Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa0261c6-047f-3b48-ba68-9e82ddc018a9.roa
File:                     fa0261c6-047f-3b48-ba68-9e82ddc018a9.roa (raw, json)
Hash identifier:          Z6DRpLhB3re7wRxhuNLW7NjNR67WFN7+5LRy09WlIoI=
Subject key identifier:   18:55:C6:F5:76:02:41:A2:CF:7D:65:5C:D8:74:38:BE:31:F6:C3:D3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6E3B7D425AD967722200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa0261c6-047f-3b48-ba68-9e82ddc018a9.roa
Signing time:             Fri 10 Oct 2025 15:41:22 +0000
ROA not before:           Fri 10 Oct 2025 15:41:22 +0000
ROA not after:            Thu 08 Jan 2026 16:41:22 +0000
asID:                     81
IP address blocks:        152.46.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:6e:3b:7d:42:5a:d9:67:72:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:22 2025 GMT
            Not After : Jan  8 16:41:22 2026 GMT
        Subject: CN=4ee5c2a5-010b-45d7-814e-9b26c1e09d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:0d:a1:58:a5:4f:3e:7b:e2:61:08:04:46:
                    5a:ec:52:b4:e2:f6:7e:a0:3d:84:f8:28:56:b6:c2:
                    49:5d:22:a5:a3:9a:09:2d:03:ba:f2:7f:62:e1:d1:
                    56:04:37:71:57:ec:7d:ad:a9:16:3b:f1:63:a2:31:
                    9d:88:f9:66:26:b3:5d:2e:c1:c4:81:27:00:26:95:
                    50:27:29:60:f1:19:8f:0f:ef:82:4d:ac:f0:4a:33:
                    cd:09:25:e5:06:32:dd:99:c9:03:07:49:e9:7c:a6:
                    d1:a0:99:9d:9b:9c:c4:4e:dc:0f:9f:20:d8:96:bb:
                    f9:37:5e:cf:7f:78:f0:10:a4:a9:dc:bb:7e:2e:f0:
                    2d:dd:be:a1:61:d6:17:6d:2a:67:1f:b0:64:9e:cf:
                    f5:c2:df:d8:51:0a:ed:53:f5:f1:30:73:6f:64:77:
                    f5:59:33:81:96:d0:48:7e:88:59:8d:e9:84:e5:a3:
                    0f:63:b7:fc:b4:3a:27:33:2a:73:26:3d:be:c7:cd:
                    05:1a:9a:28:f0:a8:03:75:29:9c:51:01:4a:c9:26:
                    74:d0:4e:0e:4c:a7:d7:70:51:57:fe:93:01:11:19:
                    46:3b:16:05:8c:de:5d:24:76:90:90:ba:ff:fc:38:
                    59:43:73:ca:b2:4f:72:63:94:e0:43:fb:6b:a0:5d:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:C6:F5:76:02:41:A2:CF:7D:65:5C:D8:74:38:BE:31:F6:C3:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa0261c6-047f-3b48-ba68-9e82ddc018a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:07:95:7f:a2:98:4d:83:6b:81:57:d9:48:a5:e4:48:7c:5f:
         72:7f:af:dc:49:91:c4:fa:33:ea:99:51:9c:d8:17:8b:a0:06:
         53:fe:93:ca:7b:d0:73:79:a3:a0:42:f5:1e:2d:80:9b:1f:7b:
         05:36:09:68:06:1e:26:46:80:01:c6:c0:69:15:fd:49:4f:d2:
         54:32:d4:24:e1:ba:f8:15:47:0b:12:eb:03:76:fa:8f:25:5a:
         f4:5a:6d:ac:c3:70:8b:a4:a9:0b:c4:49:6c:18:1f:13:f2:46:
         2d:ad:7e:1e:4a:43:0e:f2:fc:05:e7:89:d8:b2:4c:38:f4:1c:
         ee:63:1e:eb:7d:ce:ab:63:f3:26:68:ed:90:06:35:00:97:b7:
         e0:2b:2e:c2:cf:78:80:32:19:7a:2c:9a:83:c3:f0:4e:01:46:
         43:41:5b:da:f5:bb:c2:7c:e1:3f:58:4b:92:28:cc:87:48:5a:
         ab:6e:45:af:16:bf:b1:58:68:7c:93:a7:17:ba:a9:e2:e7:81:
         f1:12:b4:2d:b6:a9:e5:07:3e:12:76:54:d3:9d:16:22:97:9a:
         05:34:2c:fb:03:b1:5a:c6:76:36:47:66:68:6e:e4:2e:b7:52:
         94:47:f8:47:99:9e:35:2d:1d:bf:4b:c2:8a:98:de:ca:aa:31:
         bd:fd:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:55 2025 by rpki-client