Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6d5e0017-b4cb-3bcf-926d-e31a1362f58f.roa
File:                     6d5e0017-b4cb-3bcf-926d-e31a1362f58f.roa (raw, json)
Hash identifier:          HAFayWkgjgqPwYHv38Mn8wDmpOYEiy7seEHNeXZPiMc=
Subject key identifier:   BF:3A:99:42:62:3B:5D:BB:99:D9:E6:C9:C4:26:9E:BE:7F:5C:32:91
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6B155D6C6F028D340600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6d5e0017-b4cb-3bcf-926d-e31a1362f58f.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     47098
IP address blocks:        152.26.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6b:15:5d:6c:6f:02:8d:34:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=df6205ac-48dd-45d4-b122-687f59f39064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:2b:21:d3:2b:c2:d7:dc:fe:bf:82:d7:35:
                    63:77:9c:e0:72:08:3c:dc:09:99:f5:cb:60:0a:61:
                    6d:aa:93:21:8c:b7:53:12:a1:b6:07:54:74:81:de:
                    2c:26:41:b4:45:dd:e8:9f:f6:5f:b1:aa:90:10:e4:
                    82:4f:c1:b5:8d:03:08:dc:96:58:e4:c7:dc:7e:c9:
                    3f:2e:a4:88:fa:a0:d4:2a:e0:35:0a:6b:5f:03:83:
                    19:a7:24:b2:c0:c4:05:c1:0d:46:32:4b:d8:b0:ec:
                    62:46:ef:9d:4f:44:0f:cc:94:ce:cf:2e:87:81:aa:
                    f4:6c:d7:a6:1f:8e:05:da:e0:bb:30:f3:80:0e:65:
                    bb:f6:67:a1:f1:7f:e8:b7:fd:ef:b3:e1:d3:03:aa:
                    1c:0a:81:b5:a3:10:6c:59:5d:04:87:9e:73:b4:76:
                    bc:2d:b5:79:23:6b:a2:fa:55:1c:71:72:c5:b1:b5:
                    83:6d:96:8f:de:a3:c4:9d:68:ee:3b:48:aa:1e:dc:
                    1e:7f:bc:59:be:c4:3c:42:0c:53:7f:5b:22:29:05:
                    90:70:8b:7e:67:c2:dd:89:92:0d:43:be:d7:8b:81:
                    80:75:2c:04:28:84:42:bd:2c:f8:30:a3:60:68:4b:
                    32:20:2e:28:ac:05:a0:ca:5e:4f:c5:6c:34:bc:fb:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3A:99:42:62:3B:5D:BB:99:D9:E6:C9:C4:26:9E:BE:7F:5C:32:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6d5e0017-b4cb-3bcf-926d-e31a1362f58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:ee:a3:70:85:9e:c9:e5:91:f6:d2:38:ff:2c:0f:ae:87:
         79:bb:bb:db:e6:1a:00:f2:d5:02:4b:d4:54:24:89:2e:e2:85:
         04:27:ef:71:ca:2d:e5:ea:b3:0d:2c:4c:5d:8a:1f:bd:24:91:
         cf:a0:bf:f1:bc:89:b9:1f:3d:07:a9:02:30:46:61:03:54:57:
         1d:a2:20:33:72:7a:52:05:83:80:65:50:f3:2f:81:4b:31:43:
         38:ac:d3:3b:e8:83:cd:80:90:61:0c:9d:72:be:93:f8:81:c2:
         19:67:13:cb:df:d8:e7:cb:de:58:cf:58:ac:d6:3c:b7:20:b7:
         34:53:3c:fa:13:7a:a1:6f:9c:68:91:d1:8d:be:38:a7:16:f9:
         d8:50:50:9c:50:8a:04:ea:07:83:2f:84:b8:03:88:1a:2c:10:
         51:5f:38:94:e7:28:0b:93:6b:a9:68:e5:01:10:9f:2d:29:df:
         5f:29:a8:b3:67:42:4f:25:60:68:f8:99:85:80:bc:71:e9:54:
         42:22:ae:57:9b:37:0b:bc:3f:bd:ac:a1:5f:d7:4b:2b:a2:f5:
         96:ea:39:0c:ed:5a:02:ee:62:31:4d:ed:ea:26:2a:e3:37:d6:
         ea:0c:86:0b:55:a8:a1:f6:13:ef:d6:f4:c0:b3:fa:51:67:a5:
         ec:87:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:11 2025 by rpki-client