Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa
File:                     08424691-e488-3b93-9a8d-564530dbb008.roa (raw, json)
Hash identifier:          /gGeO1bBF/GwR3PpcVqP4QrIC5Y0eTDsT4JAe7h6lPI=
Subject key identifier:   92:AE:F0:15:F0:84:0F:74:8D:E4:65:F5:BB:3E:09:DE:95:3A:1D:47
Certificate issuer:       /CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
Certificate serial:       010D0C9F4328584E7D2F80C17759E2DD8E476580
Authority key identifier: CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        162.252.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:80:c1:77:59:e2:dd:8e:47:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=7379c468-c3aa-438f-a235-d95fe593fa10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:44:1c:25:4a:28:78:e8:b7:07:ae:65:a5:07:
                    f2:fe:a1:e7:4e:93:cd:af:f6:94:6c:1a:0a:1b:87:
                    c6:d9:33:72:69:7e:92:b4:84:1a:99:df:aa:e7:ff:
                    63:a5:4f:90:33:6e:a1:73:19:3a:28:e8:47:d2:06:
                    ff:5a:f7:52:d8:b3:ba:30:67:29:40:25:41:c0:00:
                    1c:5b:e4:0f:34:2a:08:0b:4f:2d:39:ce:a5:85:80:
                    88:cc:57:d1:44:ef:41:23:27:a9:59:95:37:70:62:
                    c3:71:f3:b8:9f:88:3e:ac:2c:9e:d8:8b:b9:87:3e:
                    4d:75:41:e6:77:4a:d3:5e:a2:c2:fd:87:92:6b:7c:
                    02:16:87:35:3d:07:7d:b4:26:2c:78:ee:6e:fb:7a:
                    82:94:6a:df:87:e2:9a:31:87:39:e2:f8:ef:68:4c:
                    cd:07:67:47:74:63:3f:81:e3:a5:ca:76:05:7d:69:
                    20:fa:b1:d0:0e:76:f9:9a:94:73:d3:31:b2:15:8c:
                    a3:c8:da:e3:ec:da:62:c4:16:45:ee:83:d5:42:00:
                    5c:17:13:14:95:b6:1f:c4:bb:e2:6e:6f:9e:07:16:
                    d3:87:54:3c:23:5f:b8:d0:5f:07:2b:5e:fb:a5:15:
                    fb:64:db:ba:85:45:96:88:d3:37:34:9b:e6:2e:2f:
                    b1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:F0:15:F0:84:0F:74:8D:E4:65:F5:BB:3E:09:DE:95:3A:1D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:77:3a:ae:88:91:ab:d3:e4:da:21:1e:6b:f3:3d:8b:6d:85:
         27:10:1a:bf:a9:cf:fd:da:2a:4a:c4:70:fa:7b:75:51:55:a1:
         fc:58:78:ad:88:7f:8e:6d:1c:b3:cc:fd:f8:6a:0a:ae:da:37:
         ec:b0:f6:32:9a:ff:64:8a:8b:6e:12:63:d4:7e:5b:d1:6e:45:
         c0:9f:8f:ce:4c:0d:dc:8b:6b:5f:c0:81:23:67:89:e6:1c:e7:
         0e:33:ee:41:1d:c6:d2:a8:0f:d6:5a:3b:4e:74:56:2e:26:cb:
         49:8a:b9:33:d3:f1:a0:28:22:e6:b7:d6:9c:a3:da:a6:4e:38:
         d0:2d:81:0b:6d:f9:6d:9f:0f:ff:69:15:48:6f:ba:7a:6d:e2:
         2d:56:94:39:d2:01:f0:7c:0e:9c:7e:62:ac:9f:d8:32:bb:73:
         c3:1d:12:47:d8:e5:14:72:cf:12:cc:72:c4:fb:c1:d0:81:cc:
         79:1c:59:aa:30:c1:21:6e:49:66:12:17:62:ee:06:48:77:b3:
         e1:b0:09:54:a8:11:8b:28:0b:1b:6d:1f:75:92:23:70:3f:e1:
         33:40:ac:85:2d:10:b3:2d:14:30:65:75:5f:40:9a:ca:da:23:
         a2:1d:4a:b3:a4:5d:cb:c5:36:a7:e9:7d:55:76:5a:da:e0:10:
         60:c4:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:14 2026 by rpki-client