Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e9da181-5220-36dd-bc15-75beae031d75.roa
File:                     7e9da181-5220-36dd-bc15-75beae031d75.roa (raw, json)
Hash identifier:          BRSJBQO6Jz+Ses+C+etCLIdTgwf0TfVcmtYfL4EWabw=
Subject key identifier:   04:7B:60:9E:10:96:48:2B:76:D8:1E:D2:06:9B:21:71:2B:4C:2E:35
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796D62DB935F0AB08662700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e9da181-5220-36dd-bc15-75beae031d75.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.46.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:d6:2d:b9:35:f0:ab:08:66:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e90c9bc9-564e-412f-8e2f-a341b50a77df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:9f:31:00:12:89:d8:b5:be:6a:2b:f6:b7:
                    06:13:de:fb:07:aa:9b:f5:e8:56:ca:9f:a4:a6:1f:
                    b6:13:a7:0c:9c:70:1a:f4:b1:d6:34:bd:f6:25:bb:
                    b7:45:47:56:42:0a:d5:72:8d:8a:72:d1:3f:7e:86:
                    ed:9d:75:66:af:7c:0f:cf:f1:5b:9a:47:c0:9a:db:
                    61:46:08:56:9b:c8:37:00:37:ad:85:4e:4a:50:85:
                    da:e6:99:9c:97:7f:b5:01:ab:29:ff:97:39:c7:e0:
                    8f:b5:97:3f:10:45:0e:46:09:c5:d6:45:ad:1a:fa:
                    26:e7:de:70:63:99:2b:b2:fa:42:09:62:5b:87:2c:
                    6f:2a:b7:b9:fd:42:e9:9e:6e:9c:3c:a0:d6:7e:93:
                    c5:c4:81:25:a9:4d:b8:2e:27:53:1f:db:62:51:cd:
                    40:40:9d:0f:ae:5c:3e:b4:37:bc:ae:a4:83:99:15:
                    82:16:83:3e:e1:94:d4:2a:a5:fa:d9:91:d8:12:6e:
                    5c:ba:84:b8:ae:2d:15:e8:a4:17:82:58:ea:fb:16:
                    76:62:01:dd:0e:fb:ed:92:9f:13:4f:c8:64:42:7b:
                    81:04:b6:66:b5:d3:98:ec:01:34:8d:ea:3f:ef:18:
                    b5:87:ef:6a:69:24:56:9a:d5:04:6e:2f:d9:ef:2b:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7B:60:9E:10:96:48:2B:76:D8:1E:D2:06:9B:21:71:2B:4C:2E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e9da181-5220-36dd-bc15-75beae031d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:de:43:b6:15:8f:c9:c1:de:40:e3:31:4e:b8:cd:b7:e4:d8:
         47:72:56:11:b1:5e:fb:6d:a8:21:5b:1e:97:0f:d6:0c:52:e6:
         21:f0:61:02:51:f5:c1:3c:aa:88:48:20:83:01:e8:23:7a:3b:
         c3:7f:43:13:46:f5:15:5f:e1:2e:d8:34:41:fb:29:67:c6:98:
         96:3e:59:c7:55:c1:e6:df:cd:bf:4a:f8:09:5a:1c:7a:63:65:
         57:f5:a4:6e:a4:e2:52:72:ec:dc:4c:87:a1:98:94:b2:97:e4:
         e1:c8:2c:fe:ec:74:69:5e:c3:6d:68:66:d2:ac:c2:27:e7:09:
         07:03:bd:38:8b:c4:0a:4e:c0:7a:22:c7:83:ca:75:da:0c:cf:
         55:a4:f4:27:66:97:d1:5c:9f:ed:82:69:67:eb:43:6f:61:c2:
         12:8e:a6:ba:53:5d:21:57:ea:89:96:22:9a:01:d0:d7:81:78:
         26:b8:d6:b4:79:ea:b8:c3:87:a5:8f:d3:2e:b0:cb:89:39:d7:
         2b:c6:ac:be:46:3d:52:7b:94:4c:d4:22:8b:7d:94:b4:1a:05:
         65:2d:29:f7:35:ef:29:31:8c:b2:34:d3:55:a8:b2:93:fa:36:
         ad:9a:1d:46:31:fe:70:ac:b3:ae:56:e8:5a:aa:21:37:e8:78:
         b1:6c:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:14 2026 by rpki-client