Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3e83fa8-96af-35dd-acdf-684bf7b6e962.roa
File:                     f3e83fa8-96af-35dd-acdf-684bf7b6e962.roa (raw, json)
Hash identifier:          L1ITG7siwHXKRAfTP4zsLFsKIjbq8EI6OUmeC6j6+j0=
Subject key identifier:   FC:44:07:ED:90:AB:2A:BF:4E:A5:2A:D5:F4:5E:D6:A6:98:E3:A2:CC
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6AE8EBFC301EB0385100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3e83fa8-96af-35dd-acdf-684bf7b6e962.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     22862
IP address blocks:        152.26.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6a:e8:eb:fc:30:1e:b0:38:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=37ccdc15-12fa-483c-8715-b50995b9d0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:0d:a5:fe:61:68:12:31:a9:98:e3:fa:bb:
                    fd:78:4e:86:4a:e6:c9:74:3b:c9:9d:8f:04:6b:8e:
                    a9:90:b4:bf:dc:ca:4e:b9:b4:0c:c4:c9:3b:50:e5:
                    0a:d8:ec:2e:6d:1b:58:c2:59:00:35:d0:14:98:a3:
                    bf:57:f1:2e:5b:22:f7:6c:f6:c4:19:8a:76:59:78:
                    d4:79:b8:b2:c5:7a:be:49:cb:53:71:3d:6c:1e:a5:
                    ef:f5:10:ea:b2:f5:df:56:87:06:0e:be:92:61:2f:
                    a3:09:0b:0e:9a:04:4b:fb:bb:33:2e:1c:44:97:79:
                    8e:87:49:7f:6b:77:d6:b4:6d:c8:f6:e4:92:78:42:
                    d3:21:40:8d:3b:6f:1f:63:3e:af:c8:b3:44:79:d0:
                    fb:7c:37:8a:e0:e1:65:91:9b:eb:26:6b:81:39:3c:
                    b9:bf:a7:f1:06:88:d8:97:d1:1d:e6:29:66:51:c4:
                    68:4e:57:c4:95:63:b9:0f:85:94:5a:44:35:bb:51:
                    a3:fd:61:7e:01:5c:ef:4b:7d:93:46:63:b7:3d:cb:
                    49:0e:72:72:30:ea:40:f9:66:d2:e1:b2:e7:d7:80:
                    2b:8a:ca:16:52:4b:c7:90:8b:be:36:fe:35:0f:02:
                    a3:46:68:d6:6e:69:58:48:55:b0:50:eb:1e:47:98:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:44:07:ED:90:AB:2A:BF:4E:A5:2A:D5:F4:5E:D6:A6:98:E3:A2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3e83fa8-96af-35dd-acdf-684bf7b6e962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:93:a9:cd:99:b5:f0:a7:42:f5:b3:6c:1f:d7:27:51:46:fd:
         f6:95:68:5f:fe:a4:12:7a:bd:0d:c7:6a:08:e1:d4:74:3c:70:
         df:39:be:5c:d6:c8:69:10:43:88:9e:51:5c:22:98:be:93:e9:
         a9:f7:f2:55:d9:65:30:2f:4c:ac:5e:9b:06:fd:a7:0f:6a:12:
         ee:8b:b7:45:b4:ff:d7:35:d0:ee:bf:99:fa:0f:d5:7e:07:21:
         34:b5:6a:be:3a:1d:25:16:f0:69:44:af:3b:8e:38:89:c1:29:
         98:d4:ac:9a:17:fd:dd:39:b7:46:74:bd:93:95:f4:53:f0:28:
         36:da:95:f1:fd:3e:43:df:cb:fe:a3:4c:81:72:5b:45:29:34:
         c3:32:a0:d6:be:dd:18:99:1a:42:19:36:4a:42:28:3f:4a:ba:
         e7:99:a4:5e:81:c5:1e:82:eb:b3:f6:42:5d:1a:a4:6e:ac:f4:
         2a:d7:75:6d:3c:d0:25:89:bc:dc:ee:cb:af:20:cf:3b:da:d2:
         8c:e2:e7:ba:21:5e:3a:b3:2e:ba:51:f7:5e:b6:fb:6c:94:22:
         ed:ac:d8:87:32:39:c6:ea:24:48:8f:77:59:87:d4:31:c4:26:
         dd:2a:4d:dc:ce:79:13:43:bb:f7:1e:dc:f9:27:6e:b3:d5:9a:
         52:61:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:14 2025 by rpki-client