Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0f83f151-9c07-3127-9bf3-ddd22f68ce6d.roa
File:                     0f83f151-9c07-3127-9bf3-ddd22f68ce6d.roa (raw, json)
Hash identifier:          c0D4n5AVfs4hvpZ+80P1YWaRksJNVb+v4hjO/tC9DzE=
Subject key identifier:   DD:E2:88:15:E7:C1:D3:0D:02:0F:5D:2A:E9:B6:29:45:70:E3:44:4E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C69FB743D0BFB0DBB84A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0f83f151-9c07-3127-9bf3-ddd22f68ce6d.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     81
IP address blocks:        152.26.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:69:fb:74:3d:0b:fb:0d:bb:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=ad58abd7-3841-4a96-929d-9e95b654f2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:4a:f7:0f:d7:30:91:88:d0:77:fa:b1:73:
                    f0:5e:19:37:2b:ed:9e:54:a5:36:2b:0d:6f:82:8e:
                    24:72:61:d0:06:e6:4e:4c:01:c8:9d:d9:a8:2a:88:
                    9b:09:96:5c:2e:f6:17:e5:3e:65:fe:86:9c:35:f6:
                    66:83:01:78:07:9f:e1:4c:11:93:e6:a0:7f:8a:22:
                    8a:de:83:7a:79:cf:1f:8e:87:55:07:aa:0e:86:6e:
                    ad:78:a3:bc:b3:35:96:26:7e:fc:35:32:f8:61:b5:
                    b0:b1:f5:e5:5a:f9:ea:13:5b:f8:a6:49:5c:11:54:
                    11:57:45:3c:cc:03:fb:d1:0d:44:b6:74:fd:ba:79:
                    1a:a5:e8:3d:8f:b0:ac:6f:a7:fb:46:ff:41:e3:2b:
                    f5:25:7f:c2:5c:8e:51:a6:aa:cb:66:12:01:1c:4c:
                    a8:3b:ac:ff:9c:bc:2f:1f:2c:80:b4:da:5e:f4:13:
                    6b:3c:48:c2:fe:d0:ce:4f:ed:84:50:fa:73:da:a8:
                    dc:f8:17:76:b3:ae:e6:d7:10:1c:49:5b:89:ba:13:
                    08:68:d7:5d:86:3c:a5:76:ff:47:c5:6c:95:3a:5f:
                    ad:60:a4:76:d2:f2:24:d3:f9:c1:13:21:d0:76:09:
                    ee:1e:ff:2d:80:c0:fd:d1:43:a1:d1:9a:b6:c1:70:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:88:15:E7:C1:D3:0D:02:0F:5D:2A:E9:B6:29:45:70:E3:44:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0f83f151-9c07-3127-9bf3-ddd22f68ce6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:c3:44:c0:d4:2c:58:16:f2:1f:01:d2:12:3b:8a:e8:4e:
         49:fc:0f:d4:a1:ca:b1:f7:5d:2f:16:b7:da:1e:29:5b:94:97:
         6d:e1:71:e3:6c:c3:37:1f:4c:92:5b:d8:37:ab:dd:65:89:dd:
         8b:a3:a4:3a:d0:9a:48:8b:ca:93:8e:74:e3:d1:76:ad:d6:4c:
         fb:1a:df:ed:34:fc:5c:ad:03:7c:16:52:22:a1:6b:dd:6d:ac:
         17:d9:cd:71:8a:aa:c9:81:fb:25:5f:83:eb:d6:ec:27:fd:d1:
         d2:ae:98:71:61:36:97:2b:95:01:9f:a4:fe:3e:e8:eb:48:a3:
         08:a6:55:58:d2:07:76:42:a6:d6:0b:51:5e:2c:5f:33:16:14:
         4f:29:1d:cf:a9:e5:9d:8d:59:45:3b:86:8a:88:49:8d:3e:6f:
         20:15:bb:11:ee:1c:c8:0b:1e:54:c7:e4:d8:13:e5:d4:39:2d:
         b9:6f:4a:86:d4:5b:6b:b6:91:11:02:44:c4:84:45:ec:ce:70:
         68:de:75:79:32:40:e2:56:58:5b:8c:3d:f3:16:c7:55:c7:15:
         32:16:e3:80:5d:2b:7e:ea:d8:9d:32:a8:be:f2:67:7a:9e:9b:
         40:7c:38:1a:24:5e:59:16:a4:10:0b:ed:c5:59:53:f8:1b:20:
         c1:d4:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:28 2025 by rpki-client