Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa
File:                     a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa (raw, json)
Hash identifier:          RnmM9kaBASRGsR2tz1LspCLzdwkbqkV0z9Vh5fDODlU=
Subject key identifier:   83:85:63:E2:C4:15:BF:C3:CC:E3:FB:B1:AB:9F:CF:6A:E2:2D:BB:B7
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796DB679D565E9E4FF5F580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13371
IP address blocks:        152.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:db:67:9d:56:5e:9e:4f:f5:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=57fef0db-6918-464e-a63f-1e2ed2ecf7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:0e:bc:d5:58:1b:b3:7d:0b:3f:bb:d3:c4:
                    6f:51:fe:50:5a:5d:e6:e4:5f:79:69:98:3c:86:c1:
                    b6:1d:fd:48:2a:42:7d:22:96:ae:4c:35:8b:f8:e9:
                    d1:54:a6:1f:7e:42:ee:cc:13:6e:64:7d:90:8c:2b:
                    d4:79:c9:0a:09:b0:7a:4a:06:9a:9a:77:b6:11:82:
                    f2:1e:cd:72:63:8c:b5:e4:7b:d5:81:a9:c3:fe:16:
                    2d:c8:39:e1:94:9b:56:63:35:79:ef:9c:60:09:8e:
                    33:dc:09:70:8b:bf:50:85:2e:71:4b:ab:db:34:2a:
                    19:01:0c:43:29:28:4a:f8:d6:51:78:22:80:a8:f1:
                    6e:b0:a6:5d:cf:5c:f9:4a:8f:b7:64:e7:6a:83:cb:
                    c6:0c:2d:f0:94:79:36:b4:68:17:27:02:fe:d8:83:
                    ca:e9:a4:47:3a:af:52:25:20:20:4c:6f:26:89:1f:
                    3a:d6:37:4e:6b:22:87:59:8d:73:7a:96:65:08:fe:
                    58:dc:81:7d:66:fa:a0:2f:22:a2:e9:5e:28:37:f0:
                    8f:a7:bc:26:23:cd:a5:84:5e:cc:e7:75:69:46:d5:
                    45:9c:b1:ac:88:6e:fa:a3:3e:c7:04:73:4d:90:3e:
                    52:45:4c:ce:87:4c:d2:30:22:0e:a4:85:57:3f:76:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:63:E2:C4:15:BF:C3:CC:E3:FB:B1:AB:9F:CF:6A:E2:2D:BB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a69da14b-2825-3e2f-8e93-4a65cd8d0071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:6b:df:83:0e:8e:40:26:89:d8:62:4f:4a:30:5a:81:09:
         51:6e:a0:60:82:1f:6d:1b:e1:77:da:cd:24:63:a2:29:dd:bd:
         e9:82:a8:c5:27:cc:d1:b4:46:68:78:64:2a:18:7d:f2:10:88:
         c8:2f:06:ab:03:2f:2d:fa:2c:f6:2b:f1:89:a1:42:9a:83:9e:
         f6:1c:31:68:08:ea:e7:6b:f7:79:7d:9d:51:88:49:8c:6a:b3:
         e0:25:f0:0b:62:02:e2:b3:ed:ec:56:56:6b:9d:e5:fe:e6:8e:
         82:7b:79:1d:3b:33:73:20:ea:25:6f:01:a4:e2:0a:cc:ad:2b:
         a7:71:46:b0:ca:71:c1:3d:40:41:ba:19:1c:73:c5:9c:29:f1:
         c6:d8:02:27:b4:d1:14:e8:8a:62:1f:47:aa:94:fb:90:d3:71:
         20:91:64:6b:62:2f:77:fb:24:f4:a7:5c:f9:18:07:73:7d:97:
         7b:58:2f:d2:48:cd:42:85:de:fa:2b:61:54:da:de:d6:b6:2f:
         1c:ac:1c:bf:d6:47:0a:2b:dd:23:15:35:04:bf:21:4c:bd:64:
         e3:94:29:1c:0e:f9:b6:ea:12:e5:8d:3a:cd:0e:2b:80:4d:89:
         1a:83:26:61:69:ee:3a:ab:73:03:f0:00:ea:3a:bd:6b:d1:2f:
         a8:f1:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:47 2026 by rpki-client