Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/99d78562-e9c7-3312-bddb-1bf3006e5ea9.roa
File:                     99d78562-e9c7-3312-bddb-1bf3006e5ea9.roa (raw, json)
Hash identifier:          RO3rpMOiksAyiw4FpyT0E+eJxKrU9uq/8pogE6rMRzs=
Subject key identifier:   E0:6B:41:6F:41:75:B0:5B:3F:23:49:EE:37:C4:D3:09:2C:5F:D1:FB
Certificate issuer:       /CN=90352753-4ed5-4805-a661-e3c0ff7bc8f8
Certificate serial:       010D0C9F4328584D2A74C5E82FE218362856BD80
Authority key identifier: 94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/99d78562-e9c7-3312-bddb-1bf3006e5ea9.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     46829
IP address blocks:        167.253.152.0/22 maxlen: 22
                          167.253.152.0/24 maxlen: 24
                          167.253.153.0/24 maxlen: 24
                          167.253.154.0/24 maxlen: 24
                          167.253.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c5:e8:2f:e2:18:36:28:56:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90352753-4ed5-4805-a661-e3c0ff7bc8f8
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=37f79fe5-de83-462a-a19f-2a37851307ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:83:fd:31:1a:db:2c:e1:41:55:6a:ff:de:
                    d0:3c:6a:37:54:cc:81:5f:fd:3d:e4:89:4c:21:94:
                    ad:44:15:46:92:3a:25:7a:ba:a2:16:09:6d:ff:a3:
                    16:4a:e3:fd:8b:1c:b5:4d:e2:ae:8b:94:65:08:9f:
                    2b:c5:4b:05:b7:74:8f:b8:36:a9:ef:ab:f1:9e:c2:
                    e0:df:78:99:41:08:2d:b7:a6:ce:14:b8:14:a9:95:
                    4d:d2:04:77:fa:66:66:dc:94:6b:df:32:af:44:ea:
                    ea:3d:cd:f4:a2:8d:95:4e:04:fc:98:f1:68:b5:ba:
                    5d:8c:2a:f0:ce:36:3c:59:3f:0b:94:14:15:54:a4:
                    a7:37:78:c8:85:c1:dc:91:e6:0a:ef:4f:36:13:03:
                    ee:bb:96:c6:bc:2f:18:50:d0:ef:e5:54:eb:22:69:
                    d7:a9:40:cd:3d:03:a0:07:e0:6f:35:ee:b4:32:2b:
                    14:d6:98:84:fc:df:cf:32:18:36:df:e7:fe:99:2a:
                    be:da:c2:23:f5:5d:cf:56:52:b2:95:91:45:4c:1f:
                    8c:1b:25:b0:aa:77:77:87:80:48:a6:9e:1f:7c:b3:
                    02:ec:48:00:c6:6c:da:b9:f4:01:e3:ea:d5:ed:be:
                    2e:1b:07:07:80:53:b0:bd:93:b7:f3:c0:10:0a:ed:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:41:6F:41:75:B0:5B:3F:23:49:EE:37:C4:D3:09:2C:5F:D1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/99d78562-e9c7-3312-bddb-1bf3006e5ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8/90352753-4ed5-4805-a661-e3c0ff7bc8f8.crl

            X509v3 Authority Key Identifier:
                keyid:94:65:E6:E2:16:55:D9:00:51:A5:59:B4:7C:48:24:47:D0:7A:C1:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90352753-4ed5-4805-a661-e3c0ff7bc8f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:61:af:1b:2f:46:d9:10:89:a6:74:cc:76:98:21:1a:63:00:
         d6:75:3a:08:86:b4:ff:7b:4c:c9:07:b8:64:a9:12:79:f9:25:
         07:05:7c:2c:7a:43:b3:cc:cf:bb:9f:10:75:2b:a6:aa:1d:a7:
         0f:96:8b:ae:24:59:8d:5d:30:7e:8e:77:d3:c5:ec:9b:4a:46:
         3b:6b:2f:62:51:78:ed:6d:ad:f9:af:13:11:29:49:94:fb:12:
         cc:39:6e:af:b6:2f:c2:ab:9f:d8:8e:55:48:7a:b9:42:b2:d9:
         56:2c:54:6b:84:44:2c:6c:88:b6:d1:ca:85:85:16:32:e1:43:
         a9:06:9c:9d:a2:1b:65:90:8f:49:24:d9:8e:c4:9f:b4:9a:73:
         db:64:79:a9:f6:bb:b6:c0:5e:07:2b:ee:6c:57:25:c6:0d:09:
         9b:e1:06:c4:69:49:70:0a:86:67:89:a3:31:90:80:27:e9:31:
         20:b1:9f:81:49:cf:0d:61:45:55:0f:77:9d:de:40:fd:bf:fc:
         6c:60:38:96:d1:31:2e:cd:b2:a9:5d:cc:7c:28:7e:de:7b:be:
         09:1d:b2:c0:9b:ac:0a:75:57:21:ed:78:f6:92:77:aa:f1:ad:
         3e:a5:9e:78:9f:64:ec:f7:11:bc:f1:ef:32:b8:f6:be:ae:a9:
         48:71:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 04:25:56 2026 by rpki-client