Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d98fef7e-e27e-3b25-8443-bae301496d77.roa
File:                     d98fef7e-e27e-3b25-8443-bae301496d77.roa (raw, json)
Hash identifier:          uksvoooyAShEvNRynW+Gjx3GjO418aZE+eXYjsx+D1A=
Subject key identifier:   CA:47:1F:EE:58:17:0F:F6:4E:2E:3F:0B:74:04:31:69:FE:CE:65:75
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795E176E55B7CC792CA8F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d98fef7e-e27e-3b25-8443-bae301496d77.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.22.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:e1:76:e5:5b:7c:c7:92:ca:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1dd82f94-fdc5-4d24-b2e5-96a7f7681a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:7c:f5:1c:98:21:ef:f6:dd:c2:61:d0:0e:
                    29:41:63:19:0e:f7:fa:63:a7:23:d8:38:23:6c:08:
                    54:91:fd:7f:d8:13:ef:94:69:1b:8f:d3:24:0a:9f:
                    9b:46:26:b7:02:c4:48:7a:37:6e:84:62:8f:26:d6:
                    f3:2f:34:e9:a1:60:83:d0:90:d0:75:d1:89:ce:9b:
                    27:17:66:db:b9:5f:b4:d8:b3:68:ef:ba:1e:7b:8b:
                    50:de:60:03:ff:20:93:2b:48:75:8a:fe:21:2c:6b:
                    10:23:0e:2a:a9:46:04:f5:0f:19:a5:e6:e7:45:ee:
                    45:10:44:29:5b:98:c0:bb:2e:33:a7:1d:d0:56:80:
                    7c:d5:7e:6b:12:c5:e2:7c:6b:be:53:dd:9e:1f:f3:
                    42:ff:82:67:1e:73:72:aa:d5:fa:8d:e6:90:a2:ac:
                    f6:80:1f:5d:c1:d7:ea:c9:92:68:7e:2b:5e:32:13:
                    4b:b7:d4:53:7a:66:26:ec:d2:33:c3:f3:cf:f9:53:
                    1b:ed:62:28:81:5d:05:21:b4:c9:16:1b:ab:a7:b2:
                    d9:ef:cf:84:4e:fe:ab:e8:b6:20:cd:04:b3:81:d0:
                    a7:6e:de:b8:51:cb:39:29:95:14:2f:d7:a5:0e:23:
                    52:cb:34:01:34:52:2b:0c:09:5c:54:95:ad:1e:b0:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:1F:EE:58:17:0F:F6:4E:2E:3F:0B:74:04:31:69:FE:CE:65:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d98fef7e-e27e-3b25-8443-bae301496d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f3:57:74:11:13:3e:91:eb:3d:df:55:f9:db:cc:2e:e3:84:
         5a:3c:ad:61:20:a5:88:7f:29:59:a7:ff:33:d7:10:8d:ec:61:
         c1:a0:25:37:80:0a:bf:fb:47:fe:de:32:50:1e:32:fd:5f:84:
         4f:5e:20:cb:6d:44:38:f0:14:f5:41:a9:db:1d:09:16:5d:b3:
         3e:a1:e0:cd:e0:d0:3b:2f:48:e5:9c:6e:f9:23:7f:bf:55:4c:
         9a:63:b3:b1:80:00:b9:9d:17:7e:80:ee:49:1d:94:51:8e:27:
         1a:6a:2d:ad:e5:6f:31:50:5f:37:b4:4a:08:be:d4:5d:0d:d7:
         b8:9e:ba:f6:40:86:a5:59:f9:4d:b2:e9:86:83:12:6d:19:57:
         ea:2f:6f:82:25:52:c0:28:61:8f:31:f2:e0:af:2e:4e:4a:6a:
         83:50:b4:42:4d:cd:a0:70:6d:ef:30:a3:fb:d4:81:64:b5:42:
         cc:82:2a:31:85:9b:c8:8b:c6:0b:6a:b1:93:16:a7:88:5f:32:
         ec:bf:91:45:28:7d:5b:37:c6:2c:a6:74:c2:a8:b1:ce:36:9f:
         54:1a:87:b3:46:3b:84:e2:ef:12:30:d2:5f:56:fd:02:9a:85:
         1f:18:18:da:4b:a0:75:30:cd:66:44:df:d2:19:57:67:9d:63:
         8b:1a:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:24 2026 by rpki-client