Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa
File:                     6656e98a-d5b4-3c02-9874-8722e972952f.roa (raw, json)
Hash identifier:          6yFKp1lR+AXMyaNQMMjc/nB5CBgdD+P17xl0Ls+JTno=
Subject key identifier:   02:90:96:82:E9:90:AF:5F:4B:F4:57:90:C9:45:81:0F:62:E2:BD:B5
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D87FFA93B550162B9BA10
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa
Signing time:             Fri 06 Mar 2026 15:38:26 +0000
ROA not before:           Fri 06 Mar 2026 15:38:26 +0000
ROA not after:            Thu 04 Jun 2026 14:38:26 +0000
asID:                     81
IP address blocks:        152.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:87:ff:a9:3b:55:01:62:b9:ba:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:26 2026 GMT
            Not After : Jun  4 14:38:26 2026 GMT
        Subject: CN=8a6f8930-46d1-4320-a55a-8342587c49d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:0d:67:f6:37:a6:06:be:b8:35:6f:9d:60:
                    cb:63:46:22:16:4f:08:92:d2:cb:0f:4f:37:aa:f0:
                    f2:f2:7f:f5:73:60:ce:86:1f:c9:8d:9d:0e:56:07:
                    75:17:4a:ac:85:41:28:55:e5:20:68:90:f5:74:1a:
                    f6:6e:f1:56:84:8d:d1:e5:4c:38:ae:4d:79:c9:92:
                    71:3a:9b:ee:70:36:6e:47:f4:cb:9e:a6:b8:19:43:
                    e6:fd:95:62:5b:3b:ac:b6:77:24:d1:1b:7f:e9:03:
                    d7:3c:2b:a2:f3:cb:7d:ea:ac:b0:84:8e:31:21:20:
                    6f:70:5b:a3:21:10:2f:f6:ad:c3:54:e4:84:e3:be:
                    01:f8:c3:8e:a5:7e:7d:71:e8:9d:8c:24:5b:7f:3e:
                    a0:31:00:2c:55:b5:81:3c:fb:58:17:3a:56:5b:de:
                    ea:21:9f:9e:2c:a0:76:48:0b:4f:68:09:62:99:3c:
                    ec:f3:c2:74:24:e5:2c:53:d4:51:60:f1:1e:20:03:
                    97:64:d0:a8:53:c5:fd:91:62:63:79:5f:eb:b1:9a:
                    3e:f7:b5:93:ce:c2:c1:11:91:e1:38:82:46:13:ed:
                    e7:e1:a0:91:56:96:a5:00:84:e1:44:44:8e:28:c8:
                    0b:7c:53:42:1e:f5:07:b1:f8:55:3d:5c:e9:24:8b:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:96:82:E9:90:AF:5F:4B:F4:57:90:C9:45:81:0F:62:E2:BD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6656e98a-d5b4-3c02-9874-8722e972952f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:88:82:77:80:d1:35:c9:f2:90:a4:db:f5:47:fc:ff:14:
         8d:4c:85:6e:85:36:ac:4e:7f:97:0f:7a:3e:3f:09:73:5c:b8:
         03:5c:8c:00:cc:5e:bb:ef:d8:c9:58:d8:d9:4d:d1:3f:49:af:
         27:e7:4b:a6:9e:11:c6:80:e8:2e:b6:06:96:b6:5a:30:d2:9b:
         7c:a1:96:60:b0:e5:a9:ad:13:ae:26:c7:93:bc:c2:cc:ea:a5:
         84:2f:2f:18:65:37:c0:d5:fa:84:63:2f:1b:e3:89:1b:c2:cf:
         a7:17:53:0a:0b:fd:cf:28:50:98:6a:39:8f:53:85:d4:59:d1:
         f6:9a:08:07:ad:9e:2f:55:68:7a:fd:ad:00:d3:1f:b6:d0:87:
         8a:64:51:3a:24:18:c3:27:7f:7e:1b:66:52:01:b6:7e:73:81:
         61:80:6c:1e:cd:57:d4:59:0c:c6:b1:6b:99:8f:b2:18:c8:c3:
         f3:87:f2:e1:67:3d:1d:6d:9a:28:ee:76:c0:be:65:70:d9:60:
         53:1e:f2:90:82:d8:c6:56:30:fd:8f:c2:bd:81:2b:a0:00:11:
         49:86:d2:7a:f8:db:0c:c6:19:08:12:e7:15:a5:e6:f5:e6:14:
         47:da:37:d5:46:4d:2f:a4:59:0d:6c:98:6d:cb:70:75:db:e6:
         40:23:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:52 2026 by rpki-client