Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/13568bc8-a2fd-3ce7-8752-2516c5544e8a.roa
File:                     13568bc8-a2fd-3ce7-8752-2516c5544e8a.roa (raw, json)
Hash identifier:          puL9hGcjx5P4nYxph+91xr+AF3qX5OzfoSKLJ0kpvh4=
Subject key identifier:   F1:F2:26:11:48:95:95:89:C1:37:AE:C6:60:4B:05:D5:23:A2:A9:B7
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA3A6F421596E3CC0F2A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/13568bc8-a2fd-3ce7-8752-2516c5544e8a.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.55.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a3:a6:f4:21:59:6e:3c:c0:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=fca79aa0-b695-4a04-9c2f-eb39640814db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7d:38:b7:d6:31:b8:3f:6e:74:49:70:e7:ad:
                    d3:ef:21:e2:57:1a:57:dd:b2:fb:6e:90:cb:8f:64:
                    f4:93:d5:34:8d:3f:99:aa:3c:df:6b:27:fd:ef:5d:
                    fd:fa:cf:11:22:c1:6c:ec:cd:39:19:48:eb:52:51:
                    6f:13:10:48:69:90:57:a4:09:e8:36:1f:2f:03:9a:
                    c7:39:ce:fd:b7:a2:05:81:6f:4f:4c:39:8d:4d:dd:
                    2a:f5:e1:ed:70:a8:41:2d:aa:12:5a:7f:99:96:43:
                    c7:87:a1:e0:71:7f:d9:6c:c8:e0:51:29:63:c9:8e:
                    77:2c:be:65:3e:97:9a:3c:ed:d3:8b:a4:0e:82:b9:
                    2c:21:1e:84:34:ee:3b:49:b2:79:11:3e:60:65:19:
                    88:9c:0a:40:9f:32:22:22:3a:37:6d:8a:d8:95:34:
                    f0:25:f3:65:82:af:e0:ee:e6:c6:94:76:ed:26:c8:
                    df:2a:2b:fb:42:e6:9a:8e:71:c6:06:fa:d5:bb:48:
                    f7:36:4e:67:8a:c7:d4:1a:a9:e4:2f:0d:a6:0b:a1:
                    01:ce:38:f0:2c:71:d4:5a:41:6e:e2:19:c9:47:3f:
                    39:67:2c:4f:a2:9a:71:6a:00:36:2e:1e:9e:e0:6a:
                    78:e5:21:23:fc:7e:10:e6:28:8b:cb:de:04:23:ec:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:26:11:48:95:95:89:C1:37:AE:C6:60:4B:05:D5:23:A2:A9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/13568bc8-a2fd-3ce7-8752-2516c5544e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:17:08:6a:b8:6c:87:85:f8:75:ed:21:5b:68:65:13:31:
         11:ac:1c:00:f5:0c:57:ab:79:c6:1f:14:94:1c:ae:9a:8f:7a:
         5b:9d:72:1c:fd:77:02:ab:e4:b4:7a:be:e5:fb:f2:f2:31:f2:
         7f:cb:6b:11:21:c3:17:5a:d6:65:98:23:29:a8:6f:1b:5c:8a:
         74:f7:73:8d:d6:d1:60:32:9b:32:56:12:fb:d4:48:3b:1b:a2:
         81:07:07:6f:24:1a:c7:a1:45:49:12:fa:fc:5e:db:53:22:30:
         09:83:68:dc:d1:4f:21:3a:26:9d:aa:d5:93:72:bc:77:23:b8:
         6a:7e:6c:d7:b3:28:89:9f:d5:3d:3d:3d:0c:2d:2e:bf:d0:bd:
         b5:9c:97:1f:17:ab:9a:1b:93:68:25:27:c5:14:da:43:da:8e:
         79:f1:9e:37:57:71:01:87:31:b9:30:fe:59:8a:bc:c8:bb:98:
         9a:be:21:bd:6a:51:e3:ee:32:e7:b4:82:21:07:28:35:fc:12:
         73:f7:95:0a:1c:2f:b1:e9:09:16:d2:c7:50:fe:6e:03:94:bb:
         53:65:3e:0f:04:20:ea:8a:c3:13:9d:35:0d:d1:85:0c:7d:2b:
         0d:8d:2f:f2:ca:59:37:db:47:ad:ac:89:97:98:93:b2:57:46:
         6e:ff:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:10 2026 by rpki-client