Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8916105e-3585-3bd4-b4b2-dd471094f5c8.roa
File:                     8916105e-3585-3bd4-b4b2-dd471094f5c8.roa (raw, json)
Hash identifier:          ycNOHYcsy9Qax0G5a+lS3723yEQsXvAVkbKYXXidk70=
Subject key identifier:   F4:E2:93:37:71:30:C0:4F:36:DA:24:90:E7:77:3A:64:B9:B6:57:AF
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584F51D299A65BC97B8147147000
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8916105e-3585-3bd4-b4b2-dd471094f5c8.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     19718
IP address blocks:        152.22.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:99:a6:5b:c9:7b:81:47:14:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=1436f9cc-5e15-460e-a7b5-2d16ac21b942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:65:93:ce:8b:73:55:4e:ff:db:c8:73:3c:
                    da:8f:c7:9f:46:02:c8:9b:63:fd:25:2d:cf:03:de:
                    e4:6a:41:ea:ea:af:b5:6b:d8:33:07:6b:da:4e:9a:
                    97:28:ae:a9:6a:a4:a4:c4:88:6c:78:83:cc:a1:40:
                    ba:dc:78:8b:93:ec:78:d3:9b:f7:d3:5f:3d:6d:81:
                    61:6d:99:81:da:81:83:61:66:3c:26:a7:0b:45:6a:
                    c3:fe:93:71:c3:7c:9d:d5:17:59:9a:b9:96:1c:fa:
                    aa:b1:03:52:af:35:b5:04:61:4d:69:69:ff:13:ba:
                    56:2a:30:54:cf:b2:f9:5e:67:61:87:37:e2:81:c0:
                    40:46:13:3c:72:c0:c0:dd:c7:c3:e2:df:d3:f7:2f:
                    d9:36:99:f9:ea:30:47:ad:80:4a:cb:e4:b1:f7:0a:
                    70:1f:e2:7d:a6:fb:f9:3e:df:c3:c4:ad:47:2f:bc:
                    e1:97:a2:7c:e7:e3:4c:c6:d1:cb:0f:60:11:cb:7f:
                    75:7c:d1:f8:6d:54:a8:83:84:72:14:ec:59:05:fc:
                    d8:44:fe:f2:29:52:29:eb:76:56:68:59:9e:69:78:
                    8b:a2:7c:ac:f6:e2:84:1b:37:3f:a7:0c:c6:b0:b9:
                    f6:fe:c4:61:4f:8c:04:4c:2c:aa:d0:be:ce:81:f1:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:93:37:71:30:C0:4F:36:DA:24:90:E7:77:3A:64:B9:B6:57:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8916105e-3585-3bd4-b4b2-dd471094f5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:71:ad:2d:16:21:6e:38:c7:7a:02:0d:01:ac:da:f6:ca:
         2b:e5:8d:13:3d:36:48:1f:3c:a5:60:9a:4c:61:4f:0e:e1:1d:
         f5:f6:07:11:3f:e2:e2:f8:8d:0f:8f:d8:67:10:f9:18:7f:ac:
         d5:ba:bb:19:86:61:57:49:72:a2:95:34:e3:71:94:c7:e6:0b:
         82:c4:29:97:dc:0a:0c:10:9c:7b:b9:61:f4:ff:09:f8:9f:42:
         18:e7:96:ff:49:05:52:1c:53:ab:bc:8a:74:e7:84:72:f1:fe:
         d3:8d:3a:eb:fa:59:e3:30:87:b3:bf:3c:ae:37:ba:60:7e:26:
         99:e8:90:a2:06:38:e2:36:63:56:75:98:3e:36:ce:97:df:8e:
         ed:31:68:68:17:f8:8a:c7:bb:15:b0:89:c6:d4:cc:f8:84:6c:
         ba:9f:a3:cd:6e:5f:9d:cc:69:15:d8:8a:db:84:4b:e2:6e:cf:
         3e:fb:17:fb:bd:fd:23:b5:5f:72:2e:44:b5:11:e6:8b:27:f8:
         3f:0b:89:5d:bb:94:44:22:12:53:91:e8:b9:80:ca:23:6f:af:
         d6:ce:b8:8e:3f:fb:8f:b2:c1:26:11:19:6e:92:89:70:0b:e4:
         80:c3:56:b1:82:ca:f2:65:b1:af:df:a6:59:1c:1e:1c:3d:dd:
         8f:52:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:16:57 2026 by rpki-client