Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c88ddf34-e0ad-37bc-8103-2977c47c6b23.roa
File:                     c88ddf34-e0ad-37bc-8103-2977c47c6b23.roa (raw, json)
Hash identifier:          d+rAYDBtD145RhAEY8Fxu+8oQxgTUId5PHyZhZTObzE=
Subject key identifier:   85:5E:8E:20:A1:CF:DE:CF:1F:0A:8A:B6:57:7B:9B:C3:1C:95:B0:B0
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6DFFD3C08C3E747F8A40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c88ddf34-e0ad-37bc-8103-2977c47c6b23.roa
Signing time:             Fri 10 Oct 2025 15:41:22 +0000
ROA not before:           Fri 10 Oct 2025 15:41:22 +0000
ROA not after:            Thu 08 Jan 2026 16:41:22 +0000
asID:                     81
IP address blocks:        152.46.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6d:ff:d3:c0:8c:3e:74:7f:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:22 2025 GMT
            Not After : Jan  8 16:41:22 2026 GMT
        Subject: CN=22ecbc77-5f85-4f8c-b66e-e4ef67b1d3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:e1:c9:c7:fb:01:90:c4:28:12:3b:8e:a0:
                    a1:55:38:65:7b:80:eb:83:37:23:3f:a4:3a:13:b8:
                    6f:ad:7f:ba:ba:06:b7:5b:34:83:9d:87:0d:8a:24:
                    a6:12:7e:02:9e:ea:6e:5b:25:b7:da:6d:2c:47:72:
                    9d:a9:fc:2d:45:2b:e3:8a:1e:06:7d:c9:f5:19:6b:
                    91:29:29:5e:a5:1c:1a:22:67:49:e4:94:f9:86:bd:
                    20:48:80:31:47:3d:a8:c0:05:a0:a2:80:85:2f:22:
                    af:11:23:18:16:7a:08:03:d0:9e:d1:1e:b5:76:36:
                    83:33:ac:35:c1:c2:98:80:b0:05:79:33:5c:f8:f0:
                    b7:17:0a:a3:74:02:7c:90:be:c8:88:95:04:bb:1e:
                    8f:64:85:22:5d:93:74:11:75:2a:d9:81:1a:bb:1f:
                    6d:4c:08:70:09:6f:fa:ef:8e:5c:72:89:2f:ce:97:
                    7e:aa:b0:f7:35:0d:e9:ca:54:3c:58:ef:a8:f6:06:
                    67:88:e3:d5:e3:d8:5d:2f:6d:c9:92:b6:54:a3:74:
                    dd:6d:26:6a:92:1c:7e:7f:77:5c:c9:57:50:94:2b:
                    8d:28:ac:ef:88:5a:08:e9:00:d6:50:05:a5:83:1c:
                    f6:5a:ea:78:db:4f:dc:50:f4:85:1c:d4:cc:a1:51:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5E:8E:20:A1:CF:DE:CF:1F:0A:8A:B6:57:7B:9B:C3:1C:95:B0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c88ddf34-e0ad-37bc-8103-2977c47c6b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:da:d0:4d:f0:64:76:93:20:b5:db:0e:db:0b:a8:af:f1:
         12:dc:c6:97:51:36:ca:cb:8c:69:d0:fa:b2:39:1c:c9:fd:29:
         79:9b:af:4f:a3:55:fc:8a:04:2f:0f:4f:ea:83:91:fa:20:e0:
         fc:e7:54:95:c4:aa:74:64:53:74:69:ab:c6:0e:d1:c2:07:6e:
         77:ff:c1:b1:36:ae:09:8a:32:7e:22:2e:a6:8e:b7:ba:9d:c6:
         30:ec:2b:cf:27:9b:6c:3d:a0:72:eb:2d:12:0c:e5:18:66:01:
         67:83:a0:68:cf:e1:33:e5:5a:d4:15:2e:aa:08:51:16:b7:cf:
         d1:e4:3f:94:e0:cb:fe:56:68:2b:0e:2d:e4:d1:cb:4e:16:24:
         f4:94:22:de:a9:19:b0:59:79:20:14:b3:6e:28:56:e8:01:4f:
         d6:de:01:89:af:21:93:a8:5f:5e:7b:02:f7:f5:e2:c8:4f:10:
         bd:f1:cd:55:ab:a5:57:1b:fa:a5:22:45:f5:14:c5:ed:b3:06:
         d6:24:8b:6b:a4:71:c9:24:4b:49:2d:98:1e:18:b4:36:25:6b:
         bb:5c:24:88:1e:e3:a5:46:85:d6:b3:6d:3a:a2:74:6f:bd:a5:
         ed:bf:73:2c:93:34:8b:e8:d5:8f:e9:41:4a:38:f0:f0:cf:1a:
         e2:19:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:58:51 2025 by rpki-client