Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa
File:                     1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa (raw, json)
Hash identifier:          DVlvFOO+ky400tT3wHc2DqyL6arOPHGnyrKQm7WTw9k=
Subject key identifier:   18:55:54:38:F6:C0:F3:BB:6E:73:FD:63:B6:44:DC:21:9C:6F:3C:CE
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA190FEFC39E78DC86980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.45.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a1:90:fe:fc:39:e7:8d:c8:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=fd989094-ac65-4d77-9109-99d7a070104f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:dc:0b:d4:05:cc:21:5b:af:53:13:d4:28:
                    42:d2:34:c9:df:23:d0:f1:7d:e0:d6:7a:e0:a6:5e:
                    9d:9a:84:99:e2:46:52:c8:e7:bb:a3:55:a9:9f:f7:
                    43:e1:06:c5:d2:33:64:88:3a:5f:1c:fe:c7:c4:fb:
                    8d:72:3e:c5:96:89:01:79:9d:77:4f:f9:46:ba:59:
                    86:35:97:cd:d7:67:2b:4a:ab:0f:ff:8b:11:94:93:
                    69:09:ca:1a:60:14:3a:87:88:5d:ec:e5:31:8f:c4:
                    f4:2b:c0:52:d4:d9:15:20:b8:ef:ae:02:a1:53:17:
                    57:34:7f:22:33:f8:77:eb:4c:d9:39:a8:79:54:6e:
                    26:52:d5:9d:6b:24:d0:2d:a1:c2:1a:76:64:9b:65:
                    40:5a:c2:90:14:e1:af:ea:e1:fb:28:46:65:5c:7d:
                    bc:e6:37:3b:63:f8:a9:67:55:c5:dc:80:40:1f:9e:
                    79:8a:f6:29:1b:b8:5f:4b:a8:c7:76:b3:3b:90:f4:
                    b4:4c:f4:d3:f8:ba:46:a1:0a:42:16:d1:67:be:35:
                    4a:b3:7f:e3:05:dc:ef:6b:59:2d:7c:4f:ff:eb:67:
                    b2:f3:e8:87:b1:5b:64:0f:34:fd:17:f7:3e:01:58:
                    d4:e1:45:1d:ee:62:8e:fd:53:75:a6:f5:84:18:4a:
                    3b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:54:38:F6:C0:F3:BB:6E:73:FD:63:B6:44:DC:21:9C:6F:3C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:0b:af:f6:1d:37:e3:cb:e5:fc:eb:ed:1e:0a:69:b0:cf:
         7f:42:03:5a:64:68:7f:c8:5b:63:f4:b8:52:98:c3:49:e3:d9:
         8c:cb:de:1f:6b:34:c4:57:2d:b9:87:05:0c:ee:bc:a6:42:84:
         50:57:4c:1a:b1:d2:46:52:2e:83:b8:5d:65:00:ea:41:74:55:
         d9:9b:11:91:40:40:e9:47:29:68:a6:cf:39:3a:53:29:ae:a5:
         d7:6e:19:c9:5b:af:02:f6:91:23:8b:41:e8:9d:50:46:68:88:
         c1:0d:c5:36:eb:32:3c:f5:23:68:fe:05:bb:52:8d:14:37:ea:
         a9:fe:30:22:ed:01:b8:02:2f:ba:10:12:c2:56:b9:f5:0d:0a:
         12:b6:46:57:d4:a0:90:6e:3f:35:70:86:bf:b1:97:26:70:c9:
         4d:5d:2d:d5:0a:2d:42:43:ad:be:fc:b0:d0:0a:9a:fc:28:3d:
         f2:79:ef:8a:38:72:29:a3:93:f0:67:be:16:6b:c8:77:df:cf:
         6f:ad:81:a1:b4:41:5c:72:2e:70:c1:30:9e:c1:e3:a4:88:0c:
         cf:80:d1:44:de:12:b1:b0:4a:fa:39:a3:b5:66:2a:8d:ae:19:
         6c:a7:46:77:ec:cb:a2:bb:02:ae:f4:72:45:83:87:9a:7a:e2:
         88:ee:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:14:43 2026 by rpki-client