Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff10220-18d7-3e08-91ec-4ea2a2300952.roa
File:                     1ff10220-18d7-3e08-91ec-4ea2a2300952.roa (raw, json)
Hash identifier:          ViAhu+WJI8bx3GxkbyfbwcKxwAmVrDr1qMQ+k8IUgus=
Subject key identifier:   6D:C1:16:E9:5A:45:79:E4:8E:EE:D0:95:17:55:52:E7:20:EF:4D:04
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21A32023B84649DA03740
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff10220-18d7-3e08-91ec-4ea2a2300952.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     6559
IP address blocks:        152.34.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1a:32:02:3b:84:64:9d:a0:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=58674cef-2eff-4ce2-a762-4b18cd9902a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:9b:a2:7b:1c:73:ca:bf:a1:95:dc:87:24:
                    fe:f8:72:4c:2d:87:54:b3:6a:67:27:26:79:39:93:
                    35:d4:03:93:27:5f:6e:53:24:9e:b1:50:2b:d7:e9:
                    53:5c:4a:38:0e:64:1c:c2:60:5c:c5:39:5f:ea:f6:
                    a9:cf:e2:cc:9c:ec:28:25:b4:c9:3e:d1:49:63:eb:
                    52:dd:5b:87:03:07:0e:1b:7f:3d:16:24:27:5b:f1:
                    9e:48:07:cc:f5:ca:8c:9f:f7:1a:41:d1:bf:a8:cc:
                    cc:ce:21:dc:3f:89:8d:68:ba:e3:a9:d5:17:1f:51:
                    27:84:f8:c8:4b:45:fc:55:5d:fa:58:b8:b5:9b:e2:
                    2d:95:61:74:24:11:1f:36:95:33:e4:17:5c:f5:db:
                    15:b7:9e:cd:7b:10:f1:e3:ae:9a:af:12:28:b1:e3:
                    d7:44:21:2d:3c:0e:f2:20:42:47:6c:5e:8f:89:7a:
                    57:d6:e8:55:a0:99:74:be:c6:ed:6f:50:ee:a9:27:
                    87:a2:cd:71:85:a7:51:ef:68:e5:8a:d0:97:07:a7:
                    2f:52:d9:64:28:ce:7d:f8:ac:d4:1b:7f:50:42:c1:
                    e7:5f:f9:69:a3:e8:bc:15:1d:3d:df:f8:62:6d:47:
                    ce:74:5f:6d:84:b7:d2:16:82:00:c4:08:f9:dc:ad:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C1:16:E9:5A:45:79:E4:8E:EE:D0:95:17:55:52:E7:20:EF:4D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ff10220-18d7-3e08-91ec-4ea2a2300952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4a:ae:38:8c:f2:54:88:55:2c:00:ef:04:85:c2:ee:e5:cd:
         90:9c:ff:c3:13:65:a9:ba:45:f3:11:c1:dd:d0:66:bc:2e:05:
         95:af:35:4a:f2:c4:5d:f8:f3:73:a3:34:2e:41:94:fa:9c:d0:
         62:70:8d:7d:f9:bb:a9:d2:be:15:12:bc:1c:f5:ae:51:5d:d2:
         12:3f:77:27:1b:9b:99:bc:75:bd:ae:86:ad:ec:22:44:08:bd:
         52:e1:6e:69:23:64:ba:58:d7:4a:68:d3:0d:5e:14:50:e9:01:
         fb:b7:3c:33:62:41:90:d2:66:59:d0:80:3d:01:c0:73:67:5d:
         2e:c8:a2:b0:af:95:3e:00:57:01:aa:09:db:00:b9:47:64:04:
         64:1e:b0:13:7e:9e:e7:4e:02:3e:d3:84:29:27:70:c7:32:5b:
         e2:8f:9e:fa:56:0c:93:51:bd:58:26:0a:61:56:8b:24:a7:56:
         4f:8f:ec:6a:eb:f3:4a:c6:3f:bb:d7:09:dd:69:35:29:8b:95:
         65:8c:6b:76:6d:e7:b0:72:3e:12:86:cb:33:56:81:00:46:77:
         b4:36:07:5a:9b:1b:b3:73:d7:e4:c9:f7:24:a8:98:4f:1a:cb:
         1c:cf:2e:c9:38:8d:dd:dd:9e:9f:0f:21:46:f0:1b:52:99:d6:
         70:34:d2:c1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzrwhoyAjuEZJ2gN0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NTg2NzRjZWYtMmVmZi00Y2UyLWE3NjItNGIxOGNkOTkwMmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilebonscc8q/oZXchyT++HJMLYdUs2pnJyZ5
OZM11AOTJ19uUySesVAr1+lTXEo4DmQcwmBcxTlf6vapz+LMnOwoJbTJPtFJY+tS
3VuHAwcOG389FiQnW/GeSAfM9cqMn/caQdG/qMzMziHcP4mNaLrjqdUXH1EnhPjI
S0X8VV36WLi1m+ItlWF0JBEfNpUz5Bdc9dsVt57NexDx466arxIosePXRCEtPA7y
IEJHbF6PiXpX1uhVoJl0vsbtb1DuqSeHos1xhadR72jlitCXB6cvUtlkKM59+KzU
G39QQsHnX/lpo+i8FR093/hibUfOdF9thLfSFoIAxAj53K01JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG3BFulaRXnkju7QlRdVUucg700EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMWZmMTAyMjAtMThkNy0z
ZTA4LTkxZWMtNGVhMmEyMzAwOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmCIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfUquOIzyVIhVLADvBIXC7uXNkJz/wxNlqbpF8xHB3dBmvC4Fla81SvLE
Xfjzc6M0LkGU+pzQYnCNffm7qdK+FRK8HPWuUV3SEj93Jxubmbx1va6GrewiRAi9
UuFuaSNkuljXSmjTDV4UUOkB+7c8M2JBkNJmWdCAPQHAc2ddLsiisK+VPgBXAaoJ
2wC5R2QEZB6wE36e504CPtOEKSdwxzJb4o+e+lYMk1G9WCYKYVaLJKdWT4/sauvz
SsY/u9cJ3Wk1KYuVZYxrdm3nsHI+EobLM1aBAEZ3tDYHWpsbs3PX5Mn3JKiYTxrL
HM8uyTiN3d2enw8hRvAbUpnWcDTSwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:15 2026 by rpki-client