Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc5642cb-b1a7-3b9c-95b5-6e670aef9973.roa
File:                     dc5642cb-b1a7-3b9c-95b5-6e670aef9973.roa (raw, json)
Hash identifier:          eZrfPeHiiqP40zCt8lm7tSKTqzc5oyjGEKnPmMGHlwA=
Subject key identifier:   71:FF:D8:40:F9:E2:B7:DB:2D:C7:5A:1B:12:72:45:27:BF:D5:62:CA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA79602C84EB804C11302F700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc5642cb-b1a7-3b9c-95b5-6e670aef9973.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395312
IP address blocks:        152.46.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:02:c8:4e:b8:04:c1:13:02:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=add01b12-4d04-4a43-9c7f-dfb8c21602a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:e5:48:65:11:58:26:0b:95:ce:32:c9:56:
                    19:04:0d:27:b4:0e:5d:6d:40:b1:63:21:2c:a3:11:
                    36:87:e8:5c:4a:54:aa:fe:5c:77:9e:bc:06:7a:5b:
                    61:7d:8b:4b:04:b8:04:3c:41:b2:45:90:63:0f:26:
                    ae:4f:bc:8a:6a:cb:c9:89:a0:2c:93:41:12:50:11:
                    93:3b:a0:22:64:a7:2c:20:c9:ae:bb:1f:35:aa:90:
                    50:52:6b:21:18:12:1c:ed:47:dc:db:c9:50:17:33:
                    68:52:ee:08:f8:f5:9a:98:b8:0e:75:c4:ed:4e:6c:
                    0d:4b:95:42:81:0a:68:14:eb:fe:8e:58:4c:80:29:
                    53:6e:77:bd:ff:2d:da:ad:65:aa:30:32:f2:ab:a5:
                    43:a4:bc:ee:00:28:de:c1:22:12:91:bd:89:23:58:
                    2f:bb:87:fe:12:ea:df:44:65:43:8a:67:dd:e5:86:
                    ad:01:4d:d5:63:66:27:be:e0:78:14:72:ba:99:7b:
                    d4:a8:ed:f6:38:89:fa:6d:52:9d:6a:29:b0:cc:34:
                    95:96:ce:7f:c7:29:ac:f5:0d:d3:1d:4e:91:d5:3e:
                    1c:c4:d2:7b:d5:f7:dc:78:07:ef:e9:5e:c8:3c:a2:
                    ba:0f:c8:86:0f:a6:03:7d:80:42:31:40:96:88:00:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FF:D8:40:F9:E2:B7:DB:2D:C7:5A:1B:12:72:45:27:BF:D5:62:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dc5642cb-b1a7-3b9c-95b5-6e670aef9973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:50:57:ae:bf:81:bc:14:e7:13:19:fc:d8:e4:01:c8:3f:
         0b:28:f3:08:cb:f5:0c:85:7c:76:dd:1f:32:86:5b:44:c6:76:
         8e:99:df:75:7a:2b:11:3a:3d:2a:6d:97:58:5c:3f:d9:2e:8d:
         b7:ac:1d:00:c3:bf:c1:3f:f9:59:2c:73:6d:22:81:68:24:a1:
         94:c1:af:1a:ca:fb:42:10:06:83:82:2c:df:25:a5:4e:39:24:
         3c:54:da:ee:60:f9:95:03:5e:fd:77:17:b4:d0:58:26:8c:78:
         30:7c:0d:a0:b8:bc:ec:a1:16:d5:49:32:47:a6:a3:64:bf:f9:
         c0:20:f5:64:5f:96:48:58:3a:08:f5:c3:ad:f0:2a:80:a9:c5:
         e1:65:11:a4:99:01:d2:03:b1:16:f0:41:dc:a5:63:09:59:b2:
         10:13:5e:7d:a0:26:6e:35:a8:9a:cc:1e:33:c6:14:58:54:33:
         7c:16:4c:05:2a:e0:1a:e8:9b:7f:a8:25:11:e2:36:a3:9e:34:
         3e:e6:d3:0b:ec:21:3b:df:7d:3b:fa:4a:77:d7:66:ad:11:14:
         dc:cc:be:7f:96:02:4e:a7:85:53:be:90:c0:e7:cd:8f:9e:c1:
         73:08:60:44:46:31:c2:cc:9e:70:97:1e:66:54:92:d6:ab:04:
         b8:69:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:56 2026 by rpki-client