Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/17a3bb97-708b-332d-8253-74cda6ae78b1.roa
File:                     17a3bb97-708b-332d-8253-74cda6ae78b1.roa (raw, json)
Hash identifier:          /nMU3Kb9DGdQsRlTSANx2TzryUMoPXLqf8Jg/eg/nnY=
Subject key identifier:   A2:9B:AD:DC:29:67:E2:0D:B1:EB:8A:E2:DA:34:90:AC:80:80:F6:BC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC219ED2BFC2C2397C0C580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/17a3bb97-708b-332d-8253-74cda6ae78b1.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     394407
IP address blocks:        152.27.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:19:ed:2b:fc:2c:23:97:c0:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=1e2dc2aa-b99a-481a-9a31-db425f06e520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:64:6f:80:f4:80:48:64:4a:0a:e3:96:41:
                    01:c3:59:00:a7:31:57:78:33:31:6d:b5:e5:7a:76:
                    ba:48:2c:f5:dd:64:4a:96:10:6b:a3:38:b2:0c:47:
                    7a:8a:d5:d1:cd:48:80:91:f5:e4:c1:b5:e6:d6:4c:
                    ee:8a:04:9a:5e:04:df:71:3e:55:fd:40:c3:08:db:
                    3c:99:c1:b4:69:2c:26:f9:d9:1d:ba:27:c6:82:db:
                    93:82:ce:2c:d2:ac:05:e5:04:56:0f:4c:e0:76:64:
                    82:0d:8b:94:c7:37:8d:74:5c:c3:20:15:d8:07:bd:
                    5f:ac:85:7e:01:e4:da:ba:5c:10:76:d5:51:c6:ed:
                    80:0e:2d:0f:c5:8e:d8:20:51:51:2a:4f:53:9f:fe:
                    5e:56:a3:62:03:d9:f3:8a:2b:7b:c9:2b:fa:92:7a:
                    e4:0b:14:ce:f5:10:ef:90:ad:3c:5e:cf:53:92:60:
                    0d:94:60:e4:53:92:b2:a4:82:fb:b7:6f:20:72:c7:
                    2b:b7:2a:ef:2d:df:1e:6f:a7:b1:a0:d5:4c:7a:53:
                    1b:e8:09:c5:fc:bf:65:c2:fa:8e:c0:65:f9:1e:52:
                    55:78:42:d5:43:3e:96:c9:fa:13:39:74:59:8e:a6:
                    92:99:ad:13:ad:96:74:35:13:cd:9d:6f:9a:1e:4a:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9B:AD:DC:29:67:E2:0D:B1:EB:8A:E2:DA:34:90:AC:80:80:F6:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/17a3bb97-708b-332d-8253-74cda6ae78b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.27.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:57:bb:62:6b:02:a2:a7:64:bf:8d:32:07:24:d5:af:a5:48:
         ae:0c:2d:e7:12:18:b1:5b:9e:73:45:2d:60:61:69:a2:01:32:
         91:30:2c:d4:ff:08:05:80:ba:65:e1:3b:44:59:54:35:12:ac:
         a5:2b:54:c2:c9:89:8a:9f:30:f7:51:2e:b2:6b:e6:e0:3b:2c:
         c6:76:49:9d:7c:d2:fd:a4:bb:71:3f:ee:b3:d6:20:2b:63:a6:
         97:c5:12:54:27:41:5b:a2:08:de:0f:a5:a4:c2:fb:4a:2f:1e:
         fc:13:5e:10:02:26:06:f1:e9:cb:23:5e:9c:70:9d:6d:99:69:
         9b:bf:e9:fc:62:e3:54:50:31:75:fd:26:4d:d2:ed:c4:e9:8d:
         48:e8:bb:97:2a:c1:e1:d9:ca:0b:e2:7d:79:bf:8d:68:0e:db:
         d6:c0:5b:dc:0c:57:eb:c4:4d:d1:75:6f:59:70:60:35:66:83:
         a9:5e:ae:b4:78:2e:ab:80:bd:d7:97:cd:b9:40:d2:25:a2:ef:
         08:4f:68:67:85:07:db:fc:5c:3c:7a:39:68:0b:58:7a:df:b6:
         23:ef:c5:7e:fa:af:aa:07:74:bc:11:cb:cb:03:cb:a1:95:2c:
         14:a3:40:94:f6:82:b2:f8:eb:b4:de:c9:20:64:80:c6:27:e6:
         f7:ad:f7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:16 2026 by rpki-client