Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa
File:                     cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa (raw, json)
Hash identifier:          gwi+QMN2a9juI3Lhw+4QnsfoB0rxqo0OZ/S8nQI5jpk=
Subject key identifier:   1B:82:F7:D9:BD:A7:C6:4C:77:45:C9:E4:52:4B:BE:C8:0B:57:90:F9
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA376B974FA2AAAE4E2C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.46.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a3:76:b9:74:fa:2a:aa:e4:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=88bdef43-db74-4748-b081-42d0b8309bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:e6:53:9e:88:de:13:58:a0:88:82:3b:27:
                    37:c0:9c:ae:e3:8e:ab:ea:97:9d:c3:85:cc:eb:06:
                    ea:15:de:ff:a4:85:64:10:6d:65:29:c7:9b:95:b5:
                    eb:9e:05:6e:ff:6c:de:b9:6b:9d:75:32:b9:6f:8a:
                    1d:83:4d:7c:52:34:eb:67:70:ff:34:8b:83:74:86:
                    2d:04:47:5a:0d:85:4b:74:67:8e:f2:75:83:dc:af:
                    9b:5b:bf:65:8f:79:60:e2:f2:66:2c:22:cd:89:31:
                    b0:02:aa:8e:f9:50:09:0b:38:ba:0a:34:c5:ae:38:
                    56:58:0b:d0:e2:25:67:cb:4b:82:1d:56:46:46:31:
                    a0:fc:20:9c:c3:d4:56:68:a6:48:0d:43:53:fb:45:
                    79:53:78:00:7e:02:8c:20:e4:5a:8d:77:f3:92:20:
                    a1:5d:e1:70:98:b9:17:2e:0b:f1:2f:3b:bd:49:21:
                    d2:7b:41:1d:10:b7:27:ac:fe:20:64:7d:cc:5e:1a:
                    b5:b1:bd:93:e7:c1:4d:2e:6b:86:f9:c2:cc:9d:74:
                    7c:00:b1:fa:b5:e0:ce:c6:c6:66:25:f6:d3:10:4e:
                    43:d4:df:5f:a4:96:5c:bb:8b:81:9f:0d:2c:04:f7:
                    32:b4:1f:6b:99:8a:5b:30:56:46:b3:4d:3e:69:ed:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:F7:D9:BD:A7:C6:4C:77:45:C9:E4:52:4B:BE:C8:0B:57:90:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:c5:1e:78:05:7e:6b:6b:06:eb:5c:ff:bb:05:c2:a3:4b:
         ce:1a:78:98:eb:68:85:47:4e:ea:97:63:6c:50:87:4c:3d:f5:
         03:73:5a:14:5a:06:ae:2d:c4:bd:86:6b:d2:a1:e1:7c:db:6d:
         67:e5:37:71:14:73:3a:9d:22:8c:30:93:26:ad:e0:0a:73:0c:
         44:54:09:d9:c8:cd:e7:40:28:58:17:2e:d5:1d:10:51:15:a8:
         93:aa:b5:99:97:1f:c0:cb:a9:62:05:7f:64:33:e1:13:84:30:
         be:7a:c4:84:8e:37:f0:68:37:46:55:4c:b4:43:4e:df:aa:7e:
         8b:4f:82:ca:55:36:41:7a:0e:a6:92:2f:9e:72:ea:8e:e3:f1:
         a5:71:34:09:a2:f9:a9:96:4e:73:0f:03:d6:17:39:eb:b1:37:
         06:7c:ab:27:04:c3:78:df:e2:29:14:6f:50:50:fc:53:c4:19:
         49:fa:11:c2:30:d6:53:94:30:e3:be:55:c6:e8:24:b6:7b:ab:
         30:14:e5:08:e6:41:b3:db:f9:f3:e0:51:3e:e9:19:e9:93:76:
         b5:71:ef:bf:87:11:14:28:23:4f:2b:52:7d:75:58:f9:90:73:
         f8:34:81:d0:90:35:e4:98:5f:86:a7:f6:4f:34:56:00:6f:45:
         9b:53:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:15:33 2026 by rpki-client