Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1a43cf5-8967-303e-9d0a-ed92e8e67374.roa
File:                     d1a43cf5-8967-303e-9d0a-ed92e8e67374.roa (raw, json)
Hash identifier:          yuWIsYUSOYAu7qELgJfG9eJXtrcm7Cbd5MyrUv/k3Nc=
Subject key identifier:   68:F5:98:2B:75:1C:BC:DD:4E:29:5F:58:C3:92:14:F1:2A:FC:47:38
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8C13C341B45025996600
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1a43cf5-8967-303e-9d0a-ed92e8e67374.roa
Signing time:             Fri 06 Mar 2026 15:38:28 +0000
ROA not before:           Fri 06 Mar 2026 15:38:28 +0000
ROA not after:            Thu 04 Jun 2026 14:38:28 +0000
asID:                     81
IP address blocks:        152.26.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8c:13:c3:41:b4:50:25:99:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:28 2026 GMT
            Not After : Jun  4 14:38:28 2026 GMT
        Subject: CN=c1fa3523-ce18-4017-a40f-8a15af2437b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:af:16:ec:44:22:1b:45:6f:6f:ad:df:c8:
                    ee:9f:ab:e4:fa:3b:e7:0f:62:b0:79:79:79:8d:93:
                    0a:91:fd:00:78:60:b8:02:55:00:f1:07:8e:b3:6b:
                    96:03:6d:4b:a3:ed:d5:bc:ba:99:41:0e:7b:8a:d5:
                    e5:4c:f6:cc:e6:cd:c2:29:44:49:80:e3:be:2b:85:
                    ce:c1:7d:5d:e4:c8:b7:a4:58:89:0e:4d:db:03:7a:
                    3a:68:c6:aa:3c:2b:ce:5c:18:2f:43:8f:e1:80:9b:
                    9f:6b:82:50:4c:cf:ac:69:f5:e3:d9:80:af:a8:85:
                    f9:45:36:85:e9:b6:95:16:93:86:27:0f:71:48:8f:
                    e7:f1:d1:cc:1c:7e:f6:03:88:b4:ce:6a:6e:49:cd:
                    4e:27:74:9e:97:51:12:f3:70:9b:65:b4:ab:8d:55:
                    32:43:f3:c8:36:2d:3f:34:c3:e6:02:44:3f:38:2b:
                    b4:9e:14:95:10:28:d3:47:eb:64:5c:fc:84:0f:f7:
                    c4:a8:57:a7:28:03:30:78:d3:46:51:f9:a4:b3:e9:
                    49:c9:7c:2e:30:15:b7:34:62:10:38:df:09:3a:40:
                    65:49:2b:8e:d2:8c:1a:2b:79:79:11:13:ec:36:78:
                    70:51:35:b3:24:af:46:e3:d1:e6:24:1c:3d:8d:40:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F5:98:2B:75:1C:BC:DD:4E:29:5F:58:C3:92:14:F1:2A:FC:47:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d1a43cf5-8967-303e-9d0a-ed92e8e67374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:44:b0:55:c1:bd:8e:29:65:1a:f6:93:c0:c0:f6:51:ae:16:
         bd:bd:ef:42:d4:c8:3e:13:11:c0:22:39:2b:cb:a7:f4:62:a8:
         e2:27:8c:9b:30:a0:d3:12:e0:2a:dd:cd:d5:0a:8a:a3:9f:7d:
         84:5b:5d:3f:85:87:a3:33:0f:ac:b4:c4:b8:53:39:c6:9a:3d:
         2a:86:6a:45:fc:19:b2:b0:b7:51:f2:c6:c0:8c:37:9f:60:1a:
         36:b5:31:ba:58:e4:9b:e3:24:6a:1e:16:b7:9e:dc:7b:49:ca:
         f4:12:c6:bd:f9:98:d1:87:87:03:49:2c:4d:4f:49:b8:96:19:
         b2:17:da:63:a9:66:20:14:4e:a5:f5:b2:75:5f:9f:21:8c:da:
         d8:f4:81:36:71:54:c7:50:43:77:39:bb:0e:c3:2c:e7:8e:66:
         79:92:41:eb:67:b7:f6:63:b9:da:08:73:f2:52:f1:da:a4:69:
         23:d4:ba:c2:0c:78:dd:a4:f1:94:27:f1:43:3f:56:32:65:6c:
         8a:d3:fb:a6:fe:53:46:02:36:ef:b6:a3:50:38:23:2f:b3:c9:
         e1:2a:70:19:5d:df:16:5f:58:bd:9a:ef:28:d9:e0:65:08:e0:
         ea:1a:1d:6d:5a:4a:46:21:f7:4e:8e:6d:70:e5:83:0a:8f:84:
         79:f7:9b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYwTw0G0UCWZZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk
YzFmYTM1MjMtY2UxOC00MDE3LWE0MGYtOGExNWFmMjQzN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI6vFuxEIhtFb2+t38jun6vk+jvnD2KweXl5
jZMKkf0AeGC4AlUA8QeOs2uWA21Lo+3VvLqZQQ57itXlTPbM5s3CKURJgOO+K4XO
wX1d5Mi3pFiJDk3bA3o6aMaqPCvOXBgvQ4/hgJufa4JQTM+safXj2YCvqIX5RTaF
6baVFpOGJw9xSI/n8dHMHH72A4i0zmpuSc1OJ3Sel1ES83CbZbSrjVUyQ/PINi0/
NMPmAkQ/OCu0nhSVECjTR+tkXPyED/fEqFenKAMweNNGUfmks+lJyXwuMBW3NGIQ
ON8JOkBlSSuO0owaK3l5ERPsNnhwUTWzJK9G49HmJBw9jUA4+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGj1mCt1HLzdTilfWMOSFPEq/Ec4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDFhNDNjZjUtODk2Ny0z
MDNlLTlkMGEtZWQ5MmU4ZTY3Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBpPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBEsFXBvY4pZRr2k8DA9lGuFr2970LUyD4TEcAiOSvLp/RiqOInjJsw
oNMS4CrdzdUKiqOffYRbXT+Fh6MzD6y0xLhTOcaaPSqGakX8GbKwt1HyxsCMN59g
Gja1MbpY5JvjJGoeFree3HtJyvQSxr35mNGHhwNJLE1PSbiWGbIX2mOpZiAUTqX1
snVfnyGM2tj0gTZxVMdQQ3c5uw7DLOeOZnmSQetnt/ZjudoIc/JS8dqkaSPUusIM
eN2k8ZQn8UM/VjJlbIrT+6b+U0YCNu+2o1A4Iy+zyeEqcBld3xZfWL2a7yjZ4GUI
4OoaHW1aSkYh906ObXDlgwqPhHn3m8k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:22 2026 by rpki-client