Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a30e4-ad68-3224-8f45-36506a695c2d.roa
File:                     358a30e4-ad68-3224-8f45-36506a695c2d.roa (raw, json)
Hash identifier:          3vGvNOfxLE6Ri3ZNVJyzF5nTkGsgqoQFRlmy66GvidY=
Subject key identifier:   E4:96:3F:F6:61:AF:27:46:93:62:61:89:3E:74:7E:08:22:39:59:85
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA79624048E872C1BCB5B8C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a30e4-ad68-3224-8f45-36506a695c2d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.48.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:24:04:8e:87:2c:1b:cb:5b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e1f7b085-f503-4621-90c8-bb9c0c8920ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:11:d7:35:77:ed:32:3c:ef:ec:97:1e:9d:
                    78:5f:96:ab:79:25:72:ac:d4:62:67:d3:ac:5f:f0:
                    5d:d4:6d:ad:53:5f:f5:61:17:b1:79:4b:d8:2d:c9:
                    4b:6a:e4:b1:2e:2c:46:52:e5:7e:e2:24:da:2d:7e:
                    a3:e7:b4:82:d3:3a:30:6e:f4:ff:d7:89:75:6c:15:
                    38:e4:5b:b5:8d:ef:e5:af:40:7e:f2:b5:df:f2:39:
                    65:d2:50:d7:5f:14:c0:a9:b2:1e:5f:b3:0d:c7:b2:
                    b5:64:f6:da:85:69:6f:a8:6f:ae:fd:3c:d6:ec:a3:
                    67:dd:59:4e:c8:a1:1d:17:68:d4:be:8b:d8:1a:7e:
                    78:8e:f3:26:7f:6b:b9:98:68:4b:b9:34:bb:82:39:
                    0c:71:1f:1e:78:83:a8:5f:26:e3:ca:61:97:7a:81:
                    c6:be:ca:f9:64:ee:65:a9:f9:c2:c6:5f:c2:4e:40:
                    10:50:b2:29:73:98:51:83:34:5f:0f:d1:37:df:4e:
                    a7:4f:61:51:25:3b:81:95:29:d1:67:7f:e3:16:3d:
                    6f:1f:2f:bb:e0:b1:33:e8:49:0b:ad:6d:7f:e5:12:
                    9b:87:b7:05:4e:ad:e8:40:85:b3:81:93:a1:49:6f:
                    b3:b6:75:b5:1a:43:4c:f9:36:9c:10:d0:ab:e1:4a:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:96:3F:F6:61:AF:27:46:93:62:61:89:3E:74:7E:08:22:39:59:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/358a30e4-ad68-3224-8f45-36506a695c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.48.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:50:52:51:c9:e9:a6:22:7c:26:47:98:52:33:c5:b7:08:0c:
         7c:2a:3c:7a:cd:bb:24:1f:bf:d1:aa:9d:e7:65:7d:55:a5:b7:
         3e:1d:61:07:d7:b3:ca:ca:42:37:e6:d8:b0:ff:b7:41:70:8d:
         04:01:42:1f:1b:35:39:18:65:5c:79:ac:25:be:6e:41:d3:53:
         c9:d5:1d:4b:40:55:a1:5f:43:db:c6:32:08:88:e1:9d:56:3b:
         7c:f7:04:0f:8a:91:30:a0:65:0c:0a:59:2e:39:4d:3c:e2:55:
         15:42:db:42:c0:48:75:aa:a4:94:9f:20:9b:f9:dc:2c:49:97:
         c9:91:e6:4a:6b:99:1d:30:f5:9c:57:eb:87:78:38:c3:75:0e:
         04:d3:df:f5:4c:ba:89:93:74:70:44:bb:32:cd:99:07:53:1a:
         d4:5d:98:c7:d2:4a:ed:36:46:ee:29:9b:87:21:03:6a:7f:f2:
         79:39:0b:71:d8:e4:70:05:da:0c:c2:95:6f:c1:d0:dc:7b:75:
         1e:fa:4c:3b:3c:14:cd:25:6a:c4:dd:64:7b:1f:5d:e1:51:83:
         64:56:7f:af:33:6f:82:76:df:0d:54:ea:01:3f:24:13:10:dd:
         14:c4:21:50:af:44:a2:9e:86:53:69:b0:95:ae:9a:83:69:d5:
         13:21:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:51 2026 by rpki-client