Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
File:                     a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json)
Hash identifier:          Wtz3IjYYYsA2rhQTXk+91sRPEbTjmajse4aG8PBErpk=
Subject key identifier:   C8:B2:75:2A:72:BC:B7:40:89:6C:B8:F9:D6:88:E8:81:56:D1:30:EF
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584DFBD5EE7F566C431A88D9BD80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     137443
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ee:7f:56:6c:43:1a:88:d9:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=5d86a2f6-ebf7-41c3-b9e7-1319fba57535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:53:75:be:88:4c:20:db:b4:f5:17:51:8d:
                    e7:3f:59:2a:b2:24:0d:cb:eb:ed:19:1a:48:89:b7:
                    44:db:ba:0b:90:af:01:f1:da:26:fd:6b:e8:b8:9c:
                    e1:21:9e:96:b5:64:1b:5c:e0:1a:af:d3:5d:b9:75:
                    06:bb:7e:24:be:ec:61:a1:56:fa:77:43:43:4c:bd:
                    12:e1:5e:99:a6:c6:82:84:4f:c4:39:37:58:d9:9f:
                    0d:17:5c:de:ec:11:45:59:5a:be:da:48:bd:b6:59:
                    53:3f:a5:88:fe:94:83:3c:49:4b:c1:2e:3f:09:c0:
                    c3:56:cc:fb:e1:04:77:86:d6:25:2c:d4:9d:f4:9e:
                    2a:c4:5a:f0:4a:7b:9f:a7:4d:fe:24:0c:a1:b1:15:
                    0b:d4:38:89:86:08:69:bf:90:61:0a:e1:7c:79:24:
                    24:c2:65:87:59:5c:f5:6b:4b:91:7c:3b:78:79:29:
                    c8:74:60:52:50:29:82:9f:20:45:05:77:44:d4:c6:
                    4c:5e:66:74:3a:f2:57:c8:30:6b:d2:e2:1a:58:24:
                    ec:51:89:17:75:ad:45:76:c2:77:26:af:b9:2d:61:
                    c9:62:e0:2d:1d:14:05:d7:33:68:b1:60:fe:07:6a:
                    9b:a2:85:86:41:16:d9:f4:60:04:f6:dd:62:6b:ca:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B2:75:2A:72:BC:B7:40:89:6C:B8:F9:D6:88:E8:81:56:D1:30:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:ed:48:3c:08:11:ca:1e:33:53:7a:00:dc:d0:8d:99:34:
         1d:67:57:23:e7:66:72:ac:a9:70:65:46:c5:58:a6:ff:a2:53:
         60:34:90:e5:7d:a2:d0:64:6c:e2:2b:31:16:e0:0c:95:25:ca:
         cd:01:69:93:d7:03:f5:dc:bc:14:f8:da:34:08:87:5d:19:c8:
         f3:d0:cd:98:9c:fa:97:bd:bd:1f:f1:2d:0f:e4:22:20:5d:15:
         4b:79:43:08:7a:51:0a:6b:69:9a:c3:bc:90:42:20:bf:1b:47:
         af:13:03:ac:50:20:3c:e0:73:bd:16:d6:95:af:e0:d2:5d:ce:
         4f:08:28:95:6f:60:c1:c0:f9:af:88:fa:6a:ad:af:dd:8e:b8:
         e4:c8:1b:d1:cc:29:25:81:29:e3:72:e5:df:5c:74:1a:61:53:
         ba:d8:6f:0e:00:33:ff:ef:9b:41:1f:c1:5c:23:ab:7e:e2:31:
         f3:fb:5c:cc:aa:a6:2c:d5:5f:ca:5d:71:2d:36:74:3e:33:6f:
         19:7b:04:ef:24:df:44:18:1e:ea:5c:19:c1:ef:25:aa:47:05:
         f3:f6:54:d8:c4:98:43:3e:6d:d4:6d:b2:d8:7c:34:46:20:28:
         d0:a7:1d:cb:ad:bd:b9:73:fa:0f:6d:0b:7d:a5:16:27:0e:06:
         1e:44:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:01 2026 by rpki-client