0:b1:d1:ab:43:08:bf:2e:ab:eb:34:a7:a1:
         78:04:d3:dc:54:db:1a:fc:3d:78:4a:ff:a3:41:90:5f:61:06:
         05:77:f3:62:b1:e7:86:ef:e8:9f:34:83:57:8f:9c:9e:ef:28:
         35:2b:d7:05:9c:8a:2e:67:95:c7:2b:4b:af:bc:d3:bd:84:61:
         05:f1:a7:c9:61:c7:62:98:e6:30:61:ef:8c:bb:07:d9:d7:5c:
         f7:cd:fd:75:e8:4f:5d:9a:71:7d:b3:e4:7a:f7:46:88:47:c3:
         f8:20:86:c9:0c:ac:79:70:6d:e7:4f:f6:de:17:e7:68:38:15:
         de:53:56:14:09:9e:9b:7b:e7:0f:f5:e3:2f:24:a3:fb:89:0f:
         ef:b0:b7:fd:33:fc:b5:95:df:b1:8c:17:34:a3:d6:8f:79:ee:
         8e:0a:d8:07:5a:5d:5e:84:ec:e3:07:39:4b:13:e8:20:6f:84:
         fb:c1:71:2f:22:ae:74:d1:dc:83:1b:59:c8:48:81:da:a9:97:
         d3:98:c8:df:a6:5b:7c:fa:9e:6b:0b:80:13:9d:4e:c5:32:cc:
         c0:ce:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:01:30 2026 by rpki-client