Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3257c449-c0c7-3fd4-972d-262bec1662c5.roa
File:                     3257c449-c0c7-3fd4-972d-262bec1662c5.roa (raw, json)
Hash identifier:          DEtxOeSczQ23e2CwXelRMo/pu7xDNlV3Z4q0dA5PKK4=
Subject key identifier:   7A:B1:0B:C8:50:3F:C0:7D:F8:86:C2:91:00:7E:D5:C0:4C:CF:6D:6C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA3548FC92AA7F8057320
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3257c449-c0c7-3fd4-972d-262bec1662c5.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.46.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a3:54:8f:c9:2a:a7:f8:05:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e5ed30a2-3315-41ea-8ee7-a1062cbc5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:51:d5:88:c9:31:06:07:1b:ac:05:0f:8c:
                    7e:90:dc:33:22:45:65:a3:c0:55:e8:6a:6a:9c:0c:
                    64:c1:bd:b4:5e:52:ac:4e:59:3c:4b:1d:6f:42:de:
                    79:0b:f8:1c:28:81:9e:7e:f1:d8:b9:d3:31:34:89:
                    c0:b0:42:fb:ae:7a:b2:62:98:55:62:65:b1:4d:ec:
                    80:1b:60:13:8a:e6:72:a2:30:28:a8:21:f3:b5:eb:
                    cb:d2:d2:17:3c:46:c7:57:cc:19:96:87:07:0d:bb:
                    6e:4b:3f:cf:f6:6e:83:58:dc:b7:23:9b:c3:9c:4e:
                    68:42:74:2f:94:6d:25:43:e1:3a:54:28:d4:34:d9:
                    57:34:c1:5f:c1:2b:ca:f3:8d:97:fd:45:82:34:b4:
                    fc:25:d7:3a:a3:8a:44:6d:0f:08:1f:97:aa:5f:4e:
                    12:e3:85:34:6a:c7:89:10:c5:f8:4b:42:05:9a:e3:
                    bb:7c:01:23:3d:81:d8:9a:42:80:bd:c6:0d:86:f2:
                    a3:b7:ad:e0:57:8a:36:3d:88:fe:23:fb:fc:10:de:
                    6f:1a:45:75:77:c8:4f:82:ed:05:d3:c8:86:c9:26:
                    f7:f8:1c:a9:bc:af:53:62:cd:67:6f:50:f9:4f:39:
                    e4:ca:d1:83:5e:70:b3:b7:88:d7:f1:6a:38:43:a4:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B1:0B:C8:50:3F:C0:7D:F8:86:C2:91:00:7E:D5:C0:4C:CF:6D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3257c449-c0c7-3fd4-972d-262bec1662c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:12:82:df:7a:22:f3:ba:9e:e4:f1:50:a0:50:a3:61:20:21:
         3f:e2:38:8e:19:97:00:3f:8f:ae:47:e7:cd:9b:05:fc:28:b8:
         5d:41:e4:4c:2a:2c:35:01:05:d0:43:52:d0:51:88:64:bf:63:
         5e:5b:d0:d9:7c:75:df:77:81:aa:ea:0e:b3:89:94:ee:7a:09:
         42:9c:a5:bf:ae:83:30:48:4e:a9:36:da:79:8d:13:77:eb:fe:
         4a:7d:07:01:a4:67:71:af:69:da:32:f8:21:34:27:90:3f:86:
         dc:cd:d9:db:76:5a:05:0b:e3:42:0d:67:80:0d:eb:61:97:3c:
         01:0a:1d:3a:92:fc:56:a9:f6:54:f9:1a:fd:9d:21:d3:be:43:
         c7:d1:21:19:d0:3d:49:5f:d9:16:9d:88:05:e7:cb:51:32:c5:
         ec:1e:ee:6b:84:79:2e:b6:64:02:57:e3:4f:23:a6:99:93:d8:
         ef:2f:16:39:81:f1:3c:78:b8:1f:65:f3:11:79:73:b8:0b:a4:
         c0:ff:83:3a:04:34:8f:6b:80:ce:e7:e1:b9:cc:af:8c:f3:5f:
         38:da:8c:4d:ec:9c:23:f7:8e:e1:9e:a1:81:6a:9f:ca:1a:c3:
         a8:61:50:65:a2:33:9c:48:29:bc:05:02:c7:2b:42:ec:5e:28:
         f0:52:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:05:43 2026 by rpki-client