Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0759cef3-db96-3c3a-900e-060fd4427644.roa
File:                     0759cef3-db96-3c3a-900e-060fd4427644.roa (raw, json)
Hash identifier:          V8SJqVFf0UJqL5QLpaO2J5PdKm1Q7czYw6vk4fx63OE=
Subject key identifier:   A8:2B:E2:E0:5B:1C:3C:D5:98:E3:85:A6:9E:88:44:BA:C3:2D:C3:BE
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8B0DEB39755F45CFE7E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0759cef3-db96-3c3a-900e-060fd4427644.roa
Signing time:             Fri 06 Mar 2026 15:38:27 +0000
ROA not before:           Fri 06 Mar 2026 15:38:27 +0000
ROA not after:            Thu 04 Jun 2026 14:38:27 +0000
asID:                     81
IP address blocks:        152.26.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8b:0d:eb:39:75:5f:45:cf:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:27 2026 GMT
            Not After : Jun  4 14:38:27 2026 GMT
        Subject: CN=50246592-3acd-43cf-bb00-8fc24fd453a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:8f:97:90:9e:2c:4b:25:7d:68:58:0a:82:
                    a2:01:41:64:12:50:90:a1:c7:ac:eb:a4:c6:f3:30:
                    d4:7b:ef:c9:e1:39:c9:2e:89:2e:d9:7d:30:ff:8f:
                    4b:11:36:36:fc:a5:f5:ab:36:2c:73:c4:53:4c:92:
                    61:c2:00:b5:20:d0:77:f8:4c:d4:f3:5b:8a:f5:c4:
                    fa:b1:f1:53:af:e1:4a:6c:c1:47:7a:d1:3b:af:2a:
                    b9:3e:6c:10:92:11:7d:44:c2:15:62:f4:1c:79:3a:
                    bf:df:e1:0f:cf:e4:6a:b9:dc:70:4b:b9:80:f1:17:
                    10:2a:33:49:30:88:44:80:d1:25:17:7c:85:b5:1a:
                    8c:f8:f2:f4:dc:e7:7d:5e:6d:ca:f6:21:6f:e0:8d:
                    4c:5d:fd:45:09:4e:2f:56:c7:65:b4:51:a3:5d:78:
                    a8:a5:13:57:9c:e0:db:15:c6:d8:47:4d:11:ce:10:
                    e3:74:8a:66:ea:45:4b:28:b5:75:5f:fd:ab:36:33:
                    a2:42:77:0b:6d:5b:5c:7b:40:48:fc:bc:d1:7f:21:
                    4f:89:a2:34:9c:18:39:17:8a:84:5c:56:4b:b5:1d:
                    24:64:5e:10:6b:93:34:ba:dd:a8:49:b9:2a:3d:95:
                    1e:c2:21:a4:b0:b1:4d:77:f4:58:ef:29:57:95:1d:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2B:E2:E0:5B:1C:3C:D5:98:E3:85:A6:9E:88:44:BA:C3:2D:C3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0759cef3-db96-3c3a-900e-060fd4427644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:6f:20:b2:a7:23:5f:da:9d:7e:19:3b:6d:91:4b:b3:f1:
         71:d5:bd:33:b7:67:a9:98:51:ca:ef:cf:96:a3:b9:02:f0:60:
         9c:bd:5e:ff:5b:86:26:68:37:73:b7:57:f6:63:86:7d:84:ac:
         c1:91:e4:43:1d:ff:8e:c1:cb:79:45:fe:77:b5:d8:9e:06:f1:
         00:cf:e6:4b:db:de:50:5e:ac:be:52:d3:d6:e1:6d:c3:1f:b8:
         d8:89:d3:75:4f:90:06:77:57:aa:44:8e:37:45:65:87:50:e5:
         b6:11:25:b7:f2:2c:a1:00:5b:5a:e8:2b:34:57:31:df:8e:e2:
         2a:b2:d9:bc:f7:a6:62:85:fa:2b:67:9a:18:8c:f1:0a:47:ed:
         c6:dc:ce:c8:d3:2b:1b:cc:f8:c3:ee:16:4a:04:8f:7d:7e:cd:
         a0:70:e0:6c:cd:b2:df:f4:5a:0c:91:26:4e:bd:e3:0e:7d:10:
         7f:05:9f:5f:a0:90:52:7b:e1:70:fa:f5:ab:39:b0:dd:23:50:
         f3:be:fb:2a:97:33:e2:c6:3b:b3:23:6c:31:ba:ba:4a:64:13:
         1b:9d:b0:78:8e:53:f2:09:5b:82:83:21:11:f3:30:4f:d1:26:
         68:66:60:36:df:92:80:f3:87:fd:43:25:77:26:fe:27:e8:31:
         4b:d1:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:23 2026 by rpki-client