Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0db4f936-a440-3143-9afc-447d4325e17a.roa
File:                     0db4f936-a440-3143-9afc-447d4325e17a.roa (raw, json)
Hash identifier:          MKTZY4jTfVMmUrg8q2qHEZINd47dkwac66UHmHmcKvI=
Subject key identifier:   8D:1E:E5:09:E0:AA:10:EE:C9:B0:04:7F:CA:22:AD:2B:05:25:9C:E4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21BC5540187BF1E5C1380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0db4f936-a440-3143-9afc-447d4325e17a.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.46.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1b:c5:54:01:87:bf:1e:5c:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=e5aee057-009e-45ff-812d-d4fc34d1143a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:a0:76:f6:f5:6e:97:70:76:8b:4d:97:81:
                    9c:5b:1b:5c:f4:11:2a:1f:c3:7a:5e:87:d2:7c:d3:
                    ba:59:0f:39:e1:82:90:c3:c9:d4:00:2a:8d:c6:c3:
                    5f:6e:4d:41:24:b1:7b:88:30:77:9f:93:a6:c3:49:
                    87:52:31:c3:90:fa:5d:8b:97:be:d5:5b:9e:3a:fe:
                    1f:aa:a6:4e:fa:61:85:95:c0:22:ed:e5:66:39:ab:
                    21:1f:01:e8:61:4d:42:2f:bc:c2:f9:ea:bf:01:47:
                    db:63:da:35:1d:19:6d:ed:8e:fe:53:42:95:9d:0e:
                    51:ac:d5:ba:de:26:2b:49:31:7c:2f:95:d4:bd:e2:
                    62:4e:b7:e1:16:9c:78:c0:29:0b:49:54:b1:05:d2:
                    96:39:b6:ca:da:c1:45:40:45:fa:3a:3e:ea:78:45:
                    aa:a7:db:8c:10:f6:cc:28:f0:70:06:dc:ab:b9:42:
                    e1:c6:59:ee:59:c6:ab:54:43:8d:9b:13:27:12:75:
                    dd:f1:d2:54:92:a5:49:bc:3c:62:64:d3:50:b1:60:
                    f8:54:b6:64:c9:87:52:93:08:14:39:b2:db:4b:02:
                    9d:0d:e0:84:0f:c3:e8:a4:fc:54:ac:ef:40:48:33:
                    a5:76:e1:99:53:3a:7b:89:19:04:c4:c1:da:27:ae:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1E:E5:09:E0:AA:10:EE:C9:B0:04:7F:CA:22:AD:2B:05:25:9C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0db4f936-a440-3143-9afc-447d4325e17a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:3c:cb:e6:16:e7:3f:58:33:76:34:d8:8a:04:b9:a6:b0:
         66:fe:aa:01:76:6e:cd:7d:26:05:22:d0:25:0f:a6:89:d6:a0:
         80:3e:af:b1:83:19:69:2a:5f:40:a1:cf:ab:ab:07:30:32:7a:
         69:f4:97:4e:c0:a3:bd:c8:9d:3a:b4:53:23:49:97:c0:e8:14:
         1c:b0:41:ea:2a:03:47:57:3b:fa:27:34:18:79:1a:75:70:c9:
         8f:f7:62:8c:a5:2d:0d:6d:6c:7c:6b:90:c0:30:c5:26:50:30:
         64:e7:b1:a5:6b:97:47:2d:1e:33:3d:31:3b:a7:a3:2a:25:10:
         23:9b:98:c0:26:f2:8e:35:53:85:eb:01:b4:ba:fa:ca:dd:7c:
         f9:5b:1a:ce:04:d8:fa:5a:4e:7e:08:18:d7:99:f7:39:9f:3b:
         3e:36:d0:d8:34:d9:62:3b:c5:97:73:01:86:eb:50:86:5e:fa:
         00:06:4e:03:40:40:9d:c6:58:1c:6f:62:6d:36:03:6b:ce:8e:
         5c:3b:ba:8b:57:30:2c:68:e9:9e:65:91:4a:a7:fb:1b:f7:06:
         11:82:78:0f:01:3a:d1:f2:22:97:2e:99:d0:3c:a3:52:3b:2f:
         7e:cc:f5:07:2d:6e:a2:49:01:3f:be:9b:0b:0a:ec:ed:33:eb:
         7f:96:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:16 2026 by rpki-client