Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
File:                     6a7cc440-c701-3906-b2fe-594c62786924.roa (raw, json)
Hash identifier:          tgEgiAqOgkzrgX/Ipe6rnTlwxOJvQwatJGQzjoXen+k=
Subject key identifier:   49:DA:6E:53:7B:3A:1E:F0:5E:67:E0:F2:38:01:0B:58:FE:0D:F1:4E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F03A77D71EA25CE2B93371F80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     29538
IP address blocks:        128.1.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7d:71:ea:25:ce:2b:93:37:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=484c8723-86b1-47d5-9429-a7a7540cb42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:57:a8:19:ba:8b:7e:31:a8:29:e2:0f:b9:
                    27:3f:33:63:e1:e8:5b:f5:f1:59:0d:1a:ac:7c:12:
                    80:91:c6:0b:b7:ff:57:2f:d3:55:7e:19:1c:e9:39:
                    2b:26:c7:f9:7c:1e:3d:49:95:32:76:4f:bb:f9:17:
                    2e:dc:f4:92:4d:e6:fc:42:30:88:ba:14:80:48:ee:
                    a5:5a:9f:aa:99:82:a9:27:4b:b6:99:56:74:8e:25:
                    71:d8:3d:65:34:06:50:d9:02:e3:67:50:9d:13:63:
                    f4:9b:a6:90:4a:9c:0b:18:87:be:35:a7:75:a3:64:
                    28:a7:ef:de:5c:0b:0d:c4:c4:ae:a6:0b:af:96:f3:
                    46:f0:52:96:f7:7b:a8:e3:d1:94:a9:a6:2c:24:25:
                    7e:b4:7c:ea:7e:13:7e:e1:05:15:31:08:5d:31:d3:
                    21:34:3a:70:56:83:a2:16:d5:fc:a1:41:a8:a6:06:
                    98:84:dd:fe:be:f1:4a:e6:85:e2:a0:75:10:bb:b2:
                    40:fd:65:5b:a3:61:b6:96:34:d6:e7:56:56:ef:f9:
                    82:bc:b5:8e:f1:60:f6:83:06:fd:4d:00:c6:30:43:
                    c3:be:5d:85:ed:34:82:09:84:b9:c8:92:3c:48:83:
                    e5:09:94:a7:97:4e:56:d2:a0:35:c4:6e:b1:bb:5c:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:6E:53:7B:3A:1E:F0:5E:67:E0:F2:38:01:0B:58:FE:0D:F1:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:15:67:ab:9e:f9:a4:e3:26:bd:37:70:7c:ef:17:97:c2:25:
         78:09:24:df:c1:79:8a:01:78:fb:3e:74:08:68:b7:eb:8b:37:
         5d:be:c6:f2:d7:76:38:6e:6f:c4:e4:ec:dd:2e:55:9a:07:85:
         5f:5f:90:9f:d4:31:b3:f8:79:8f:f9:08:e6:6c:d5:1b:16:ff:
         34:ff:8c:5b:73:36:18:b5:96:3d:68:a8:dc:9e:c2:c6:08:8e:
         6e:0a:2a:4c:78:b3:b0:fa:88:a2:12:17:99:0f:45:b3:7d:9f:
         3f:12:ad:7d:65:9e:d9:3e:a2:85:dd:e7:f8:cb:30:c8:95:4b:
         42:c5:97:44:01:a2:4b:ca:f7:b0:e7:dc:1f:f5:4c:99:8e:d3:
         df:7d:68:7b:67:06:d2:aa:6d:dd:1a:fd:25:b0:bf:e0:8a:23:
         4e:e0:6f:96:85:af:3a:6b:ba:94:5d:e3:6d:11:b5:45:5d:ce:
         62:59:d2:52:be:58:7b:d4:20:48:55:22:3f:0d:29:e9:92:55:
         75:8a:5e:c5:61:5d:97:79:6a:63:5d:52:78:90:31:e7:c7:0a:
         69:87:af:c7:9c:1e:a2:15:ac:09:cb:7d:1c:9a:7f:4b:0d:8c:
         28:50:13:a7:ad:cd:c4:f7:72:05:28:c9:1a:29:94:1c:6a:b8:
         5a:12:fa:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp31x6iXOK5M3H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDg0Yzg3MjMtODZiMS00N2Q1LTk0MjktYTdhNzU0MGNiNDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdtXqBm6i34xqCniD7knPzNj4ehb9fFZDRqs
fBKAkcYLt/9XL9NVfhkc6TkrJsf5fB49SZUydk+7+Rcu3PSSTeb8QjCIuhSASO6l
Wp+qmYKpJ0u2mVZ0jiVx2D1lNAZQ2QLjZ1CdE2P0m6aQSpwLGIe+Nad1o2Qop+/e
XAsNxMSupguvlvNG8FKW93uo49GUqaYsJCV+tHzqfhN+4QUVMQhdMdMhNDpwVoOi
FtX8oUGopgaYhN3+vvFK5oXioHUQu7JA/WVbo2G2ljTW51ZW7/mCvLWO8WD2gwb9
TQDGMEPDvl2F7TSCCYS5yJI8SIPlCZSnl05W0qA1xG6xu1wt+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnablN7Oh7wXmfg8jgBC1j+DfFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNmE3Y2M0NDAtYzcwMS0z
OTA2LWIyZmUtNTk0YzYyNzg2OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAVZ6ue+aTjJr03cHzvF5fCJXgJJN/BeYoBePs+dAhot+uLN12+xvLX
djhub8Tk7N0uVZoHhV9fkJ/UMbP4eY/5COZs1RsW/zT/jFtzNhi1lj1oqNyewsYI
jm4KKkx4s7D6iKISF5kPRbN9nz8SrX1lntk+ooXd5/jLMMiVS0LFl0QBokvK97Dn
3B/1TJmO0999aHtnBtKqbd0a/SWwv+CKI07gb5aFrzprupRd420RtUVdzmJZ0lK+
WHvUIEhVIj8NKemSVXWKXsVhXZd5amNdUniQMefHCmmHr8ecHqIVrAnLfRyaf0sN
jChQE6etzcT3cgUoyRoplBxquFoS+lg=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:00 2026 by rpki-client