Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa
File:                     a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa (raw, json)
Hash identifier:          jcLiPTDIyENoh3lZTFW/ORuryXCluNWAjv/T37gubEs=
Subject key identifier:   AB:B0:F7:D4:00:C8:57:96:A6:4A:9F:CE:4F:FF:8C:DA:A8:E3:3F:1B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9FA91EB8A417ABCA3E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     13371
IP address blocks:        152.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9f:a9:1e:b8:a4:17:ab:ca:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=f226770e-134e-40ff-acf5-e4fd256c364a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:00:32:d4:35:4c:f4:b4:b9:f8:ec:b5:95:
                    58:70:ce:04:97:2a:9c:14:8a:83:a9:58:cb:80:d8:
                    b6:cf:64:66:15:e0:29:57:08:5b:b8:8c:18:df:3f:
                    a8:dd:90:5a:f0:aa:18:b4:a5:51:34:73:68:49:0c:
                    90:e6:bb:81:c3:04:e7:6b:f4:17:60:00:c3:10:bf:
                    20:bb:39:04:1b:5b:df:7e:8d:f6:c1:40:3f:57:82:
                    27:07:8c:dc:42:09:dd:b3:c3:5c:bc:24:f9:e2:01:
                    67:b3:9f:be:43:a3:72:dc:e7:30:47:df:d9:c9:02:
                    7f:ec:b1:f8:62:8a:3f:5c:08:d3:73:5d:57:5c:79:
                    0c:40:9c:0b:5c:6b:93:87:ff:8c:e8:3e:ee:fd:46:
                    04:32:02:62:a9:6a:b2:7a:00:11:22:f7:b7:e5:d3:
                    ed:f9:96:bb:86:6f:76:80:c5:58:a5:10:dd:7f:c9:
                    3f:9b:9d:f1:88:64:69:71:5a:83:b2:25:4a:63:77:
                    c5:f3:a0:ff:5d:71:43:cf:90:cc:8b:0f:79:5d:c2:
                    90:df:3a:a1:ad:0e:2f:18:8d:d4:1d:a5:b0:cf:66:
                    fc:d0:f7:4c:70:9f:45:da:7f:2d:15:cc:b9:31:24:
                    7e:39:7c:b8:5d:a1:ae:58:10:4a:ca:6b:11:10:42:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:F7:D4:00:C8:57:96:A6:4A:9F:CE:4F:FF:8C:DA:A8:E3:3F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:1f:03:99:5f:55:2b:16:3b:a7:4e:14:ed:1d:79:d5:11:
         e3:29:00:8f:db:0c:ce:f8:66:37:2e:8a:a8:01:a5:ef:54:6d:
         f6:db:48:82:d1:34:af:2f:6a:61:2e:11:bc:d7:ea:8c:91:21:
         dc:2a:b7:55:cc:c4:36:e8:c8:71:90:ac:22:e2:02:74:a1:2a:
         a7:27:1c:7a:55:37:49:0b:5b:f8:8f:76:fa:8f:e9:e1:45:2a:
         5b:b5:d1:b4:18:bb:db:0a:30:2d:c0:96:24:bd:e8:c1:5b:fa:
         1d:db:72:79:4f:28:5f:2e:78:08:1b:5d:a6:b4:86:00:9a:44:
         3c:ef:13:4e:bb:03:32:60:e7:9a:00:d1:45:1a:a8:1d:2c:1f:
         73:38:dd:0e:79:c5:f7:05:6e:21:00:a0:24:14:cd:d0:b6:fe:
         f7:f8:7b:a9:30:6a:d6:20:6f:4c:9f:48:11:2e:6a:52:66:bf:
         09:0a:65:7f:96:51:74:cd:33:8a:66:78:f0:08:f1:84:4a:f0:
         9f:dc:6c:e7:71:57:b0:84:45:79:9b:e8:bd:ce:3a:ee:9a:be:
         19:14:aa:4f:de:40:3e:23:0a:18:ce:c0:27:27:c9:b2:3e:f1:
         c0:ef:f5:6c:f5:55:2f:61:ab:08:2e:00:41:c2:84:4c:b4:04:
         bd:db:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:17 2026 by rpki-client