Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa
File:                     82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa (raw, json)
Hash identifier:          mAuTntMcnXBWyuoSWjusMHA/ndBk1MORqxsfvPp7OTc=
Subject key identifier:   21:8F:6B:4D:06:7A:7C:99:51:60:16:91:D3:AC:B7:39:79:6A:BB:4C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795DAF3E20618ACB0A9DC60
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53785
IP address blocks:        152.40.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:da:f3:e2:06:18:ac:b0:a9:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bb7d4608-d8df-46a7-acbd-70aabaacaf89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:0e:a4:42:68:bf:ee:7e:f1:c8:0c:f0:70:
                    b9:9f:93:df:bd:3e:13:1f:ac:6a:38:7f:50:fe:f0:
                    1b:90:d7:e6:b1:80:b0:fb:22:cc:cb:a6:e7:d8:a7:
                    d3:e6:dc:ac:dd:5f:84:e8:32:58:c2:cf:f3:34:72:
                    01:d0:3b:95:7b:0e:80:1b:c2:af:2a:ca:85:06:a0:
                    57:7d:13:84:ee:4a:20:f4:8c:07:03:0f:67:72:0b:
                    1c:c7:ed:1f:aa:41:18:8d:bc:4c:56:81:cc:f2:2e:
                    d2:31:34:53:30:12:14:3f:38:e6:82:32:0b:e0:40:
                    cc:bd:43:18:66:01:b5:f0:5e:9c:9d:d7:17:83:50:
                    18:6d:2b:98:c1:f8:dc:be:51:8e:dc:01:98:5b:54:
                    ca:4f:85:ad:d3:7b:39:26:cb:48:15:23:59:84:35:
                    ea:a4:f0:a3:fa:f9:97:cc:47:e8:c4:05:9c:f3:59:
                    c9:29:e1:3b:31:ef:02:38:75:18:a8:ab:ed:f5:04:
                    99:5a:f6:6d:48:e6:75:74:95:59:5d:c9:95:7d:15:
                    81:f4:26:05:24:0c:34:23:25:c3:78:6a:ad:e1:c5:
                    fe:97:55:7d:32:45:f1:37:08:52:ce:8c:23:3a:22:
                    34:13:55:b2:54:e7:3d:b4:f9:6e:5d:de:e1:b7:33:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8F:6B:4D:06:7A:7C:99:51:60:16:91:D3:AC:B7:39:79:6A:BB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.40.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:13:9b:bc:04:b9:61:fd:33:8a:ed:4d:51:0d:1d:1b:44:e9:
         5b:c4:8c:6a:87:61:d2:95:1b:54:d9:86:27:66:86:98:ce:70:
         55:b9:29:63:f7:ef:08:6a:e5:67:a5:54:7d:a9:69:7d:94:42:
         fd:2a:59:10:52:ad:33:7d:65:77:8f:cf:96:27:13:80:c9:46:
         89:51:bd:14:99:9e:ba:f1:e4:56:c4:c4:0e:ce:e6:73:8a:28:
         8a:b2:b7:f0:8d:86:47:92:fc:45:07:2f:5c:a9:9b:b6:36:d5:
         43:bc:fb:e5:0c:8d:9b:41:f0:d9:f0:f8:cc:06:f7:06:fb:11:
         5c:a3:de:4e:b1:a7:cd:1c:62:3c:15:67:8c:e3:50:2e:65:2a:
         1e:65:a6:d0:0d:16:82:6c:71:17:fb:e2:db:bb:0f:30:77:86:
         07:3f:7a:f7:3c:f9:54:17:1b:a0:21:a9:ee:73:ba:71:e3:5e:
         42:d7:89:e5:07:0e:6f:c3:37:2a:54:fe:f7:a2:2e:fe:58:2e:
         3a:fc:a8:3b:f9:04:44:41:7d:49:0c:56:35:67:61:3b:c5:34:
         33:56:6e:66:5b:7c:76:2d:97:fe:fa:c5:8b:84:98:78:f6:52:
         76:2a:65:8a:5e:33:42:12:68:13:b3:1a:42:a1:8b:34:7b:6d:
         cd:36:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:19 2026 by rpki-client