Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece121ba-9bb2-372c-a8e2-78b6649e5e40.roa
File:                     ece121ba-9bb2-372c-a8e2-78b6649e5e40.roa (raw, json)
Hash identifier:          LeXHOQavoRmpBHip77QDmk8UcIHz7ZOQXGVlRgsN5sM=
Subject key identifier:   0C:47:03:BF:17:93:96:1E:E1:19:FA:B7:F8:3F:65:5A:D1:61:AB:7D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA7970BDFC607FC547D10E700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece121ba-9bb2-372c-a8e2-78b6649e5e40.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.46.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:0b:df:c6:07:fc:54:7d:10:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=427ab046-aaf2-4f92-985b-feb72a0b5492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:bb:71:f8:ca:74:26:87:39:38:f2:83:1f:
                    8e:36:f5:36:e5:d9:7a:12:96:9b:6e:99:07:1f:6b:
                    a3:b9:9b:83:92:2b:09:79:99:75:f3:21:f6:54:19:
                    f1:74:21:04:1b:05:29:7b:6e:e3:06:b5:43:94:4b:
                    eb:40:10:de:1e:8c:a8:73:f0:c2:fa:0e:0c:73:cb:
                    a6:47:f1:f0:67:8c:ba:2d:51:7d:65:c4:a5:a6:11:
                    2c:74:a1:14:62:77:2c:0c:09:d7:f0:f5:26:c1:86:
                    63:fe:bf:90:06:f3:2c:77:6e:30:36:17:57:68:b7:
                    95:2c:2e:7e:ed:87:d3:9f:a1:6c:94:a2:cd:5a:0e:
                    14:e9:50:9a:35:bb:20:bd:49:46:b5:37:a7:b7:53:
                    aa:e7:a6:d7:c9:9c:a3:e8:7d:03:04:3f:dd:18:64:
                    31:27:0f:4b:16:00:93:9f:f3:19:cb:2b:73:85:33:
                    c8:c6:30:e4:1c:7a:6f:59:cf:33:09:eb:d1:62:61:
                    a6:4a:49:7e:b4:b8:c9:da:dc:32:c9:66:0f:f3:de:
                    cd:fc:c7:4f:b8:86:47:82:22:19:28:56:6d:fb:82:
                    79:70:45:3a:a7:59:37:a2:75:23:da:c2:f0:9d:b5:
                    56:a9:c4:33:d4:ff:57:b7:5e:e6:55:84:6b:7d:5a:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:03:BF:17:93:96:1E:E1:19:FA:B7:F8:3F:65:5A:D1:61:AB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ece121ba-9bb2-372c-a8e2-78b6649e5e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:34:34:0d:d9:44:c5:42:6d:6f:98:67:b3:fb:1e:d5:81:
         61:77:64:9f:27:7d:2c:57:24:25:75:0e:d7:f9:b5:d0:aa:5e:
         58:92:54:e4:f7:79:f7:f0:f0:c6:f8:38:3d:e7:2f:40:08:8f:
         a5:9d:8b:2b:6b:6f:47:82:00:88:cd:01:41:d6:71:f2:59:d6:
         b6:1b:3d:a5:a2:25:7b:a6:a1:64:18:86:53:c8:48:a9:9d:cb:
         31:5a:4b:d2:89:3a:ba:fb:d7:4c:62:7f:a9:24:ea:4d:6f:e6:
         d6:be:8f:9c:88:47:be:c8:d5:e2:a4:fb:f4:fe:4f:73:a9:d9:
         74:41:b2:9b:e2:72:44:8d:36:68:5a:08:2b:c4:40:6b:04:67:
         03:a5:05:cc:79:54:8d:80:5e:8a:bb:48:c3:42:d4:ee:22:22:
         45:47:31:86:b7:6f:de:30:ac:48:20:37:51:af:16:92:f8:89:
         7d:71:43:15:04:20:5b:9c:33:30:37:10:ec:67:b0:2b:d0:53:
         09:ae:70:a3:d0:6a:b3:3a:59:63:59:38:26:4b:d3:c9:4a:8b:
         98:3a:15:00:76:cf:f6:24:5d:6e:48:82:03:f7:a1:ff:b6:18:
         f5:8c:0e:9f:c0:aa:04:b5:08:ef:74:cf:9c:4b:ac:a5:81:52:
         b9:22:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:19 2026 by rpki-client