Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
File:                     152d19fc-a4dd-3003-8922-b7d5efb068f1.roa (raw, json)
Hash identifier:          hqT5klszrA2I7mc3QXAYvNKrCOdtq9WBg5fof4duYHM=
Subject key identifier:   54:9A:26:AE:96:36:99:51:D1:22:60:78:E0:25:F9:31:1F:46:CC:20
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584E7E94F10E407584198ACA8314
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     21949
IP address blocks:        206.223.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f1:0e:40:75:84:19:8a:ca:83:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=41e54a1b-9a20-4e6b-9ea4-c4553b4ad7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:d6:bf:5a:00:75:cd:9e:b7:a1:f6:e6:09:
                    b5:20:d4:12:15:b9:9d:e9:d9:be:91:f6:17:77:d6:
                    43:b5:5b:18:5a:9b:69:bb:08:9e:74:89:ca:b4:37:
                    81:a3:ca:f5:41:bf:66:9d:d9:fa:84:e1:4b:d5:6e:
                    56:f5:da:9f:d7:bb:ad:84:87:e9:f5:a5:e8:c2:47:
                    f3:5a:e6:b9:27:7b:e6:81:5f:7a:45:96:15:55:9a:
                    5b:b0:61:ee:04:94:6b:76:9f:bb:2c:c8:65:1f:9f:
                    d5:9a:77:a8:93:39:67:30:45:c1:b7:9e:15:f4:bf:
                    30:c3:2d:64:d4:a5:72:f8:ca:36:6f:1d:f1:38:f0:
                    60:aa:ea:a0:60:19:dc:53:bd:a4:bb:01:fc:c2:25:
                    bf:84:f4:37:6b:32:74:13:7d:c4:32:c4:69:84:b8:
                    a1:cd:7f:e6:f6:0a:59:fb:11:da:cb:9b:ca:e1:fd:
                    08:6b:62:c1:4f:f6:f8:3b:86:a6:a0:c1:a3:ce:26:
                    9c:5f:8c:94:02:d9:0a:44:3e:65:74:e0:d1:6a:56:
                    56:4d:97:4d:e3:55:96:0e:e9:6d:64:dd:99:ef:ca:
                    0e:20:93:e2:05:f2:3f:a1:62:26:b8:af:5f:84:88:
                    6b:33:93:0f:80:05:a9:92:8f:eb:04:b3:68:04:75:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:26:AE:96:36:99:51:D1:22:60:78:E0:25:F9:31:1F:46:CC:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:38:8f:a1:d4:a3:24:2e:51:05:f4:e4:be:b1:68:37:bf:
         77:ab:4c:94:f2:5a:bf:e3:ed:d1:f5:fd:6d:bb:a9:7b:1f:68:
         2c:61:27:0d:3e:f7:5f:2e:59:4a:77:1d:18:08:1a:0c:18:0f:
         b2:23:5a:4f:60:8f:bc:24:08:17:a6:2d:14:cb:66:9a:91:5d:
         6e:24:63:9f:31:e2:cb:37:fe:5d:61:ce:ec:3d:3c:1f:05:64:
         f6:70:2e:46:04:35:37:e8:c8:34:41:02:c8:57:c1:9d:61:2c:
         27:ff:2f:dc:d8:0f:bd:15:86:ad:86:ca:dc:66:9d:71:3f:ff:
         c3:fa:33:d3:51:2b:b7:2c:48:4e:0f:dd:24:a7:e3:c6:7e:25:
         31:de:78:cf:ef:35:a9:5e:05:79:b3:15:a0:46:bb:2e:2e:a7:
         1c:05:c9:99:20:93:41:93:5c:fe:67:43:ee:e0:2c:eb:1f:81:
         1c:af:31:2b:31:42:01:04:20:bd:19:71:33:63:79:5d:76:8d:
         19:78:b1:fb:66:81:0f:fe:bc:f9:6a:d3:0a:cd:21:56:95:bc:
         cb:f4:fb:5a:06:bc:28:dd:6c:3a:82:69:47:1a:eb:e6:19:31:
         1a:8a:db:f9:aa:e1:0f:c1:ab:07:c6:38:05:b5:c2:e2:30:b7:
         28:f9:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:00:21 2026 by rpki-client