Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4a4fcc8-42ef-3ed2-8ed8-896a56b0bb7e.roa
File:                     c4a4fcc8-42ef-3ed2-8ed8-896a56b0bb7e.roa (raw, json)
Hash identifier:          0FZ5UoM8fMdPuiYXKUoTJQ/rUpThDA1iO0ZjJRqwC3E=
Subject key identifier:   16:27:51:0E:79:B5:59:86:20:29:46:22:4D:BC:23:69:A9:5D:09:28
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC218816C33C6480EAD8780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4a4fcc8-42ef-3ed2-8ed8-896a56b0bb7e.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.26.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:18:81:6c:33:c6:48:0e:ad:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=ed543aa2-a213-482f-a401-84b088d42f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:f6:1b:3c:b0:47:59:a3:b5:54:90:fc:85:
                    0b:35:86:98:48:8c:c1:99:2e:5c:81:bb:84:85:07:
                    33:37:6a:f3:dd:9e:e7:ed:af:72:b1:9e:c3:50:28:
                    ad:5f:71:05:ec:73:0c:5b:fa:66:5a:23:a3:28:8b:
                    10:04:3f:f8:2d:97:d9:d6:ab:6c:1a:19:98:34:07:
                    2e:99:49:fa:0f:3a:f9:24:84:be:82:47:91:99:4f:
                    3a:8d:0b:31:2d:4f:80:1a:69:86:f8:8c:2d:ed:65:
                    b4:3f:7c:04:99:8b:f7:6b:e3:2b:3d:e6:68:31:59:
                    2a:76:5c:eb:d8:05:d5:ac:1a:69:68:b4:67:b6:44:
                    64:5c:a9:fb:5c:41:28:6d:e0:15:c8:1a:72:72:a5:
                    0f:59:7f:79:ac:a4:6b:ec:dd:cf:31:bd:6b:d0:21:
                    e4:e3:8b:cc:3e:c8:a8:83:8a:b6:5a:b9:25:2e:b1:
                    bd:86:9e:88:d6:65:65:68:eb:a0:07:1c:d6:73:9d:
                    bd:c7:33:1c:ee:d2:e7:13:02:d3:1b:f6:44:2c:6a:
                    d0:47:16:15:de:e1:14:95:f9:6c:9f:5a:b9:48:df:
                    b3:5a:dc:6f:a1:5f:c3:56:fc:0f:e5:e3:4f:95:50:
                    e4:12:69:a8:62:71:63:ae:e2:4d:71:e1:64:75:d3:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:27:51:0E:79:B5:59:86:20:29:46:22:4D:BC:23:69:A9:5D:09:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4a4fcc8-42ef-3ed2-8ed8-896a56b0bb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:8c:21:16:38:e8:a8:73:fb:1f:c1:97:13:8f:ea:2e:83:
         ae:d7:20:93:60:3b:8a:b7:6f:aa:0b:0c:b1:6b:58:cf:94:80:
         9c:d3:f7:61:44:5a:2c:7c:c0:29:73:bd:1b:f1:bd:6e:17:e0:
         7a:2f:86:eb:21:76:bc:2f:4d:85:cb:ce:07:b5:47:d9:90:9c:
         19:22:cb:36:fa:41:e7:13:1b:87:21:41:6d:56:7f:cb:31:10:
         44:70:b4:1e:2f:be:84:b0:97:c9:5f:e2:93:e8:5c:e8:4a:30:
         16:76:2a:04:e9:84:b5:30:42:f3:22:5f:f1:e3:a6:06:6e:b7:
         bf:cf:28:68:59:23:ba:04:03:45:20:08:d1:8e:7b:fd:95:ad:
         8c:fc:dd:5f:d7:4e:54:a9:d2:b7:4e:50:7c:5e:ed:eb:5c:c4:
         56:7a:7d:ec:23:82:a4:14:46:77:ed:a3:6e:11:b0:94:f9:49:
         8d:c5:a0:83:ae:6e:06:6c:84:ec:b3:c4:14:66:30:6b:8a:5a:
         24:a4:76:30:12:cb:36:9d:45:03:ba:23:5b:77:fa:e3:86:34:
         8f:11:7e:90:8d:3f:b1:d9:40:58:71:13:88:4e:39:98:f8:54:
         a0:8a:b4:c4:1f:45:37:2a:2e:2c:6a:93:95:f3:30:51:78:98:
         f9:82:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:27 2026 by rpki-client