Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fee9bb8-22f7-3bc1-8fbf-76ddbc1f1335.roa
File:                     5fee9bb8-22f7-3bc1-8fbf-76ddbc1f1335.roa (raw, json)
Hash identifier:          Z6+PI0sUHEROHQbs+aB7cG6roUHLf7Ln8F7X0WpNLJE=
Subject key identifier:   61:48:39:29:C0:5C:77:40:8D:8D:AC:1B:71:84:2E:E8:C4:89:5E:78
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796DBF9F80E0BE8BBDA3880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fee9bb8-22f7-3bc1-8fbf-76ddbc1f1335.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.22.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:db:f9:f8:0e:0b:e8:bb:da:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae39d81f-7fbf-4b78-b023-310ec9cdcc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:97:0b:44:0c:58:b3:9e:17:90:13:34:ce:06:
                    02:61:9d:8d:8f:42:81:70:0a:c7:29:7d:88:46:05:
                    e5:c3:f8:3d:3f:02:42:8c:68:03:fd:3b:f5:22:50:
                    46:59:90:73:99:6a:3a:7b:3f:87:78:90:39:0e:0e:
                    ee:91:7d:f9:de:73:0c:2a:e4:31:cd:86:b7:b4:9c:
                    0a:02:5a:4d:86:dd:c2:02:2d:00:46:37:ae:8e:56:
                    7c:a2:0b:3f:12:ac:63:a8:cb:13:6b:f6:7b:bd:90:
                    10:d0:a2:f6:6f:68:2b:dc:87:be:13:0e:03:10:96:
                    54:d5:0a:37:93:12:fe:fd:a3:07:45:04:42:bb:a4:
                    9d:55:05:a8:2f:90:32:de:0d:a3:e1:da:36:a0:35:
                    70:de:39:48:14:f4:13:07:9d:57:ef:6e:3e:7b:1b:
                    55:1a:c1:b5:2b:74:a8:20:7e:c0:53:59:25:e6:7a:
                    8b:3c:c1:58:7c:e5:cb:22:28:50:09:0e:36:1e:21:
                    ed:9a:df:d5:45:ef:f7:3e:78:c1:61:7c:d3:80:92:
                    19:40:82:98:23:97:d3:9a:99:ea:67:85:6d:30:0c:
                    d1:79:c6:f2:77:6e:1b:05:5e:7d:e3:c8:10:7c:f5:
                    ec:7e:b3:b1:32:e6:11:bf:14:80:5d:22:44:68:82:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:39:29:C0:5C:77:40:8D:8D:AC:1B:71:84:2E:E8:C4:89:5E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fee9bb8-22f7-3bc1-8fbf-76ddbc1f1335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:38:05:5c:df:44:57:42:ab:52:e4:62:e1:82:6b:d4:1c:d9:
         ea:6b:cb:6c:44:0a:19:27:15:77:18:e4:53:f9:7d:8a:9c:d1:
         c7:62:1e:2f:fd:f7:2c:cb:99:76:12:2d:fb:54:35:66:95:f4:
         8d:4d:a5:cb:97:58:a8:10:32:fc:00:8c:55:14:39:01:74:02:
         21:88:ce:e5:ad:6c:a9:eb:c5:ac:d6:d3:87:ee:9b:98:1c:74:
         6b:59:5b:71:cb:08:b1:b0:dd:49:b2:78:23:32:96:68:5e:27:
         d4:db:9b:bd:52:0e:84:13:0a:51:3b:e9:b8:26:69:04:31:3a:
         c7:45:9d:2e:e4:45:04:7b:66:15:6b:89:13:64:dc:0e:39:09:
         03:d3:f2:66:20:2c:49:df:c8:36:30:d4:67:ec:9b:97:dd:e8:
         63:08:8a:f4:04:39:fd:28:6e:4f:ea:b8:64:e7:8f:ab:8d:2b:
         b7:82:71:df:7a:7f:54:88:e7:60:bb:39:86:65:f2:36:17:70:
         45:3d:0e:4f:e8:e6:00:0e:11:25:8e:10:9e:03:85:86:e9:19:
         ca:99:78:e5:a9:92:f7:f9:a2:30:d9:47:52:88:53:8c:c3:37:
         7d:71:f1:3e:00:ba:6b:17:99:9e:13:c3:a2:f0:31:f1:ba:c3:
         c8:0a:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:34 2026 by rpki-client