Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2aa19683-7356-3cf3-a9c9-e3895dd55ce2.roa
File:                     2aa19683-7356-3cf3-a9c9-e3895dd55ce2.roa (raw, json)
Hash identifier:          mxfgIMa9G8sYm79oHV40crXv+F9NMhS88OfjicpfJgc=
Subject key identifier:   48:7C:7B:86:DC:3C:1E:CD:0A:DF:9C:CA:4E:7C:38:75:30:30:6A:DD
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8BBE1888F4828706EE00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2aa19683-7356-3cf3-a9c9-e3895dd55ce2.roa
Signing time:             Fri 06 Mar 2026 15:38:28 +0000
ROA not before:           Fri 06 Mar 2026 15:38:28 +0000
ROA not after:            Thu 04 Jun 2026 14:38:28 +0000
asID:                     15153
IP address blocks:        152.26.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8b:be:18:88:f4:82:87:06:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:28 2026 GMT
            Not After : Jun  4 14:38:28 2026 GMT
        Subject: CN=95a7c75f-d30b-4229-9417-6f75886cc904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:61:a0:27:b4:ae:54:73:86:33:4a:26:a0:
                    a9:4f:4f:97:04:e1:66:43:d9:e5:b5:91:6d:81:f0:
                    0a:dc:77:01:53:f4:e8:e8:52:8f:55:0f:21:95:d2:
                    32:c6:e6:68:83:05:ed:eb:6b:c6:a6:98:df:40:e9:
                    9f:e7:8a:ac:37:5d:da:29:b0:5f:b4:d2:2c:ff:19:
                    81:e2:52:49:3e:0d:36:6a:0f:7a:98:c7:9b:5c:69:
                    73:e8:5c:2c:55:b0:bd:d2:17:fc:ee:32:e2:ab:62:
                    fd:c6:b7:79:91:e2:ff:97:0c:67:1d:21:6c:50:6a:
                    6a:21:cf:ce:ee:8f:48:d4:92:26:aa:90:92:d5:cf:
                    4b:a1:20:86:7f:8b:71:70:5e:a6:b9:de:c1:1c:9a:
                    b4:07:67:37:47:a0:f7:b4:43:a1:3c:23:ab:18:b4:
                    b7:de:bf:dc:4d:2c:0d:63:ae:72:2d:99:b6:8b:6e:
                    08:49:6c:4d:96:f5:2a:77:4f:0e:e6:b9:84:62:8e:
                    21:09:6a:d5:c9:3d:71:fe:20:cf:0f:b0:ef:d7:19:
                    46:d6:c9:a9:1b:a5:be:95:26:58:4f:a8:ef:de:6f:
                    a6:79:54:22:ec:25:77:dd:e8:73:b3:c2:0e:77:e3:
                    a1:6a:04:0d:11:af:13:47:a5:10:9a:6b:7a:27:3b:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:7B:86:DC:3C:1E:CD:0A:DF:9C:CA:4E:7C:38:75:30:30:6A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2aa19683-7356-3cf3-a9c9-e3895dd55ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:63:94:04:40:1a:4c:fb:f0:b6:51:85:1c:5c:74:72:d2:ac:
         a0:dd:8b:01:78:6c:8b:1c:9b:d5:44:cf:c8:a7:bc:b1:1a:e6:
         b9:80:b8:81:c4:06:bb:ca:17:34:cf:8c:ed:25:55:7b:4e:1b:
         ac:53:4a:ef:a2:67:52:19:fa:5a:49:b2:84:ba:aa:fe:af:84:
         37:15:ca:3a:65:39:ff:b2:98:58:d2:c0:16:3d:0e:09:e1:8a:
         c2:81:d4:86:7b:e1:a1:cc:5d:da:6d:b9:25:3c:b8:7b:77:df:
         9e:dc:7f:19:df:0a:3f:c5:32:67:e1:49:ce:4f:81:56:e6:75:
         bd:ba:03:fa:ae:cc:3a:19:48:21:fe:13:22:e3:68:12:48:d7:
         17:37:28:2c:94:78:51:fb:22:c6:34:9e:e8:b1:b8:09:1a:36:
         bc:18:a4:45:42:f1:98:9e:fc:a5:89:9c:90:b5:78:87:4c:c4:
         8c:6f:50:26:9d:08:81:ff:d8:0e:dc:d2:7c:55:e5:1a:a0:51:
         e1:10:67:6e:68:d1:91:2b:26:e5:c8:9d:fb:23:53:96:43:52:
         b4:e7:3c:10:c8:b9:7f:42:74:69:38:c8:41:f6:fe:4b:09:1c:
         97:93:44:e3:d9:04:9d:f3:3d:36:6a:2a:bc:cc:91:0a:c3:b6:
         cd:34:c4:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYu+GIj0gocG7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk
OTVhN2M3NWYtZDMwYi00MjI5LTk0MTctNmY3NTg4NmNjOTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTRhoCe0rlRzhjNKJqCpT0+XBOFmQ9nltZFt
gfAK3HcBU/To6FKPVQ8hldIyxuZogwXt62vGppjfQOmf54qsN13aKbBftNIs/xmB
4lJJPg02ag96mMebXGlz6FwsVbC90hf87jLiq2L9xrd5keL/lwxnHSFsUGpqIc/O
7o9I1JImqpCS1c9LoSCGf4txcF6mud7BHJq0B2c3R6D3tEOhPCOrGLS33r/cTSwN
Y65yLZm2i24ISWxNlvUqd08O5rmEYo4hCWrVyT1x/iDPD7Dv1xlG1smpG6W+lSZY
T6jv3m+meVQi7CV33ehzs8IOd+OhagQNEa8TR6UQmmt6JzvgBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEh8e4bcPB7NCt+cyk58OHUwMGrdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMmFhMTk2ODMtNzM1Ni0z
Y2YzLWE5YzktZTM4OTVkZDU1Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNjlARAGkz78LZRhRxcdHLSrKDdiwF4bIscm9VEz8invLEa5rmAuIHE
BrvKFzTPjO0lVXtOG6xTSu+iZ1IZ+lpJsoS6qv6vhDcVyjplOf+ymFjSwBY9Dgnh
isKB1IZ74aHMXdptuSU8uHt3357cfxnfCj/FMmfhSc5PgVbmdb26A/quzDoZSCH+
EyLjaBJI1xc3KCyUeFH7IsY0nuixuAkaNrwYpEVC8Zie/KWJnJC1eIdMxIxvUCad
CIH/2A7c0nxV5RqgUeEQZ25o0ZErJuXInfsjU5ZDUrTnPBDIuX9CdGk4yEH2/ksJ
HJeTROPZBJ3zPTZqKrzMkQrDts00xBg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:16:03 2026 by rpki-client