Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
File:                     5148236d-6dcf-3d81-bb39-4975817cb970.roa (raw, json)
Hash identifier:          h3ntcbrSDKCfNeCM0cl2P1AZ3uzolmaHk+brHDu/fxQ=
Subject key identifier:   6D:0B:AF:16:D4:25:4E:33:48:BC:23:76:9B:B0:69:FD:BC:AF:63:D7
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584D9A200DF08FB719896CAB6680
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     9025
IP address blocks:        153.46.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:0d:f0:8f:b7:19:89:6c:ab:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=16a9a63f-8b78-4d29-8add-c2528f315e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:6a:02:cf:0b:c6:aa:2a:c1:ff:ae:ee:05:
                    88:08:08:98:c1:01:3f:ca:70:d1:26:31:c0:88:80:
                    39:dc:e7:ad:16:7c:9e:f0:de:a2:95:47:cf:72:ce:
                    08:b1:92:6f:7e:ce:6f:83:9f:71:78:c1:78:c5:43:
                    64:16:60:91:d1:10:55:66:39:28:9a:ff:8a:90:9a:
                    07:28:b7:38:6b:a4:81:6a:62:a0:c3:2f:42:04:8b:
                    94:89:cc:59:b5:af:f3:2f:22:81:be:d9:31:e5:e7:
                    ad:7f:27:96:c7:40:e3:50:6b:cb:8e:ed:42:c4:07:
                    c3:fd:3a:24:2a:d3:df:b8:44:59:1c:6e:59:06:49:
                    9d:08:b1:42:2f:1b:45:91:fe:49:fb:75:0c:02:e0:
                    52:ef:11:1b:99:dc:9e:9f:af:7f:ff:9d:81:d1:cd:
                    71:74:a6:5e:03:81:0e:6e:9d:50:79:d7:2d:c2:06:
                    c9:08:2d:d5:e5:92:b4:c0:c6:91:1b:cd:21:a5:56:
                    96:67:97:eb:67:51:34:2c:30:c3:b0:bc:1c:f6:af:
                    e4:b7:b6:25:60:37:54:05:ad:72:eb:8a:64:05:6b:
                    64:69:3f:da:36:90:c1:0a:ba:be:5a:71:8b:45:67:
                    ff:b1:4e:d9:9a:3c:34:d3:48:f2:d8:ea:2b:9b:72:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:AF:16:D4:25:4E:33:48:BC:23:76:9B:B0:69:FD:BC:AF:63:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:11:43:8c:c1:f9:20:8e:d4:5c:16:90:0b:f5:7f:7b:a7:
         b2:8e:8a:32:08:e7:63:4d:21:b8:ab:ef:75:ac:66:40:b5:6b:
         2e:ec:e0:c4:62:09:e2:a8:17:28:27:00:db:75:b9:50:f9:07:
         8e:08:e1:6b:42:df:ba:49:ce:16:97:4d:70:2c:1e:72:5e:8a:
         22:f5:ba:03:06:01:b5:46:e1:8a:54:a2:89:d2:c4:c1:77:bd:
         0d:d9:2a:0b:9c:5d:d0:4e:36:a6:19:c7:51:55:4f:4f:76:dd:
         e4:2d:80:f6:4c:ca:43:76:3e:02:2d:2d:0d:91:e6:51:2b:76:
         4a:c1:15:d1:f3:84:4b:b4:29:7d:05:7c:d9:6d:46:dc:64:f6:
         a9:61:da:28:8c:50:bc:8e:de:69:c4:01:32:c2:4f:90:8e:1b:
         21:ec:8a:3b:20:30:f7:42:dd:73:06:bd:6d:c0:53:e7:8f:22:
         1c:c0:9d:c6:49:b6:9b:1c:6e:50:4b:f4:d6:a0:ec:80:cc:b6:
         c2:e2:74:35:12:f6:52:7c:f7:1c:96:df:53:bf:5e:57:49:3f:
         b5:7c:76:47:a4:1e:3c:22:17:16:52:99:70:a6:7b:a0:b6:a4:
         bb:8b:38:3e:5a:63:cb:c4:12:7f:f8:56:ca:0d:24:de:1e:e5:
         fc:45:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:10 2026 by rpki-client