Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa
File:                     6a8ce612-572d-3e77-bb26-bd18757e474b.roa (raw, json)
Hash identifier:          w2H1iwcdxISp5e06Debl3N3SALz9r/oqLvXqGhvtrFE=
Subject key identifier:   8F:6D:F3:7D:1D:AF:82:48:53:1B:E3:01:58:B0:F7:17:FD:E8:72:F6
Certificate issuer:       /CN=8dfd6a34-a7e1-4a96-8334-a15990c8a58b
Certificate serial:       010D0C9F4328584F4976EE76C6162013658CB040
Authority key identifier: B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     55013
IP address blocks:        148.150.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:ee:76:c6:16:20:13:65:8c:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dfd6a34-a7e1-4a96-8334-a15990c8a58b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=73550cad-0caa-493c-982d-67081fcbf7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:39:41:16:df:a2:04:b6:ce:9d:fe:23:0e:
                    fa:c6:35:a7:c3:58:8a:cc:55:23:aa:27:cc:a1:b4:
                    e4:22:54:fe:60:cf:ac:9d:e8:dc:bb:2e:f1:45:42:
                    8e:44:3b:e2:d5:af:01:f3:55:c8:32:de:cc:26:b4:
                    2a:71:68:b5:cc:5a:34:51:bd:a5:52:e6:2e:0d:58:
                    8a:57:4a:9b:cd:85:27:c4:63:55:2b:3a:0e:4a:95:
                    82:e8:1a:5d:33:98:df:48:7f:30:8e:49:c4:8c:fc:
                    57:2b:c9:46:17:4a:25:13:66:6b:97:4c:f6:4d:4a:
                    f3:e9:35:44:21:54:e8:3a:bc:f2:c5:e9:48:07:1c:
                    f5:46:88:8c:94:17:ca:55:d1:6b:2c:33:7a:05:ef:
                    b4:53:81:d5:62:d3:a8:9c:23:de:e3:5d:95:bd:e8:
                    de:00:fc:c5:1b:0e:3a:0f:79:ee:e4:b0:6d:d9:b8:
                    bf:a0:b3:ba:33:c7:39:24:da:ba:d0:ac:91:94:7f:
                    87:f0:b7:80:7c:d3:3f:21:a9:83:f6:93:0a:bc:30:
                    40:ef:ae:7a:45:11:c8:2b:4d:13:e4:11:e1:03:84:
                    87:af:30:f7:b1:40:a9:64:7c:64:c3:37:c7:c7:0f:
                    aa:33:f5:35:a3:b7:94:c3:91:e6:bf:63:f0:2b:0d:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6D:F3:7D:1D:AF:82:48:53:1B:E3:01:58:B0:F7:17:FD:E8:72:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/6a8ce612-572d-3e77-bb26-bd18757e474b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.150.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f3:e1:c6:1a:59:68:79:7e:90:3d:ae:96:a6:bd:a7:a0:63:
         17:82:04:46:ec:c8:55:eb:65:45:8a:9c:02:4f:8a:dc:10:fa:
         b1:b2:81:13:a0:f5:0b:0b:4b:d5:57:05:a9:88:57:51:ed:0e:
         e5:05:88:d1:65:38:f3:45:7d:2e:0e:32:b6:bb:fc:eb:3a:d7:
         5f:18:04:56:a7:4c:cf:b1:94:e7:c5:04:87:47:3a:bc:0e:7d:
         3a:74:a9:c2:7b:ef:f1:fa:8a:4e:9d:5f:dd:a1:62:b3:2c:dc:
         53:08:06:25:73:e4:fd:d2:28:87:8f:25:f0:0a:06:72:bd:5e:
         28:ec:d1:af:8a:a8:5e:a3:0a:d0:a9:59:12:c0:88:d0:4b:16:
         ac:a9:fe:f1:db:bc:e8:8d:e4:6d:5f:b0:09:12:ed:89:f9:f5:
         53:ae:0f:01:73:e5:88:07:f4:e3:c2:7c:18:b5:64:3a:8b:6d:
         b6:a3:48:82:2b:a1:3d:25:f9:36:ed:68:eb:ab:85:b2:ce:ca:
         a1:7a:b2:b7:02:d1:ac:73:93:4b:3f:96:b5:6f:bf:35:7d:6c:
         04:1b:fc:4b:76:46:6a:2c:8f:ca:a8:b5:b4:1f:f4:00:1a:45:
         0b:5b:d0:08:b8:f5:b4:5e:d5:a7:98:94:0a:c4:18:3e:d2:4a:
         5d:e2:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:36:12 2026 by rpki-client