Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8425547f-6de2-3df7-bf73-94f3bb7d0f37.roa
File:                     8425547f-6de2-3df7-bf73-94f3bb7d0f37.roa (raw, json)
Hash identifier:          iHu4lqJckbZRq+PUUWW+BqQj/X+obfa9w3hKnntItew=
Subject key identifier:   14:29:81:82:14:B0:3E:D2:09:D4:EF:92:7D:0D:D0:09:39:AE:D1:A0
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6EC2F899D18A0525BF00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8425547f-6de2-3df7-bf73-94f3bb7d0f37.roa
Signing time:             Fri 10 Oct 2025 15:41:22 +0000
ROA not before:           Fri 10 Oct 2025 15:41:22 +0000
ROA not after:            Thu 08 Jan 2026 16:41:22 +0000
asID:                     81
IP address blocks:        152.46.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6e:c2:f8:99:d1:8a:05:25:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:22 2025 GMT
            Not After : Jan  8 16:41:22 2026 GMT
        Subject: CN=6982afd6-1a6c-4914-9773-7695ad37cc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:6a:df:b5:c7:40:45:ce:1c:2f:a1:70:61:
                    5c:9e:f4:87:c1:98:34:bb:69:82:b8:8c:4e:d3:ab:
                    12:3a:bb:11:d7:3d:b0:26:5a:d5:cf:d1:a5:6c:ba:
                    93:c1:68:9f:46:5d:66:e1:b5:23:c6:cb:22:24:32:
                    71:05:70:fb:d2:ee:d7:12:25:d7:68:34:36:a0:e5:
                    b5:5f:4d:6b:dc:7a:ca:42:24:78:49:be:7d:ae:8e:
                    92:ad:59:72:0e:54:fd:96:ec:8a:64:0a:23:cb:48:
                    c1:99:9c:f1:03:7f:55:76:5e:40:6c:5d:94:03:24:
                    ce:c3:3a:1b:d3:c3:d7:79:e0:55:bc:e6:ee:62:6b:
                    48:41:81:64:29:84:16:09:18:c1:10:dd:d5:bf:67:
                    17:88:c1:d7:d2:c6:86:4b:92:4e:b0:82:8a:c4:c2:
                    ef:ca:9c:54:e6:28:4a:80:71:04:6f:01:67:5b:1f:
                    34:8e:14:31:87:73:d1:cc:4d:bd:9c:ae:6d:3f:c7:
                    64:5a:22:71:ca:f9:74:d1:2e:5b:e0:13:23:f5:85:
                    53:02:4a:84:a5:71:b6:13:5c:61:d7:02:7f:b4:28:
                    6a:c3:1f:cb:89:fb:57:7c:ad:9c:e3:d7:b2:45:21:
                    1f:e2:01:fd:f9:9b:fb:77:09:74:67:38:03:6b:a5:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:81:82:14:B0:3E:D2:09:D4:EF:92:7D:0D:D0:09:39:AE:D1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8425547f-6de2-3df7-bf73-94f3bb7d0f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c0:dd:8a:b7:8f:71:fa:d4:d9:a8:01:44:bd:e1:43:a7:f7:
         e3:28:63:a0:ba:87:e2:e2:d4:10:81:90:b8:ef:34:3e:0c:7d:
         1f:0e:6e:55:e6:e3:c7:37:ac:8b:e3:45:2b:eb:aa:1d:7f:32:
         2b:f0:90:4f:79:cb:d5:b1:00:63:fe:74:24:7e:ba:b6:23:e9:
         ac:8d:25:5f:f3:4c:dd:99:db:b4:66:be:df:05:f8:2e:ab:ab:
         88:45:7b:af:64:3d:08:7c:72:76:b6:f9:cf:c7:18:e5:71:0a:
         08:4b:c5:72:21:6d:0a:03:5a:2c:27:d2:83:bd:a2:39:1b:d8:
         b8:66:5f:2c:52:6a:e0:41:2d:f4:ed:3b:48:be:b0:99:38:f6:
         91:65:11:b4:0c:23:a4:48:1f:97:9e:4f:e4:e9:41:6c:6f:49:
         1b:71:2e:4c:80:73:cd:e2:df:ed:5f:04:4c:81:f6:a1:99:2e:
         c9:54:1b:ea:8d:63:21:e1:5a:ed:84:9f:34:13:a7:7d:08:08:
         5f:63:20:bb:fb:65:b5:2b:3b:da:9f:fb:7d:bd:e4:c8:c9:d7:
         34:b8:43:01:ab:80:9b:2a:87:6a:24:7c:0f:10:bd:27:63:65:
         12:4f:0c:39:d4:43:bd:1e:b1:1b:66:81:ff:9c:e7:bc:5b:80:
         d2:de:cd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:18 2025 by rpki-client