Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/418261ba-cbbd-3778-be67-ea9be029a162.roa
File:                     418261ba-cbbd-3778-be67-ea9be029a162.roa (raw, json)
Hash identifier:          ZB1I2i+wzfpqo1l7wzT2Srp/zz7122/UpT2O0By9BOU=
Subject key identifier:   BF:7B:82:DF:BB:90:0A:E4:1B:CE:7B:86:40:0B:DD:F0:C4:94:68:2E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9FDDB28350A22CD5F600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/418261ba-cbbd-3778-be67-ea9be029a162.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.22.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9f:dd:b2:83:50:a2:2c:d5:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=8e68a8ef-53f0-4d72-b497-a685f9910825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:00:3d:bc:7d:e2:9e:5c:0d:6b:56:3d:3a:
                    52:36:6a:3e:ac:17:88:b7:39:e4:00:61:62:ab:1b:
                    18:87:e4:76:41:11:66:a2:86:5b:c4:e7:af:6e:01:
                    83:e3:b0:88:99:2f:90:e3:69:5a:95:90:52:2b:3d:
                    ad:72:b5:df:cb:fe:d5:88:0e:5b:d2:17:c2:0f:a9:
                    4e:61:b4:bf:b3:f7:d3:7b:fa:43:16:28:e5:ee:36:
                    6f:af:c1:ac:f1:48:66:05:b9:5a:2d:a3:ac:8c:0d:
                    8e:13:79:7b:ba:66:e0:84:96:5a:01:d8:ad:d5:54:
                    03:6c:24:fe:b6:f2:32:ca:48:88:68:8b:78:92:3e:
                    f2:66:aa:42:b2:26:b2:4d:22:20:0c:82:99:04:f7:
                    69:fb:59:a5:0a:12:70:a0:63:ee:5a:aa:7f:e9:50:
                    2a:77:24:4b:8a:44:f6:c0:11:ea:f4:91:be:84:1c:
                    58:03:4f:00:5f:32:22:11:b3:d3:4c:76:26:d8:d3:
                    da:c5:58:f5:fd:ff:36:89:8f:01:27:2b:29:37:7f:
                    13:9d:f4:70:e5:98:70:68:d0:fe:a5:e6:b7:ed:d4:
                    09:48:b7:4f:e3:82:6b:95:21:e5:4f:03:a8:ab:24:
                    1c:c7:02:98:77:f7:29:b7:98:1e:84:75:3a:fb:5b:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:82:DF:BB:90:0A:E4:1B:CE:7B:86:40:0B:DD:F0:C4:94:68:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/418261ba-cbbd-3778-be67-ea9be029a162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:91:aa:ae:c8:1a:d6:aa:20:65:8d:03:2c:57:7c:0d:77:48:
         47:ba:9e:01:71:fc:4c:9d:82:e1:ee:c9:8c:06:00:26:44:56:
         53:56:1b:be:f3:6b:08:d9:10:f9:0e:b8:22:78:06:ab:21:d8:
         f1:f1:9a:08:d2:34:ae:f2:8c:b3:39:f8:60:ca:74:34:a2:e9:
         30:68:d1:f2:27:32:11:a5:ae:9c:bf:1a:9a:f4:33:ef:70:ee:
         c3:e7:d7:6d:1e:35:58:f1:5a:30:d5:98:18:33:f6:63:fe:f4:
         f5:31:5a:31:cd:a9:dd:a0:fc:c7:09:c1:45:55:20:ad:7a:93:
         02:3a:0e:c9:70:05:03:6e:3d:8c:93:52:fb:2d:da:9a:33:82:
         4c:89:22:74:86:e9:eb:e3:05:65:a2:19:6e:33:5f:3b:ba:0b:
         14:58:1f:59:e0:6d:84:76:99:32:c9:98:a2:70:df:27:a0:89:
         af:2e:e1:31:52:cf:ab:d7:84:a5:db:56:a5:c9:55:62:d1:78:
         56:58:df:3f:61:5b:7b:e2:ff:30:9b:9f:a9:4b:2e:8b:3d:90:
         04:61:9f:71:91:23:b2:5b:c4:a5:d4:b0:33:ea:a6:b6:a7:c7:
         df:85:4f:b2:4f:5c:2c:40:1b:ba:0a:ee:72:49:47:cd:f4:9b:
         df:03:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:59 2026 by rpki-client