Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e0b5467-48a2-3ce2-bef8-8125268d3e34.roa
File:                     1e0b5467-48a2-3ce2-bef8-8125268d3e34.roa (raw, json)
Hash identifier:          9FkLSTNXShBXplpcZc3xqtcSXB5jVBgswC49d5lJ1aM=
Subject key identifier:   D1:CD:E2:9A:BA:13:56:89:BF:FB:A7:01:96:A8:6E:73:2C:17:ED:93
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C67799AD5E390D25FD0C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e0b5467-48a2-3ce2-bef8-8125268d3e34.roa
Signing time:             Fri 10 Oct 2025 15:41:19 +0000
ROA not before:           Fri 10 Oct 2025 15:41:19 +0000
ROA not after:            Thu 08 Jan 2026 16:41:19 +0000
asID:                     81
IP address blocks:        152.55.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:67:79:9a:d5:e3:90:d2:5f:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:19 2025 GMT
            Not After : Jan  8 16:41:19 2026 GMT
        Subject: CN=5671745c-d573-49ea-a155-c78d0e2b1fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:9a:85:a4:e5:40:27:89:0d:ad:db:5d:cb:
                    07:2e:49:9d:09:02:32:2a:ed:76:bc:4f:ba:66:87:
                    20:14:df:7e:95:90:be:38:80:95:76:87:4d:19:3b:
                    9a:f8:4b:0a:79:b6:2e:d1:bd:34:1d:7b:32:3f:48:
                    9d:c4:ac:a5:fc:bf:34:b0:a7:25:c5:28:26:c8:4a:
                    0d:e4:0d:6e:64:fa:b1:27:50:79:31:f2:2f:9a:6f:
                    e7:26:12:c0:6b:33:23:fd:0a:82:2b:69:47:fb:66:
                    2a:71:fb:75:1d:d9:d7:05:4d:72:1f:0f:17:a6:42:
                    c4:5a:5b:89:16:95:96:5d:1e:5a:59:a4:7a:00:c6:
                    9f:32:b9:9b:7e:d4:65:ab:f7:cf:66:77:94:81:36:
                    e7:09:6e:cd:47:9b:b8:4c:c0:01:7a:ed:d9:ea:c9:
                    ae:fc:4a:0a:02:fd:86:79:a7:9d:e3:6a:df:58:83:
                    3c:ba:9b:4a:10:7d:8a:34:06:6e:13:79:02:42:18:
                    83:3e:7f:3f:36:c9:d3:18:a1:b6:24:85:a3:9d:b0:
                    27:c2:b4:65:22:a9:3c:95:8a:89:f4:e0:35:b7:9a:
                    26:93:50:e1:1e:3a:da:6c:f7:32:80:52:55:5a:fe:
                    02:3b:cc:d2:98:ac:e1:35:1f:8a:0e:16:d7:a2:4d:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:E2:9A:BA:13:56:89:BF:FB:A7:01:96:A8:6E:73:2C:17:ED:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e0b5467-48a2-3ce2-bef8-8125268d3e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:80:7f:8f:30:e0:ae:a5:ae:e0:9e:1b:5a:67:ab:aa:d2:
         a8:4d:cc:e6:6f:fa:91:1c:b1:9d:3f:ca:2c:23:a0:c6:20:52:
         ac:81:ba:3d:e5:40:7a:07:f8:e6:af:20:be:65:52:c3:5c:38:
         9d:60:da:80:1e:83:d4:41:59:21:da:fe:79:7a:59:f9:63:98:
         b3:8d:b5:b5:b2:41:af:e3:6a:07:ec:a2:c4:d8:6d:ac:96:0d:
         50:36:61:c1:5c:54:8e:75:62:77:e5:37:8d:b7:4a:97:30:bd:
         1b:51:e4:12:2f:3c:c2:ce:00:38:da:b2:77:d4:06:4e:f5:ec:
         94:d7:5a:3d:73:78:fa:73:e5:c9:b3:d4:15:da:c5:4c:42:88:
         1f:64:8f:a8:d5:86:dd:21:9e:31:d3:7d:c8:97:fd:1b:66:e4:
         58:5c:3d:f7:c1:d0:61:85:4c:ae:29:16:73:53:2c:5c:97:a0:
         32:e7:ea:52:4f:1d:1a:db:ec:4c:3f:bd:30:29:b2:b6:57:c4:
         68:d9:e2:74:ff:f8:d1:0f:61:d4:51:45:5f:dd:ee:df:5d:a3:
         22:2d:dd:0d:8e:a7:b4:79:26:c4:a8:ae:37:c4:2b:6b:a2:6e:
         34:58:dc:c3:27:1b:77:39:c6:d0:db:2a:df:56:d7:48:c5:36:
         4b:e8:07:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:08 2025 by rpki-client