Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/934d6d86-fb3b-3422-a897-0495453b34dd.roa
File:                     934d6d86-fb3b-3422-a897-0495453b34dd.roa (raw, json)
Hash identifier:          Q2lEl53X4UW+9Q8VcwIH2rIBVkDag1sgW6zQQey5EuM=
Subject key identifier:   7D:F6:A3:6F:BD:17:B9:71:F3:66:34:15:66:9D:74:AC:CB:5D:53:96
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6A546239EE7C371A8800
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/934d6d86-fb3b-3422-a897-0495453b34dd.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     81
IP address blocks:        152.26.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6a:54:62:39:ee:7c:37:1a:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=1553925f-bf97-4c25-b030-28aa718aba5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:35:53:fb:e5:42:37:5a:ef:d3:45:28:76:
                    9f:4c:6f:ea:6a:3f:d2:81:88:57:f2:a0:0f:d5:6d:
                    39:2e:df:7e:3e:02:fc:47:43:d7:27:f1:f0:73:15:
                    6d:d3:78:0a:a2:1b:ce:51:27:9b:56:ba:f0:29:6d:
                    83:f8:39:e1:ce:ba:c2:3d:5a:7c:81:7d:2e:f6:bb:
                    16:d8:68:53:9c:f9:29:c7:37:c1:e4:2c:0e:76:0f:
                    aa:e7:02:ab:e1:85:91:fd:de:6e:ec:d6:bd:57:f9:
                    7e:9f:9d:27:85:1f:7f:c4:38:f3:eb:f2:16:44:f7:
                    d4:3c:ec:73:77:dd:e8:43:9e:88:d7:27:15:aa:84:
                    52:d5:b9:0c:68:f9:0f:15:59:b3:ca:ea:e8:d6:9b:
                    03:29:04:c1:8a:4a:90:4a:0e:e5:ee:71:ce:a5:c7:
                    f5:63:83:4a:d8:78:f9:86:a7:cb:37:e8:85:c2:47:
                    72:02:62:0d:0f:49:bc:44:31:32:55:60:ca:67:6b:
                    94:33:98:77:92:63:5b:cd:da:ea:d6:39:5c:71:f5:
                    ce:80:cd:09:6f:fc:6f:64:88:31:17:53:f5:98:58:
                    28:49:b6:f1:76:77:d0:6a:d1:1a:1d:6d:14:b0:f8:
                    e0:1a:2e:5b:58:e6:d7:15:35:20:e5:a5:c5:7e:8c:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:A3:6F:BD:17:B9:71:F3:66:34:15:66:9D:74:AC:CB:5D:53:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/934d6d86-fb3b-3422-a897-0495453b34dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6d:e3:f3:cd:3c:3e:a8:7f:6a:fc:e3:f0:86:f8:40:54:6c:
         bb:93:c0:68:fc:c8:3b:d6:0b:3a:9a:54:a8:e5:c1:50:b7:0b:
         15:8a:0e:25:bc:46:c7:52:e9:58:03:2f:d7:d4:d3:91:e4:77:
         3b:f3:c6:b9:78:cc:0f:d2:ae:5d:c6:97:75:87:73:19:cb:01:
         75:49:ef:0e:50:3d:e2:06:be:b6:39:65:c3:45:f5:6d:49:1e:
         a0:d2:f9:ba:90:a6:27:91:75:f5:c7:51:86:9d:1a:f1:00:c8:
         2e:19:dd:05:cb:6c:3e:c1:ff:d7:db:d6:99:ad:54:0d:17:cb:
         d9:68:14:6a:b8:55:ef:f7:31:72:01:91:c6:f8:c5:d6:35:5e:
         85:3b:71:fa:6e:c0:2b:76:eb:8a:1a:22:c2:d5:65:98:ec:dd:
         c6:8c:15:6e:63:6c:72:10:cc:04:2a:d0:93:81:57:f2:21:25:
         47:89:d1:76:e0:d3:b8:45:f4:d4:8a:99:25:61:b5:4e:c0:9e:
         b2:12:96:12:46:1c:fc:95:8c:26:c0:e1:f5:e3:f4:ae:a1:c1:
         c0:2c:b1:1a:1a:3c:c0:3b:1b:e2:8e:39:56:59:71:9f:38:c1:
         47:93:c0:e4:5f:ac:dc:bd:c1:f8:cc:8a:71:d6:88:20:f6:95:
         8f:cb:b3:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGpUYjnufDcaiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MTAxMDE1NDEyMFoXDTI2MDEwODE2NDEyMFowLzEtMCsGA1UEAxMk
MTU1MzkyNWYtYmY5Ny00YzI1LWIwMzAtMjhhYTcxOGFiYTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbk1U/vlQjda79NFKHafTG/qaj/SgYhX8qAP
1W05Lt9+PgL8R0PXJ/HwcxVt03gKohvOUSebVrrwKW2D+DnhzrrCPVp8gX0u9rsW
2GhTnPkpxzfB5CwOdg+q5wKr4YWR/d5u7Na9V/l+n50nhR9/xDjz6/IWRPfUPOxz
d93oQ56I1ycVqoRS1bkMaPkPFVmzyuro1psDKQTBikqQSg7l7nHOpcf1Y4NK2Hj5
hqfLN+iFwkdyAmIND0m8RDEyVWDKZ2uUM5h3kmNbzdrq1jlccfXOgM0Jb/xvZIgx
F1P1mFgoSbbxdnfQatEaHW0UsPjgGi5bWObXFTUg5aXFfozy7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH32o2+9F7lx82Y0FWaddKzLXVOWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTM0ZDZkODYtZmIzYi0z
NDIyLWE4OTctMDQ5NTQ1M2IzNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpt4/PNPD6of2r84/CG+EBUbLuTwGj8yDvWCzqaVKjlwVC3CxWKDiW8
RsdS6VgDL9fU05Hkdzvzxrl4zA/Srl3Gl3WHcxnLAXVJ7w5QPeIGvrY5ZcNF9W1J
HqDS+bqQpieRdfXHUYadGvEAyC4Z3QXLbD7B/9fb1pmtVA0Xy9loFGq4Ve/3MXIB
kcb4xdY1XoU7cfpuwCt264oaIsLVZZjs3caMFW5jbHIQzAQq0JOBV/IhJUeJ0Xbg
07hF9NSKmSVhtU7AnrISlhJGHPyVjCbA4fXj9K6hwcAssRoaPMA7G+KOOVZZcZ84
wUeTwORfrNy9wfjMinHWiCD2lY/Ls00=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:51 2025 by rpki-client