Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d855140d-da9e-3f18-a113-fa763ffbaa91.roa
File:                     d855140d-da9e-3f18-a113-fa763ffbaa91.roa (raw, json)
Hash identifier:          05tIoKGclttNKLBo7uxZeYsws/3hTFgMiKzBvfYBhwM=
Subject key identifier:   A1:76:FF:11:FF:CB:64:DA:D7:51:9D:2B:83:0A:20:6E:88:97:2F:F6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C66F920CFD3820751FBC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d855140d-da9e-3f18-a113-fa763ffbaa91.roa
Signing time:             Fri 10 Oct 2025 15:41:18 +0000
ROA not before:           Fri 10 Oct 2025 15:41:18 +0000
ROA not after:            Thu 08 Jan 2026 16:41:18 +0000
asID:                     81
IP address blocks:        152.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:66:f9:20:cf:d3:82:07:51:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:18 2025 GMT
            Not After : Jan  8 16:41:18 2026 GMT
        Subject: CN=f305a712-40a0-4337-adc4-a493b06ca8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:b5:26:ac:d6:5a:c4:b7:ce:cc:e2:8e:40:
                    83:83:61:b7:e9:7d:c4:b2:07:6a:3e:13:38:21:b7:
                    cf:72:9e:8d:cd:87:51:c5:b7:0d:ac:8c:38:bd:03:
                    e7:bf:db:6b:19:55:2b:62:b7:39:df:f5:f3:75:74:
                    76:42:c6:d7:65:49:95:3c:31:93:f9:bf:b4:34:dd:
                    78:ec:ab:8b:bc:18:89:14:ad:a4:2c:fe:b9:b6:8f:
                    0d:df:46:86:88:a5:95:03:24:5b:d5:72:5a:57:cf:
                    8c:98:fc:1e:d6:6b:ae:c5:db:26:f9:3b:37:93:d0:
                    a1:a5:24:9f:5b:8a:ed:11:f1:77:5d:f3:ce:f1:46:
                    c3:07:2f:11:95:43:f9:3f:17:94:79:86:93:3d:3b:
                    6a:d5:39:c5:a3:8b:19:9c:52:cf:8b:0b:5c:05:1d:
                    81:9c:1e:9f:db:68:a9:42:2c:db:e4:88:3a:c5:bf:
                    30:0b:cd:e8:dc:36:6b:27:7f:a7:db:9f:d5:92:20:
                    c1:a5:6c:3d:f1:bb:15:c2:f0:20:69:6b:3e:3b:34:
                    4c:4a:67:01:f7:2e:65:49:c2:b9:15:46:4e:8a:4e:
                    53:17:f2:77:17:11:74:b3:5e:a1:84:2a:3a:09:0d:
                    34:24:af:a6:fc:8a:17:b3:92:24:e1:45:26:d8:cf:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:FF:11:FF:CB:64:DA:D7:51:9D:2B:83:0A:20:6E:88:97:2F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d855140d-da9e-3f18-a113-fa763ffbaa91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:93:7b:c0:e5:c7:76:79:90:e9:58:c2:eb:06:13:92:8c:17:
         59:a1:c6:05:bd:05:ca:6f:70:e0:31:0f:1a:0e:8d:37:9e:bb:
         77:6f:d2:77:2f:74:2b:94:d5:f8:dc:43:2c:87:3e:c6:79:33:
         40:4c:a5:28:bf:21:9e:1d:d2:ce:33:44:d2:0f:f2:34:56:a0:
         fe:97:79:46:f8:ec:72:ed:a1:31:f3:d4:24:00:96:93:7c:1f:
         ef:e2:83:8e:1a:e9:a6:fb:0f:8d:72:bc:99:19:77:06:d1:19:
         34:d3:50:9c:d6:de:8a:4f:a4:67:d1:0b:ce:97:99:ec:a3:52:
         b1:53:d1:1c:76:34:67:99:3b:ef:6a:ae:5c:c2:f7:5c:7d:50:
         3a:6a:03:5e:7c:3f:96:8a:a9:dc:99:5d:7b:2a:f5:24:64:50:
         f6:9a:a7:8a:25:77:cc:55:4b:2b:e1:46:ac:df:6d:26:c1:e2:
         7d:b1:c6:06:fe:82:3c:1e:20:9f:80:e2:d4:f0:de:39:7d:38:
         ac:78:8c:7f:9e:45:d3:2e:e2:bc:69:f0:c5:f8:97:4a:dd:dc:
         4a:8b:a7:bb:00:2d:e7:1b:33:f6:7d:7f:2d:7d:53:de:33:26:
         7c:52:47:fc:05:27:06:22:19:5f:e9:1d:b3:5a:7a:82:76:fa:
         86:7d:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:12 2025 by rpki-client