Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa
File:                     cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa (raw, json)
Hash identifier:          ppiOMdt/YWsbRDeApM9rDWa3N3AHp3u8IvBgHrRtv/Y=
Subject key identifier:   83:97:CE:44:58:18:33:2F:A2:A5:F6:93:82:D8:D8:BF:7D:E9:62:94
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795F09D95058E59D8F88F90
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.46.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:f0:9d:95:05:8e:59:d8:f8:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aaa0a1be-1d28-4b4b-9ad2-dc7b22557a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:9a:e2:79:e6:37:b0:da:b2:4a:d9:1b:e6:
                    13:4d:d5:fb:3d:74:ad:94:33:5d:f5:04:35:01:4f:
                    d7:09:1b:54:21:cf:1b:18:24:34:34:e0:9c:79:57:
                    86:dd:ea:74:a8:86:cd:0d:2a:39:4d:bc:8c:07:40:
                    5c:6b:45:90:29:fd:d1:18:df:0e:3e:03:30:d0:bb:
                    13:d1:71:39:7a:61:61:06:eb:b7:50:e0:fd:d0:03:
                    b0:96:33:82:89:37:f7:fb:0a:53:81:7d:cd:14:b2:
                    13:35:07:f7:63:68:d4:aa:21:56:3c:55:61:7d:93:
                    d2:78:d1:cc:3f:f3:c6:21:15:4c:6f:fe:7c:af:fc:
                    22:10:9a:69:6c:87:76:6c:8c:d6:46:ca:78:12:c8:
                    df:2f:ee:c9:2e:86:bb:5b:bb:63:a3:f8:b5:38:64:
                    a1:28:6b:34:01:bd:cf:53:50:63:5f:05:5f:65:ca:
                    67:04:8e:cb:04:f3:6f:31:16:5d:4a:1a:19:4d:33:
                    d2:ff:4c:f4:0d:c1:8e:e4:94:88:a0:46:e7:f2:87:
                    e7:b5:bf:27:2e:c9:b3:8b:7d:2c:34:23:43:2d:b3:
                    f3:ec:5f:8d:bd:66:50:57:4a:66:33:de:3f:92:3b:
                    6f:bd:81:b6:4d:dd:91:c7:2e:ea:a2:65:33:af:08:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:CE:44:58:18:33:2F:A2:A5:F6:93:82:D8:D8:BF:7D:E9:62:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc6ce2fc-fbb7-33ca-8016-825e18913df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:81:7a:8d:a6:60:07:0e:54:82:39:08:4a:95:ab:1a:c9:
         59:35:d7:23:0a:10:f0:29:62:be:3c:bc:a1:1c:3c:dd:74:58:
         df:dc:00:3c:2b:03:d2:59:97:b0:06:fb:a0:ef:44:29:02:5a:
         77:13:0b:01:72:3b:2e:18:a1:71:85:0a:c6:c2:e0:0e:f6:91:
         15:1a:86:78:a6:dd:fd:22:40:66:9b:5c:89:78:f1:15:99:ec:
         63:e1:ca:01:14:92:8c:9a:3d:38:3e:5f:6f:c0:09:19:9d:8d:
         b5:42:ae:28:96:b4:de:a0:56:02:6d:c0:ad:65:cb:9a:54:cf:
         e9:8a:56:b1:28:f6:a9:b4:49:24:70:b9:ce:88:ba:8a:f1:d5:
         7f:ea:ff:92:d8:b3:98:21:ad:97:af:f7:c5:6a:53:cf:6c:73:
         61:10:96:a2:08:84:87:a2:38:64:e1:9e:80:25:39:e6:ed:d2:
         c1:11:eb:86:1d:f7:90:8b:a4:f6:d6:40:d7:72:f4:89:3d:48:
         8a:71:a4:8e:16:9c:3e:e4:a8:9e:af:bd:a2:85:88:14:b8:4f:
         1b:1c:ee:ca:d1:95:08:89:46:39:da:52:43:8b:30:0d:2d:c7:
         62:cf:de:a8:89:13:74:e8:da:11:ca:1d:3f:e5:11:b6:99:17:
         6b:93:95:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlfCdlQWOWdj4j5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWFhMGExYmUtMWQyOC00YjRiLTlhZDItZGM3YjIyNTU3YTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyCa4nnmN7DaskrZG+YTTdX7PXStlDNd9QQ1
AU/XCRtUIc8bGCQ0NOCceVeG3ep0qIbNDSo5TbyMB0Bca0WQKf3RGN8OPgMw0LsT
0XE5emFhBuu3UOD90AOwljOCiTf3+wpTgX3NFLITNQf3Y2jUqiFWPFVhfZPSeNHM
P/PGIRVMb/58r/wiEJppbId2bIzWRsp4EsjfL+7JLoa7W7tjo/i1OGShKGs0Ab3P
U1BjXwVfZcpnBI7LBPNvMRZdShoZTTPS/0z0DcGO5JSIoEbn8ofntb8nLsmzi30s
NCNDLbPz7F+NvWZQV0pmM94/kjtvvYG2Td2Rxy7qomUzrwjduQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOXzkRYGDMvoqX2k4LY2L996WKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvY2M2Y2UyZmMtZmJiNy0z
M2NhLTgwMTYtODI1ZTE4OTEzZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1kgXqNpmAHDlSCOQhKlasayVk11yMKEPApYr48vKEcPN10WN/cADwr
A9JZl7AG+6DvRCkCWncTCwFyOy4YoXGFCsbC4A72kRUahnim3f0iQGabXIl48RWZ
7GPhygEUkoyaPTg+X2/ACRmdjbVCriiWtN6gVgJtwK1ly5pUz+mKVrEo9qm0SSRw
uc6Iuorx1X/q/5LYs5ghrZev98VqU89sc2EQlqIIhIeiOGThnoAlOebt0sER64Yd
95CLpPbWQNdy9Ik9SIpxpI4WnD7kqJ6vvaKFiBS4Txsc7srRlQiJRjnaUkOLMA0t
x2LP3qiJE3To2hHKHT/lEbaZF2uTldY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:13 2026 by rpki-client