Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8197fd3-bd91-36e0-b7e3-37ed419ab325.roa
File:                     f8197fd3-bd91-36e0-b7e3-37ed419ab325.roa (raw, json)
Hash identifier:          8VuS/3kJlFmNWAP0d+ZMCEBJGkYYZbSxzLJY9t0TEW4=
Subject key identifier:   E1:3C:A5:4C:5B:24:F9:1D:45:81:89:3D:63:2A:72:A7:64:18:E9:6F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8BF70C1358637A1AED80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8197fd3-bd91-36e0-b7e3-37ed419ab325.roa
Signing time:             Fri 06 Mar 2026 15:38:28 +0000
ROA not before:           Fri 06 Mar 2026 15:38:28 +0000
ROA not after:            Thu 04 Jun 2026 14:38:28 +0000
asID:                     81
IP address blocks:        152.26.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8b:f7:0c:13:58:63:7a:1a:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:28 2026 GMT
            Not After : Jun  4 14:38:28 2026 GMT
        Subject: CN=8d94ff34-528f-4b4e-940c-aa9c580ed980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f2:f9:f6:72:be:e8:b0:d7:4d:7b:9c:ef:a6:
                    d9:f4:28:fc:c8:cf:af:e5:d1:f4:40:e0:3e:32:4a:
                    ae:02:3c:cd:58:6f:a2:50:5d:f6:c5:08:b1:70:66:
                    11:49:a0:87:87:a7:9d:a6:ab:c1:88:26:8c:88:d8:
                    20:d0:10:e9:d7:bd:0f:b9:36:b1:77:89:90:a5:e9:
                    99:28:18:83:9c:be:c8:07:96:2c:94:65:d5:69:20:
                    40:26:78:c6:10:b6:04:02:49:42:40:00:f7:b2:8a:
                    bc:8f:68:08:e7:99:01:a6:57:16:a0:b0:1d:69:8c:
                    c5:d5:e1:92:6c:36:7d:40:55:38:ee:b0:ba:2f:58:
                    b6:fb:1c:8f:e5:0c:54:b7:6f:08:48:7c:50:3c:77:
                    f4:28:7f:f1:c8:a2:dc:4a:e6:c3:37:2a:d1:53:7c:
                    5c:53:53:9f:f8:58:de:ea:85:29:6e:18:48:0f:c6:
                    52:6d:f3:eb:e6:ce:de:40:94:75:b4:f1:6e:0b:f2:
                    84:01:dd:70:51:4b:8c:b9:23:9a:b4:74:4b:dd:9c:
                    dd:ae:c6:d1:96:06:df:94:f8:54:93:22:7d:47:46:
                    8a:37:56:60:dd:58:bd:57:55:11:56:7e:33:ab:e9:
                    bf:1c:e5:ee:5f:3d:69:51:e9:59:24:e9:8d:8c:32:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3C:A5:4C:5B:24:F9:1D:45:81:89:3D:63:2A:72:A7:64:18:E9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f8197fd3-bd91-36e0-b7e3-37ed419ab325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:2b:c9:2a:d8:46:42:f1:ce:9f:4c:19:21:61:6e:3a:c3:
         14:28:09:83:45:73:3c:83:45:c1:7f:08:2f:35:ff:88:ae:59:
         7f:2f:10:80:ac:48:39:54:06:d5:ab:5d:b0:02:93:7a:0c:45:
         e5:cd:da:fe:b0:c4:32:5f:1d:7b:ae:ff:cc:be:4f:54:e6:aa:
         d2:17:2b:b7:4a:2d:e4:d1:77:b1:ab:35:e6:28:b0:8d:a6:70:
         95:d5:5f:a8:54:f8:6f:a2:70:8d:ec:4d:3d:af:70:d2:01:e3:
         8f:ba:42:da:e0:0e:3c:40:af:c2:d7:de:18:60:69:37:15:ea:
         d3:66:c0:77:99:9d:95:51:bf:8f:3b:a6:d9:11:4f:56:8b:ae:
         df:89:78:e3:82:22:66:66:5f:cd:50:da:57:66:a8:e7:4a:df:
         02:2e:0f:12:0e:de:78:d9:cd:7c:b8:d7:e5:de:0c:74:9b:e8:
         64:30:40:9a:14:22:55:8c:6c:5f:35:94:3b:89:ff:41:86:c7:
         7a:23:14:6e:e4:c0:6c:9f:80:e8:d2:3d:a7:0c:20:47:b8:a6:
         9c:c2:4e:cc:17:96:84:e9:c5:1c:80:2d:f7:46:f4:5b:54:11:
         05:4e:6b:84:3b:55:d4:b2:1f:f2:b3:84:86:f7:14:7a:10:20:
         7a:0d:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:15 2026 by rpki-client