Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e22c88e-6944-3e26-9696-aaa973d9cbd6.roa
File:                     3e22c88e-6944-3e26-9696-aaa973d9cbd6.roa (raw, json)
Hash identifier:          J/NIGu/Lk+cGd6YVYGB00cKZqyB8wRt6LdGZgLy/q2k=
Subject key identifier:   A5:B7:17:63:FF:50:5C:0E:98:E2:82:25:DD:67:C3:18:BF:4F:E5:AB
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8FD4E831CC4B9A6245C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e22c88e-6944-3e26-9696-aaa973d9cbd6.roa
Signing time:             Fri 06 Mar 2026 15:38:30 +0000
ROA not before:           Fri 06 Mar 2026 15:38:30 +0000
ROA not after:            Thu 04 Jun 2026 14:38:30 +0000
asID:                     81
IP address blocks:        152.55.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8f:d4:e8:31:cc:4b:9a:62:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:30 2026 GMT
            Not After : Jun  4 14:38:30 2026 GMT
        Subject: CN=bbda2e54-ef8b-4480-af85-68cb0cd623ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:40:4e:ae:0c:12:60:31:09:78:8f:f7:2c:
                    01:71:13:35:18:2f:95:f8:4c:70:7f:9a:c7:5d:ef:
                    b2:fb:d3:10:74:1c:2c:7a:80:ae:18:2f:ae:77:37:
                    d1:03:ac:b5:59:ce:f2:a2:0e:3e:d6:c2:87:14:85:
                    66:99:9f:8f:91:f1:19:fd:ef:b1:27:e9:b6:9f:93:
                    12:ec:8b:2c:65:5f:61:f8:dc:0f:08:e5:77:87:cf:
                    4f:04:f9:dc:92:17:81:74:c5:2c:d2:81:13:c5:26:
                    61:17:35:05:33:27:5d:08:70:e1:9c:2c:dc:2c:35:
                    3e:aa:28:32:b2:9e:5b:b1:c0:84:63:a7:3c:c2:1a:
                    89:9e:53:8d:94:a8:71:a6:85:63:a2:ba:45:5c:58:
                    fd:a5:24:dc:53:4c:1f:9f:db:cd:08:5c:5c:41:34:
                    ab:33:7c:39:87:db:29:bc:62:94:67:89:f5:0a:3d:
                    da:4f:8f:87:0e:de:11:c6:8c:f9:85:d8:c4:f3:e0:
                    66:3a:55:b0:30:83:29:11:ff:e2:78:a6:24:0c:4d:
                    9f:78:1d:03:0d:3e:82:9c:28:b1:84:1b:b6:c1:bb:
                    ed:43:d1:f2:a5:a6:32:fb:8a:c7:ba:7a:11:68:50:
                    9d:ed:18:4e:69:08:cb:f4:7d:21:a3:fb:1b:e0:36:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B7:17:63:FF:50:5C:0E:98:E2:82:25:DD:67:C3:18:BF:4F:E5:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e22c88e-6944-3e26-9696-aaa973d9cbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.55.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:a7:79:8b:75:f9:e3:5d:97:f5:df:2b:9c:db:52:6f:90:
         27:15:a2:c8:48:30:af:34:14:0c:4f:cc:60:ef:c7:4d:da:74:
         87:cb:be:02:7b:7d:7d:b2:a3:87:a9:29:9c:84:89:53:0a:00:
         65:4e:1b:da:fd:7c:0d:2c:07:6b:06:21:ed:dd:30:46:00:0c:
         74:36:9a:34:6f:b2:b3:51:69:6e:f0:c8:07:32:81:66:79:92:
         d3:2c:f9:0f:08:b1:5d:1e:36:0c:b8:8f:45:5e:12:65:b7:be:
         30:2e:77:e0:ff:f5:83:8b:1e:73:63:dd:39:57:b2:66:dc:05:
         75:1d:96:80:b3:43:7a:40:e9:af:73:58:21:be:aa:e1:9c:30:
         8a:a2:28:a9:3a:df:c2:41:e6:3d:76:da:b9:c3:a2:f5:26:7b:
         69:1f:de:08:10:45:5d:c2:f0:72:53:c4:3e:c1:eb:4e:1a:3f:
         c4:d5:3f:a8:4f:38:01:7e:01:aa:49:82:1f:de:67:2d:be:a4:
         b3:8e:82:ca:c1:bd:ab:a1:75:82:1e:79:07:cf:a9:a4:48:a4:
         7b:08:51:e4:ed:04:ec:9f:5b:27:c0:7b:90:35:97:66:7c:16:
         b5:a2:2c:cb:bb:a6:9f:3e:0c:fd:0a:55:fd:f9:91:79:13:b2:
         d3:88:a0:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbY/U6DHMS5piRcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgzMFoXDTI2MDYwNDE0MzgzMFowLzEtMCsGA1UEAxMk
YmJkYTJlNTQtZWY4Yi00NDgwLWFmODUtNjhjYjBjZDYyM2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW5ATq4MEmAxCXiP9ywBcRM1GC+V+Exwf5rH
Xe+y+9MQdBwseoCuGC+udzfRA6y1Wc7yog4+1sKHFIVmmZ+PkfEZ/e+xJ+m2n5MS
7IssZV9h+NwPCOV3h89PBPnckheBdMUs0oETxSZhFzUFMyddCHDhnCzcLDU+qigy
sp5bscCEY6c8whqJnlONlKhxpoVjorpFXFj9pSTcU0wfn9vNCFxcQTSrM3w5h9sp
vGKUZ4n1Cj3aT4+HDt4Rxoz5hdjE8+BmOlWwMIMpEf/ieKYkDE2feB0DDT6CnCix
hBu2wbvtQ9HypaYy+4rHunoRaFCd7RhOaQjL9H0ho/sb4DaRgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW3F2P/UFwOmOKCJd1nwxi/T+WrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2UyMmM4OGUtNjk0NC0z
ZTI2LTk2OTYtYWFhOTczZDljYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmDcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOzp3mLdfnjXZf13yuc21JvkCcVoshIMK80FAxPzGDvx03adIfLvgJ7
fX2yo4epKZyEiVMKAGVOG9r9fA0sB2sGIe3dMEYADHQ2mjRvsrNRaW7wyAcygWZ5
ktMs+Q8IsV0eNgy4j0VeEmW3vjAud+D/9YOLHnNj3TlXsmbcBXUdloCzQ3pA6a9z
WCG+quGcMIqiKKk638JB5j122rnDovUme2kf3ggQRV3C8HJTxD7B604aP8TVP6hP
OAF+AapJgh/eZy2+pLOOgsrBvauhdYIeeQfPqaRIpHsIUeTtBOyfWyfAe5A1l2Z8
FrWiLMu7pp8+DP0KVf35kXkTstOIoGQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:24 2026 by rpki-client