Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/043dd270-5a2d-317b-9074-898a41c93a8d.roa
File:                     043dd270-5a2d-317b-9074-898a41c93a8d.roa (raw, json)
Hash identifier:          1Wd2EMaOscBhRJ10MaAXWrRHf6ZuR0Fnw539WcjBNwQ=
Subject key identifier:   57:4B:1B:6B:88:7D:F7:38:9E:FC:F6:99:94:B2:6B:81:C0:E8:32:C2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6A0A14F2D58B6D746050
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/043dd270-5a2d-317b-9074-898a41c93a8d.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     81
IP address blocks:        152.26.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6a:0a:14:f2:d5:8b:6d:74:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=77d2393d-efdb-4dd7-b6fc-2c4300d7f34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:e4:f5:3c:18:a3:a0:2a:15:6d:68:40:92:
                    29:2a:8f:02:49:cb:8a:e2:ea:db:ee:95:ed:40:fa:
                    cd:51:14:3d:56:b8:2d:4f:ee:56:62:d2:c5:38:5a:
                    36:d7:ed:a0:e6:d8:0c:94:5b:e2:92:1b:cc:ce:f2:
                    da:9f:38:07:c8:46:57:8f:cf:20:6e:52:1b:9c:58:
                    73:97:1e:30:4d:bb:1f:27:49:96:a9:8f:f2:eb:4f:
                    e1:1d:0e:17:fa:ef:02:c9:a8:41:97:ec:54:4f:3f:
                    48:73:ba:0a:fb:a8:74:21:bf:dc:c9:cd:8c:6e:50:
                    a3:39:16:bf:ed:c5:72:7c:1d:cf:78:08:04:67:fa:
                    23:bf:3b:46:ed:4b:28:1a:2c:74:5e:81:0f:03:bd:
                    7d:b4:64:bd:68:ee:0f:7d:28:0a:5f:a7:c6:fe:72:
                    ba:c9:e4:10:6b:bc:ec:d3:e5:07:3d:17:c0:62:2d:
                    62:86:62:f8:73:fc:b3:c1:16:37:46:5d:a2:11:f0:
                    e6:96:39:26:01:48:aa:26:e0:25:48:47:d5:14:77:
                    d0:3c:ee:76:5d:0e:d8:7b:59:58:d3:20:ad:dd:f1:
                    00:1e:fa:dc:fb:84:f8:cd:d1:d4:a7:0c:cb:86:bb:
                    01:f8:e3:7b:3b:ea:4e:e2:b2:49:c8:04:1e:23:94:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:1B:6B:88:7D:F7:38:9E:FC:F6:99:94:B2:6B:81:C0:E8:32:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/043dd270-5a2d-317b-9074-898a41c93a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:9f:7b:ae:cb:bb:70:9a:98:9e:4c:94:57:9d:b3:49:cc:
         3d:33:3d:e1:6c:fb:4c:a4:c1:ba:9b:bf:59:c3:90:7d:be:b9:
         8d:19:72:61:27:9f:01:7c:c0:3a:7e:06:46:22:f5:4f:83:a8:
         7d:8b:ac:36:c4:a5:0c:48:fc:23:cd:32:3b:6a:37:b1:8b:7a:
         e5:2e:18:1a:0c:34:e1:9a:f9:8a:22:a9:67:fb:1c:9a:49:12:
         9b:0b:54:53:6a:51:1c:f7:42:0d:15:19:27:3b:81:ff:57:5f:
         cc:2d:78:fd:c7:71:86:1c:03:ae:5e:2f:09:e7:68:1c:6c:99:
         e0:2e:1d:4e:12:f8:93:9d:ad:14:72:d4:83:c2:58:f3:bf:ea:
         35:fd:ec:12:c6:ec:e4:f6:66:c6:6f:af:1a:71:72:14:31:08:
         a5:63:32:22:6d:52:4e:7b:ad:05:a2:be:47:8d:9d:c9:3e:8b:
         26:d3:08:78:b9:5f:9d:de:05:82:e2:79:92:4a:a0:71:bd:ad:
         15:4d:53:e4:3d:47:92:3e:f4:21:df:d9:6a:47:0c:dd:40:73:
         f3:7e:e7:a8:ff:a8:f3:ac:63:3b:53:9f:a7:33:a4:53:d3:05:
         4d:0a:c6:f9:bb:f9:8d:67:f1:14:60:91:5d:a1:40:8a:64:7e:
         5b:8b:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:05 2025 by rpki-client