Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa
File:                     3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa (raw, json)
Hash identifier:          g1SXEa4FX/ggOYIT0qWZUyyHTkPLQqSn/AG7QfDChqE=
Subject key identifier:   A3:22:BB:54:00:88:27:01:33:19:34:15:3F:72:0E:FE:18:CE:C4:1C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21DB8170A0129D2540700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.46.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1d:b8:17:0a:01:29:d2:54:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=ede21b98-7866-471e-b79b-d9042f58eaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:30:70:58:0e:97:d8:1d:2f:8c:e5:c7:e9:
                    f5:e5:b3:80:27:e9:36:46:e4:d3:a9:61:6a:8a:51:
                    a8:ea:39:8c:30:28:98:3b:1c:cd:56:7a:33:24:8e:
                    5e:b7:a3:da:15:3f:16:19:b6:ab:e2:c7:bd:e1:5f:
                    70:ad:cf:5e:96:2b:e5:97:17:8c:ff:e0:f5:bd:85:
                    c1:95:41:54:92:55:a8:1c:d7:db:31:72:8d:a0:58:
                    ce:41:92:55:71:e9:fc:ee:34:be:b1:6a:fe:9e:9b:
                    16:2d:19:b1:66:d9:8b:35:70:3b:d6:4d:e3:44:8f:
                    a7:37:8d:a6:1e:49:46:4d:8d:95:54:73:f8:b1:b7:
                    08:ba:e9:9e:4b:7c:fc:eb:60:ed:28:53:25:16:b9:
                    dc:2f:a1:91:a4:91:fe:6c:75:db:56:14:9c:58:81:
                    01:44:d7:c7:49:fa:9a:fe:82:86:48:0b:67:05:67:
                    54:4d:97:2e:e2:6f:04:50:3c:85:27:f8:44:6c:5f:
                    c1:46:e9:68:e2:21:44:f4:e8:77:d6:c8:ff:21:59:
                    ca:4a:3f:1a:03:c1:6c:6a:13:15:e2:b8:c8:4f:38:
                    1c:a8:27:69:84:5e:89:85:de:d9:5c:ad:e6:4a:1f:
                    b0:8c:bb:2d:1a:64:66:3c:69:e2:16:4f:4b:b7:07:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:BB:54:00:88:27:01:33:19:34:15:3F:72:0E:FE:18:CE:C4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f9e49e0-43a5-3d39-b46b-1a7b7f9d987a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:7d:4e:63:41:72:02:30:cc:e1:ee:46:16:c2:3a:46:13:
         43:43:1c:16:5a:b2:3d:bb:bc:ed:99:1e:c5:d6:de:3f:a3:83:
         85:81:92:1c:92:dd:a2:fe:d5:25:06:75:d0:0b:db:6e:e9:95:
         e2:f5:ea:24:39:89:f7:45:16:28:91:86:13:8b:23:f2:e0:c3:
         85:30:ee:b1:29:b8:24:2a:42:06:c0:b3:f9:2b:17:3c:39:25:
         fb:42:56:59:7e:37:1b:dc:49:3e:6a:a6:b9:fe:be:d5:65:c3:
         f2:d6:23:94:47:95:99:73:8c:4c:67:16:5c:76:eb:26:80:b3:
         72:ba:37:30:29:56:a9:7a:9a:05:a6:c5:b9:99:61:98:9f:30:
         a9:48:f1:fd:20:34:c9:de:05:d1:14:87:e4:4f:5a:de:28:77:
         9c:41:b7:d9:58:99:89:7c:59:14:88:aa:db:0b:16:a4:11:64:
         9c:36:12:0f:01:01:64:33:f8:f6:96:86:71:28:d2:44:54:ad:
         a1:64:ec:09:06:b5:90:9e:a0:4c:d6:88:e2:60:3e:05:0b:88:
         30:28:18:65:9c:74:6f:9a:84:da:5b:07:05:e8:80:eb:f3:8a:
         93:ac:92:a2:04:70:c5:f7:e7:ef:78:9c:30:35:1c:d4:d2:d6:
         b5:05:ac:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwh24FwoBKdJUBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
ZWRlMjFiOTgtNzg2Ni00NzFlLWI3OWItZDkwNDJmNThlYWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+EwcFgOl9gdL4zlx+n15bOAJ+k2RuTTqWFq
ilGo6jmMMCiYOxzNVnozJI5et6PaFT8WGbar4se94V9wrc9elivllxeM/+D1vYXB
lUFUklWoHNfbMXKNoFjOQZJVcen87jS+sWr+npsWLRmxZtmLNXA71k3jRI+nN42m
HklGTY2VVHP4sbcIuumeS3z862DtKFMlFrncL6GRpJH+bHXbVhScWIEBRNfHSfqa
/oKGSAtnBWdUTZcu4m8EUDyFJ/hEbF/BRulo4iFE9Oh31sj/IVnKSj8aA8FsahMV
4rjITzgcqCdphF6Jhd7ZXK3mSh+wjLstGmRmPGniFk9LtwfU2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMiu1QAiCcBMxk0FT9yDv4YzsQcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2Y5ZTQ5ZTAtNDNhNS0z
ZDM5LWI0NmItMWE3YjdmOWQ5ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnQfU5jQXICMMzh7kYWwjpGE0NDHBZasj27vO2ZHsXW3j+jg4WBkhyS
3aL+1SUGddAL227pleL16iQ5ifdFFiiRhhOLI/Lgw4Uw7rEpuCQqQgbAs/krFzw5
JftCVll+NxvcST5qprn+vtVlw/LWI5RHlZlzjExnFlx26yaAs3K6NzApVql6mgWm
xbmZYZifMKlI8f0gNMneBdEUh+RPWt4od5xBt9lYmYl8WRSIqtsLFqQRZJw2Eg8B
AWQz+PaWhnEo0kRUraFk7AkGtZCeoEzWiOJgPgULiDAoGGWcdG+ahNpbBwXogOvz
ipOskqIEcMX35+94nDA1HNTS1rUFrB0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:27 2026 by rpki-client