Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6ee6e106-a9f1-313d-94fc-2a9e5121a531.roa
File:                     6ee6e106-a9f1-313d-94fc-2a9e5121a531.roa (raw, json)
Hash identifier:          8JuMS/YYfsR6pV51F2BBr49sP+BRJMV/9OUzzywBGVQ=
Subject key identifier:   FE:19:BB:12:7A:C6:1F:95:BC:D2:B6:A8:42:0B:2C:66:F7:EB:CD:E2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21C09A93EA7BFBB0E2400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6ee6e106-a9f1-313d-94fc-2a9e5121a531.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.46.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1c:09:a9:3e:a7:bf:bb:0e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=d5135edc-ce42-4ded-93c1-dbc76c9ce3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c5:4d:20:9a:e2:a2:ae:1d:ee:f9:7c:7c:79:
                    8f:5c:16:57:da:a0:a3:51:b0:0f:42:4d:73:17:eb:
                    d4:51:79:72:f5:07:e4:13:61:bd:68:24:f5:ff:ee:
                    99:53:58:8a:79:be:e1:9e:c7:a0:90:c5:1a:41:0c:
                    5e:d9:2d:ce:61:5a:bd:26:45:cb:99:ff:22:bf:1e:
                    f8:45:a8:df:54:53:b4:d9:fa:74:02:1d:eb:be:c3:
                    5d:7f:65:19:1a:48:cb:fb:05:a9:f0:eb:57:fb:3f:
                    ca:73:54:dc:c9:7e:6e:5e:d5:71:14:0c:1c:65:62:
                    98:9e:d6:e8:e4:a1:e8:0a:81:e9:87:02:f5:7c:80:
                    0d:74:8e:d9:f8:89:3e:5d:da:d5:64:7b:13:57:d6:
                    22:0b:c6:33:1b:3e:5e:c3:2e:59:3a:dd:91:30:98:
                    09:ab:50:da:98:84:69:34:0d:a3:86:5b:7d:0b:c3:
                    3b:67:25:10:ac:21:86:2b:6c:16:70:32:6e:37:b7:
                    87:dc:d5:6b:4a:5f:59:e9:4e:9d:03:9a:9a:95:c7:
                    8c:42:04:69:01:db:af:2d:f2:ce:38:0f:4e:c9:68:
                    8e:03:09:3b:47:67:7e:0f:a3:66:de:b5:08:c5:a2:
                    54:bb:a8:04:eb:ba:65:b5:53:c6:7c:fb:15:53:79:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:19:BB:12:7A:C6:1F:95:BC:D2:B6:A8:42:0B:2C:66:F7:EB:CD:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6ee6e106-a9f1-313d-94fc-2a9e5121a531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1d:02:44:10:3d:d3:0e:0d:0a:83:e4:73:80:db:a0:ed:97:
         56:5a:ab:fc:34:2b:11:dd:c4:fa:0f:08:f7:a1:d9:c6:73:be:
         ea:dd:b6:1f:1a:77:7f:11:fd:20:2d:fe:b5:65:85:72:25:39:
         de:3a:b9:6c:f4:24:40:a5:02:ce:9a:69:84:b9:c0:c7:38:ba:
         5a:44:4a:0f:2a:e5:5f:cd:1f:ec:06:35:78:eb:5c:65:9d:7e:
         61:c1:01:08:c6:24:88:bd:e4:3b:ad:ac:6b:7e:2d:ab:9a:31:
         70:97:8a:e6:48:5a:43:90:a2:bc:82:10:f4:25:77:02:6f:0f:
         50:3f:24:bb:b0:ae:55:8e:2a:8d:4c:fc:3e:32:e7:19:17:de:
         d2:f6:b8:96:a2:b6:85:74:0b:91:ce:6d:59:a0:67:5b:33:97:
         aa:d3:14:a0:16:a5:12:5e:29:d7:92:98:d0:a6:cb:22:cd:6e:
         15:a9:3e:23:79:4b:ef:32:41:96:18:8f:24:bf:3c:d1:3f:20:
         5e:74:fa:0b:53:2b:ce:ed:15:40:0c:1e:65:98:c5:74:ad:46:
         32:cc:0e:60:7a:e1:47:d0:58:da:45:36:c4:0d:58:03:14:fe:
         de:fa:03:85:35:c9:8b:16:6d:93:35:96:14:6c:ba:4c:31:4b:
         55:2d:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:24 2026 by rpki-client