Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/94973cf5-d148-3355-ae07-5545cbd1cfb4.roa
File:                     94973cf5-d148-3355-ae07-5545cbd1cfb4.roa (raw, json)
Hash identifier:          Hj4eNZEA1L5n0jx2qsyZtPTCiGoZN7IHKUW406vY7kc=
Subject key identifier:   BE:6A:B2:8D:98:CF:05:FC:FA:4D:1D:ED:D6:9F:F4:C6:AD:35:24:4A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA7963AE9C5FC8AAA03CDCE00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/94973cf5-d148-3355-ae07-5545cbd1cfb4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:3a:e9:c5:fc:8a:aa:03:cd:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5ec9c9f-4100-48eb-a4b5-768a58182231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:9e:d4:16:54:a3:2e:a1:39:f6:15:f7:dc:
                    5e:51:e6:48:ab:38:d6:41:de:73:cf:48:9f:a5:5f:
                    b3:c1:3a:74:50:29:2b:e8:41:8a:6f:30:1c:63:27:
                    1c:7b:93:39:6c:22:e3:a9:da:77:52:25:3e:f8:b1:
                    9a:a9:67:b9:24:e5:0a:c6:e9:0f:28:69:6a:ca:ce:
                    91:50:99:2a:26:60:e6:e4:a5:64:05:bf:7e:a0:a3:
                    6a:3e:aa:d5:b2:38:a8:1e:6b:34:79:f5:07:f5:92:
                    05:ff:ca:5b:7f:9f:5a:c7:03:64:54:67:cd:a5:6f:
                    31:7b:45:34:94:bb:54:34:4d:34:da:73:4b:6e:45:
                    1f:f4:f5:0a:4a:2e:dc:34:d7:d6:10:1d:91:21:39:
                    26:dd:72:9d:3f:8d:e5:cb:aa:a6:ba:13:50:ce:47:
                    c0:ce:c2:00:21:c5:25:d3:1d:2e:59:ed:85:7c:c5:
                    7c:cb:b5:fa:53:9a:a6:f4:88:b5:61:89:3f:e6:8d:
                    6a:ca:b8:5a:d3:c1:af:60:20:b5:9c:27:dd:a1:ee:
                    eb:20:5b:29:96:6a:18:6f:7e:60:56:e1:9d:66:0e:
                    3f:fc:e7:cd:06:3f:8f:62:e8:20:7f:e4:4f:52:d6:
                    b6:3b:55:e8:60:8e:2a:cf:7d:de:cb:86:5a:1e:46:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:B2:8D:98:CF:05:FC:FA:4D:1D:ED:D6:9F:F4:C6:AD:35:24:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/94973cf5-d148-3355-ae07-5545cbd1cfb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:50:d2:4f:1a:31:32:11:d8:99:8b:a0:8d:4b:d3:ab:04:17:
         6b:5f:85:10:7a:e0:db:53:4f:5f:0c:42:7e:a1:7b:c9:bb:89:
         88:02:f3:0f:00:0a:c7:e2:3f:0a:5a:be:b6:56:5f:0e:f8:b8:
         2f:31:0b:81:bc:2f:9b:e6:fe:71:0e:00:41:10:f1:b3:c9:92:
         5d:86:e9:6f:64:19:7d:18:bd:0a:75:66:43:5d:ce:fc:8c:58:
         cb:7d:52:b3:79:fa:d8:6b:29:4d:71:88:eb:04:16:fc:89:d9:
         d0:c6:e0:79:e9:ac:b1:f0:01:fe:38:64:e3:ed:70:20:67:4c:
         ad:6a:7d:3b:eb:74:82:f7:1b:65:89:9b:78:e0:70:0f:34:df:
         da:dc:0e:72:04:10:68:b1:67:5d:be:74:38:b8:8d:ca:d8:0f:
         0d:27:14:6f:86:0c:ab:6f:80:26:70:10:4a:8d:4b:5b:1d:02:
         35:eb:46:70:9d:94:43:89:d8:12:04:0d:bd:31:ba:d3:9b:7d:
         9c:15:21:2d:44:b3:0f:d1:75:29:e7:09:c5:20:c8:13:e9:8b:
         46:0e:e3:3d:b9:ed:87:5c:0e:bf:17:b4:12:6e:bf:c4:63:2e:
         c5:d0:40:85:8b:6c:15:94:92:0b:ff:9c:c6:d8:f3:16:65:70:
         0c:26:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:21 2026 by rpki-client