Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a39a1b-4ab7-342e-9ce8-a01c0be5a154.roa
File:                     b8a39a1b-4ab7-342e-9ce8-a01c0be5a154.roa (raw, json)
Hash identifier:          br81jGLyTjtlS9KQSnHKmZnaRATLo9DgWq3/XNCQwPU=
Subject key identifier:   E9:F3:8A:9F:19:62:B0:75:6D:63:12:12:E8:17:22:2F:54:4B:7C:4C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9ED04799A2893BBE9280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a39a1b-4ab7-342e-9ce8-a01c0be5a154.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        192.154.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9e:d0:47:99:a2:89:3b:be:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=3543a996-7cfe-4966-bada-ac54fbe1a5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:ec:2f:fb:d0:12:51:cb:76:bf:ef:d2:f0:
                    3a:92:e2:ae:9b:a7:25:9b:53:16:b8:64:ad:e5:16:
                    40:cc:a5:f3:47:02:b5:ed:85:44:88:79:e5:e8:88:
                    a3:dd:37:87:14:24:29:60:2a:0a:8f:f3:00:d3:6f:
                    b7:be:85:1f:f3:29:f1:17:a3:aa:b4:01:3d:99:18:
                    43:df:61:db:3c:78:ef:f2:a2:c7:01:83:ad:05:e5:
                    26:76:35:e0:0c:34:99:e0:c0:90:ac:3d:df:6e:5d:
                    43:dc:9d:89:f3:d1:2d:f1:4c:83:9b:07:db:69:d6:
                    56:f6:50:b4:d1:a5:fa:cd:67:23:eb:cf:85:30:09:
                    29:84:4a:73:66:e7:a0:e4:23:ef:2f:1c:0b:73:dc:
                    83:46:b9:4d:a6:8e:76:a0:03:d6:f0:6a:c2:80:97:
                    ef:72:4f:3e:eb:ba:96:c5:2e:88:8c:73:00:68:05:
                    11:11:db:46:51:6f:f6:c1:72:3e:5c:a6:87:13:64:
                    70:af:0e:7f:9c:05:a4:1c:0e:4c:0f:d8:de:da:a9:
                    9e:3a:bc:36:c1:c4:bf:ac:54:4c:56:9f:b6:68:49:
                    b9:60:1d:8f:7c:8e:2e:4a:7e:a2:5e:af:c0:0f:38:
                    01:8e:90:3d:8e:5a:27:e8:99:24:72:3d:7b:bb:8f:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:8A:9F:19:62:B0:75:6D:63:12:12:E8:17:22:2F:54:4B:7C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a39a1b-4ab7-342e-9ce8-a01c0be5a154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:65:53:77:70:8d:f7:cd:31:e7:9e:cb:5e:b8:d2:31:c9:12:
         8e:5b:1a:55:62:5e:7e:4e:ee:13:fc:51:bc:f1:b4:d3:c0:cc:
         5c:73:ad:02:f5:60:60:97:a7:a5:41:6a:f1:b3:04:17:1a:93:
         cf:ac:0a:cc:4e:ea:24:2c:d0:79:f2:59:b0:72:48:9b:a9:b9:
         50:7a:ef:08:3d:51:c5:90:40:2b:19:01:9d:36:f9:c1:a5:fe:
         f5:83:2f:b2:40:7e:f2:b6:96:6c:df:05:bc:46:1f:3e:1a:b1:
         3e:18:5e:0d:0c:fd:3b:19:92:3c:66:c1:cb:97:fd:dd:12:82:
         25:d7:bd:eb:25:e4:90:9b:cf:1d:23:3b:7a:53:25:31:71:9c:
         41:9f:94:6f:5c:26:59:2f:f8:b6:58:9d:b5:1d:35:8c:52:e5:
         48:5d:13:a6:f5:68:2d:68:92:fd:cb:49:a7:0f:71:2a:cc:ff:
         5e:59:f4:38:07:23:71:1c:9a:57:55:0a:07:c7:a0:60:d1:7b:
         22:43:40:0c:fd:69:8a:d3:02:c5:ee:93:6a:0f:dc:6a:88:40:
         d0:46:12:9c:ba:3a:a8:72:fa:4b:3e:97:5d:dc:dd:40:f1:c1:
         4c:19:b0:74:a7:60:2a:4a:7e:41:b3:41:17:23:d8:02:18:8c:
         1e:f8:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:21 2026 by rpki-client