Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa
File:                     AS152492.roa (raw, json)
Hash identifier:          KczhMZECsHMivefHKaUjXOZNukvlVDP5mzCQKU4AejA=
Subject key identifier:   6A:A4:67:DB:68:AD:F9:D7:3F:45:6B:54:E8:2B:D8:B2:6F:46:59:5A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       251E3831F021D077093D93CC6E4641A32961CC35
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa
Signing time:             Wed 15 Jul 2026 12:29:43 +0000
ROA not before:           Wed 15 Jul 2026 12:24:43 +0000
ROA not after:            Wed 14 Jul 2027 12:29:43 +0000
asID:                     152492
IP address blocks:        72.11.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 07:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1e:38:31:f0:21:d0:77:09:3d:93:cc:6e:46:41:a3:29:61:cc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 15 12:24:43 2026 GMT
            Not After : Jul 14 12:29:43 2027 GMT
        Subject: CN=6AA467DB68ADF9D73F456B54E82BD8B26F46595A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:fb:fd:a1:30:55:1e:08:33:5d:51:43:fe:
                    de:19:6e:77:f2:a2:2d:e9:a3:7e:8d:15:26:14:c8:
                    da:af:3b:0b:a3:03:ea:40:d0:4b:f3:c3:e8:f7:31:
                    14:2e:cb:3a:64:3a:4a:ee:3f:eb:a8:58:45:24:84:
                    5b:48:07:ed:25:0e:a9:4e:c5:e8:2f:4f:97:ce:8c:
                    e0:23:39:60:fd:c9:b4:1c:72:a3:17:40:6a:94:96:
                    c9:02:5d:30:10:e0:28:3a:02:c8:76:ed:04:04:2f:
                    51:d4:2e:2a:fe:31:34:53:ca:5d:c8:fb:76:8b:72:
                    83:f0:21:f5:b2:7a:c9:95:0a:31:e6:05:36:47:1d:
                    58:6c:ce:e0:32:83:7f:fe:aa:81:c1:46:dc:de:85:
                    20:c3:fc:2b:bf:b9:bc:34:2f:2e:44:5a:8d:fb:e8:
                    15:c5:97:c5:4f:a9:8d:e1:bb:fb:c9:76:92:85:9c:
                    f0:32:5a:06:01:b2:f1:35:a0:76:ba:d6:dd:08:ad:
                    4a:45:4d:f1:da:51:34:b6:bd:38:8a:6d:17:dc:5d:
                    2e:c9:e6:dd:e4:8c:af:b7:a2:09:fa:06:cc:71:fd:
                    4c:c3:e3:a3:c0:2a:25:16:5d:05:0f:5c:3d:95:7f:
                    47:1c:c4:cc:2a:84:b2:ba:c1:a7:dc:04:17:7b:39:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A4:67:DB:68:AD:F9:D7:3F:45:6B:54:E8:2B:D8:B2:6F:46:59:5A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:7d:29:c6:69:91:b6:b6:ff:f6:ca:e3:21:3f:7e:76:fa:
         46:cd:88:2d:dc:5f:9f:64:5a:fc:91:60:ca:5a:d6:3a:cf:f7:
         e4:b3:b5:8e:15:12:91:b3:50:03:6d:98:81:9c:c5:ee:cc:33:
         a3:a9:e9:c4:f3:17:8d:9e:2d:03:cd:6e:3d:33:49:7f:e4:e7:
         3f:63:23:1c:ce:db:ef:23:e5:53:8d:7c:5e:e0:1a:dc:8e:c2:
         75:0d:aa:b4:8c:eb:e0:09:a3:fa:85:3b:49:01:36:ce:81:e9:
         e7:d2:02:4b:f2:8d:03:d7:89:21:0e:f0:06:23:e6:a3:cb:e3:
         39:e1:8c:2a:86:c1:8d:46:fc:fe:e1:77:6c:e9:39:e7:e9:e6:
         ad:26:c3:6e:70:fe:7a:c9:50:bc:6b:21:c2:4a:49:b3:2c:a3:
         c9:50:e1:c8:22:88:7e:68:ce:52:74:cc:23:a7:24:ea:cb:0c:
         8a:ef:3d:13:37:19:9a:42:e3:8e:1c:45:ff:1d:fe:2a:59:6e:
         a1:21:53:2f:05:d0:d6:aa:f8:2b:0f:19:18:62:eb:0e:2b:bf:
         d2:da:f7:e1:bf:8d:c2:f4:a1:02:cd:10:e2:6d:da:38:1b:00:
         04:f6:b3:f6:c3:9a:a5:ca:4a:9a:23:ef:54:22:c8:c4:1d:1d:
         14:d7:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 12:13:54 2026 by rpki-client