Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6f9aabd-0952-36b2-8d8e-729dfafd37ae.roa
File:                     d6f9aabd-0952-36b2-8d8e-729dfafd37ae.roa (raw, json)
Hash identifier:          g0NwjXUmvGiGfYWGJxq2UHyXThfTzBaA0FomwWU9mt8=
Subject key identifier:   1A:69:8C:B4:EE:60:B0:BE:BC:C8:4E:D4:D4:D1:00:9B:CF:45:E2:26
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC21B23CC0D124F7736D080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6f9aabd-0952-36b2-8d8e-729dfafd37ae.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.46.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:1b:23:cc:0d:12:4f:77:36:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=282e91ae-77fa-4059-9178-c83fbc7250fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:08:df:5d:ba:fd:e9:0d:8d:25:2b:90:8f:
                    98:bd:9e:75:b2:81:9a:26:76:05:92:1f:13:4a:3f:
                    a0:e3:1c:62:b3:13:32:ca:aa:85:b9:a7:d5:f8:f1:
                    96:ef:62:73:6b:60:67:84:1a:e5:7a:35:60:53:c2:
                    11:21:8f:51:5d:e7:d4:75:c1:97:d1:6d:16:9f:68:
                    f4:78:78:24:fd:75:ed:82:5f:d1:46:4d:72:93:c6:
                    ad:ed:69:25:5c:1e:70:c1:e6:7b:6d:ed:15:7f:09:
                    1a:32:2a:c1:d1:d1:55:d3:43:eb:80:6b:ed:19:63:
                    4e:62:63:f3:a4:c5:03:bd:dc:90:20:b6:0b:86:fc:
                    f7:c3:2d:a0:c9:10:fc:6e:11:8f:33:e9:da:91:7d:
                    f5:89:57:11:58:b0:e6:97:cf:d0:ef:3b:b4:c5:c8:
                    3e:ae:c1:ec:16:1b:23:b2:e8:de:d3:b2:c7:65:af:
                    65:4b:5d:02:fa:9a:07:b6:0f:32:b3:b2:7b:b4:37:
                    ab:18:bd:13:86:c1:e5:02:6a:59:ae:11:0d:b0:6a:
                    20:9c:87:67:1b:4b:3d:9f:ff:13:3e:70:a3:44:4d:
                    7e:5f:8f:55:f6:da:a2:66:43:09:93:b6:87:8b:a2:
                    b4:e7:fe:90:f9:a0:d9:7d:cb:37:6f:c3:5c:61:f1:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:69:8C:B4:EE:60:B0:BE:BC:C8:4E:D4:D4:D1:00:9B:CF:45:E2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6f9aabd-0952-36b2-8d8e-729dfafd37ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:84:f9:d7:80:7b:03:68:e2:d1:80:8b:98:a9:f4:33:ed:fd:
         11:c6:1f:87:5c:b5:48:69:cf:1b:0b:1b:58:29:5c:a6:1c:9e:
         38:d8:55:77:33:bb:0a:4f:af:15:79:ad:8b:1d:5f:92:96:07:
         d6:10:4d:89:16:7c:b4:bb:40:6c:2f:2e:eb:2c:ad:58:26:cc:
         6e:64:d7:06:b6:88:fd:19:e6:48:d3:31:1a:ba:53:04:75:88:
         4e:52:dc:97:14:f4:d4:8b:62:56:30:55:33:ee:40:e3:96:56:
         1b:9d:70:a9:37:3e:eb:45:b2:59:94:f3:db:76:1a:ff:ef:3b:
         10:b0:f5:78:92:c6:ff:7f:27:fd:68:ff:62:41:15:f5:f9:c8:
         6b:ae:9f:eb:1f:1a:c1:4a:4d:03:19:12:7c:95:2a:32:85:80:
         60:a3:b9:e9:bd:f1:f4:4c:89:31:b2:ae:1f:02:e2:45:88:ad:
         b1:1f:6d:1b:e7:4f:54:d9:87:76:05:a5:32:cc:9b:bf:e9:a9:
         0f:3a:04:a3:90:d6:a4:9b:85:cd:27:ae:8a:0c:0d:04:ab:0f:
         0d:84:b3:33:d5:7b:cb:c2:c9:98:ab:c2:78:78:1e:10:f7:bf:
         ae:bf:57:39:ae:73:06:f7:e9:35:89:01:ca:23:3b:ed:05:29:
         c1:6d:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:28 2026 by rpki-client