Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/664fde82-2310-3471-9229-7e6824e60b14.roa
File:                     664fde82-2310-3471-9229-7e6824e60b14.roa (raw, json)
Hash identifier:          a3XuCGAUbTtMk5/JYBLET64EEarBPv0Pn151StLnrMg=
Subject key identifier:   E4:AE:8F:23:E9:FB:2E:58:91:FC:3E:22:C8:FD:95:03:8A:F5:8D:93
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8DFB19503AA4CBCE9950
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/664fde82-2310-3471-9229-7e6824e60b14.roa
Signing time:             Fri 06 Mar 2026 15:38:29 +0000
ROA not before:           Fri 06 Mar 2026 15:38:29 +0000
ROA not after:            Thu 04 Jun 2026 14:38:29 +0000
asID:                     81
IP address blocks:        152.46.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8d:fb:19:50:3a:a4:cb:ce:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:29 2026 GMT
            Not After : Jun  4 14:38:29 2026 GMT
        Subject: CN=cb560922-45f2-4877-99ee-1c1146a3ddd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:09:48:60:57:09:77:ac:21:85:fd:9d:a1:
                    1f:26:be:1c:46:eb:62:ec:e2:98:1c:54:15:94:c3:
                    77:d3:ec:7d:22:9c:c2:e2:df:1f:a5:1b:15:2a:68:
                    05:70:0a:94:88:76:39:97:de:9e:eb:89:34:d0:56:
                    96:8f:df:51:74:4d:e8:6f:48:37:25:2c:6f:30:ec:
                    e6:60:b8:d2:2f:2b:e3:cd:f5:14:96:ed:f3:47:33:
                    cc:7d:4c:d8:8d:ad:e4:e1:59:89:dd:93:d4:d5:90:
                    d3:5a:49:c1:96:30:16:27:66:89:61:d0:11:ef:99:
                    f9:95:23:f7:a6:61:c0:47:53:ed:fe:ef:1a:09:52:
                    69:fa:bf:bc:bf:80:25:a2:6b:15:0d:f1:55:cd:ee:
                    37:6d:30:a5:20:54:7c:dd:0c:e1:76:e3:8f:8c:38:
                    e1:19:91:27:68:40:a3:c8:1a:73:6e:a7:3c:60:52:
                    1b:23:d8:5f:ee:be:02:eb:95:94:34:57:2e:69:03:
                    c7:8b:6a:bf:06:43:fa:04:96:54:9a:b1:39:9f:3c:
                    32:88:56:34:eb:80:1a:b5:e1:50:e7:de:50:46:e2:
                    ce:a5:48:3a:ab:3c:bd:32:63:b5:53:33:85:2d:12:
                    c6:53:bf:41:9b:d0:d6:57:33:f2:c2:b7:41:81:bb:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:8F:23:E9:FB:2E:58:91:FC:3E:22:C8:FD:95:03:8A:F5:8D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/664fde82-2310-3471-9229-7e6824e60b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8c:29:db:dd:a7:36:e3:dc:14:30:69:d3:d3:5f:58:08:9f:
         76:bc:fa:06:a4:dc:66:84:96:92:01:67:be:28:76:44:51:18:
         df:03:a5:fa:d5:3f:30:68:49:28:4c:d8:c3:c8:7e:d1:13:85:
         c6:29:9c:8b:91:9b:d7:2d:fa:a0:87:55:c0:de:dd:29:b0:0c:
         2e:97:d4:ba:eb:db:d0:33:7f:3c:47:11:a7:9b:9c:f4:c4:94:
         5e:c2:a8:86:9d:f1:4a:34:54:e8:e4:0e:51:f0:61:6b:dc:ad:
         8d:d0:64:a0:1f:66:ac:cf:15:54:06:93:1d:4a:f3:e5:69:fa:
         e7:7e:af:41:f4:90:b0:cb:2f:9d:96:63:01:75:c3:b5:48:2c:
         7d:32:ca:f9:9e:3b:f0:c6:8f:c7:d7:54:4e:67:dc:e5:4c:1b:
         a2:98:1c:ee:ef:87:e0:42:7d:bc:1e:d6:eb:e1:a9:da:b1:b4:
         94:72:08:bb:10:7f:97:b0:9f:6f:b0:ee:eb:24:e0:25:54:60:
         76:bb:ce:99:f4:1c:9e:8a:18:d1:ce:3f:c0:95:46:58:f5:72:
         bb:e7:a3:37:71:f9:40:e2:fa:b5:04:9d:28:11:8c:8f:d6:8a:
         f3:3f:80:ad:d2:49:a0:4d:28:2c:01:5b:76:b8:f1:7b:eb:1f:
         5f:18:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:40 2026 by rpki-client