Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e74b0347-1c8e-3a48-8cb5-9563d262469c.roa
File:                     e74b0347-1c8e-3a48-8cb5-9563d262469c.roa (raw, json)
Hash identifier:          I1+3cUmXd0zdav4c2vghg2K2XdMqE/DPwLjndNJ/onw=
Subject key identifier:   D7:FD:B3:C6:F6:28:50:78:27:19:A8:3F:AF:22:64:07:E2:66:55:3F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA7970C403F45A9C25B82FD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e74b0347-1c8e-3a48-8cb5-9563d262469c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11442
IP address blocks:        152.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:0c:40:3f:45:a9:c2:5b:82:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ec46fa5-87e9-4c31-bd4a-db4fab9f24cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:fa:e6:03:e2:c2:aa:d2:d5:6b:e3:b6:17:
                    d2:03:6d:72:8a:a7:5e:cb:02:ea:ce:a6:64:70:fd:
                    99:81:b2:5b:9d:a2:6f:cf:05:09:b4:0c:b1:a7:fb:
                    52:42:b2:f3:ad:c7:34:07:5a:a6:ad:78:c8:56:af:
                    b4:5e:5f:77:37:a6:9c:b6:0b:14:34:3a:b4:54:17:
                    b8:20:0f:ef:fc:68:49:a8:8a:28:c4:e5:a3:bb:55:
                    fb:22:a0:cc:49:cb:23:3b:8c:63:1b:9a:51:e9:22:
                    ae:66:38:2d:03:ab:95:95:b9:a0:66:0d:22:9f:2e:
                    7c:8e:5b:04:8a:7c:b1:64:a0:c0:ce:e9:8d:44:c9:
                    30:6b:73:97:48:10:f0:ae:52:a5:f6:db:68:5f:73:
                    f2:db:88:c1:a1:86:0e:82:82:67:22:e3:ce:7c:a8:
                    ba:1a:74:dc:ef:a7:22:d4:a0:24:f0:e7:70:fc:78:
                    d6:69:9f:a3:66:7a:b8:3e:f0:8f:90:ed:24:17:2f:
                    63:c6:a8:32:40:d7:ca:31:30:6a:e9:e5:1a:3d:1f:
                    b7:f1:bc:bd:fa:a5:53:db:7f:4a:ff:72:29:df:f8:
                    1a:a3:19:37:41:fa:89:37:a0:8b:a6:c3:a2:cd:6f:
                    06:5d:04:6e:d4:d1:00:94:11:28:c2:1f:fc:99:66:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FD:B3:C6:F6:28:50:78:27:19:A8:3F:AF:22:64:07:E2:66:55:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e74b0347-1c8e-3a48-8cb5-9563d262469c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:02:af:ca:3e:6f:bc:90:04:aa:24:7d:62:23:67:ab:75:
         79:fe:ed:d3:f8:f9:5f:81:6d:1c:8d:53:bf:89:a6:68:a3:57:
         fa:a7:52:21:b2:e8:d5:24:c6:9b:9b:e6:00:5f:bc:85:3d:26:
         1f:b2:76:a1:cb:b2:a1:52:3b:d9:47:8d:f5:c7:f7:22:94:f6:
         2e:5f:05:7b:56:49:e3:c0:5d:cf:c8:ff:31:bc:b9:9f:bc:c8:
         07:bc:22:f3:d0:63:57:77:52:fb:76:51:04:33:c1:38:80:66:
         de:fd:c1:3c:a0:fa:bf:e4:85:05:b1:91:1f:d9:f8:2a:e6:1a:
         4a:d7:ee:6b:f2:fe:c4:c5:cb:6a:c7:4e:69:1a:56:83:f7:c7:
         51:fd:71:89:a6:cf:41:ef:b9:28:0b:b5:8c:c4:7e:56:68:54:
         33:c2:b0:1c:40:15:19:bc:85:fa:8b:1a:26:86:04:b4:2b:fc:
         bf:66:76:da:37:8b:50:5e:55:19:e0:95:a9:2a:fa:d6:77:2a:
         7f:39:2e:36:5e:7a:41:38:c4:f1:8d:ac:48:3a:4f:c5:81:1c:
         b6:75:72:53:56:af:ea:17:9b:83:22:31:da:48:12:34:e1:c9:
         04:ea:83:74:cf:6d:51:48:09:a9:1c:cb:2f:c3:0d:2b:76:22:
         04:de:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:13 2026 by rpki-client