Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
File:                     7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa (raw, json)
Hash identifier:          R6ioRtXPOw0tHpuzVXT2XA0G0Dej19FEexXx1QZIbm0=
Subject key identifier:   65:91:9A:CC:9E:ED:82:41:40:0E:71:BD:C8:E3:96:7E:82:94:08:D8
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584E5BAF5340BF8A64E508D60000
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        152.131.248.0/22 maxlen: 22
                          152.132.248.0/22 maxlen: 22
                          152.133.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:53:40:bf:8a:64:e5:08:d6:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=da15cfcf-85a2-48d8-b0c1-f75c82d1334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:9b:b9:49:5c:43:0c:99:3e:e6:df:4c:05:
                    24:35:6d:8a:1b:27:42:2d:a8:65:e5:2f:cb:d1:f1:
                    03:cf:60:cf:2d:f2:42:92:42:aa:c2:bb:a6:5d:ef:
                    fc:43:c4:8d:ca:07:0d:b3:b2:82:d9:07:b4:79:4c:
                    5c:03:a7:12:60:bf:dd:46:8a:14:9e:14:f9:83:64:
                    38:bb:f7:8d:f8:dc:17:2b:f1:07:e4:54:1e:76:d0:
                    74:fb:7c:28:49:b0:76:b8:d2:a9:ed:50:fd:c8:b9:
                    90:d0:31:77:51:db:0f:7f:c5:3c:c0:57:7d:b3:dd:
                    c2:4b:f8:c5:b9:04:36:db:72:cf:41:a2:10:f4:35:
                    30:4c:de:49:82:5f:e0:e2:60:3b:ff:db:c8:3c:68:
                    3f:af:e3:f9:be:2f:16:b2:38:c2:d3:93:b5:83:74:
                    38:43:3b:fd:62:d1:cc:3d:1d:83:e6:f7:09:36:83:
                    0f:01:af:c2:3d:6d:d1:22:37:c9:cb:70:01:97:fa:
                    49:bb:0c:83:f7:ea:77:b9:b1:02:36:eb:7c:c5:97:
                    ca:c6:9f:53:65:68:d4:a4:c5:d7:12:8f:11:36:cd:
                    d1:40:dd:2b:a0:2c:73:3a:44:72:c5:a7:d0:6a:c4:
                    67:d1:03:4d:77:9f:a1:59:c3:63:d6:08:7d:89:fc:
                    e8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:9A:CC:9E:ED:82:41:40:0E:71:BD:C8:E3:96:7E:82:94:08:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/7c848122-d2b1-3ef9-8a5d-2af4801aefbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.131.248.0/22
                  152.132.248.0/22
                  152.133.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:eb:b9:08:b9:c0:4b:fb:6d:87:d9:a2:3e:78:73:56:7e:
         e4:cd:a4:b6:92:6e:16:eb:bb:4f:06:24:ea:13:94:46:16:0a:
         a6:39:16:15:28:ab:b8:e8:a7:67:17:7e:17:c1:6c:8b:53:7b:
         df:ae:6e:ee:8b:c5:d9:6e:2d:48:cb:8f:40:05:f5:1f:b5:33:
         d8:ba:7a:2f:53:7a:19:62:bc:13:f3:59:06:29:47:70:7c:f3:
         ab:da:39:8a:7b:64:da:4f:84:93:87:a5:9d:f6:f0:d0:54:33:
         ac:10:4f:7d:6a:2f:81:ff:2b:57:d1:62:ee:0a:e6:ae:df:c3:
         0b:7b:a0:4f:c1:3b:03:e8:b4:0a:53:d2:0e:05:56:16:d2:81:
         9b:07:1b:23:61:72:2f:fc:9a:1b:e1:2e:d1:7f:69:45:f2:09:
         9c:dd:00:86:82:76:e0:45:6c:68:65:25:49:dc:77:ad:57:23:
         df:f1:fc:b8:32:96:dc:9a:2f:7e:c1:f1:5e:66:12:10:98:75:
         e0:a0:5d:b1:3c:3e:d0:75:a9:c1:74:c8:0d:77:df:2e:30:c0:
         11:b0:e4:7c:0f:08:91:2e:7a:42:8c:cc:e2:22:e6:94:55:40:
         bb:c9:46:72:9a:ed:3a:df:69:38:2d:df:e1:93:9a:05:07:38:
         8e:78:a5:b9
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5br1NAv4pk5QjWAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFk
MDkyMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGExNWNmY2YtODVhMi00OGQ4LWIwYzEtZjc1YzgyZDEzMzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0qbuUlcQwyZPubfTAUkNW2KGydCLahl5S/L
0fEDz2DPLfJCkkKqwrumXe/8Q8SNygcNs7KC2Qe0eUxcA6cSYL/dRooUnhT5g2Q4
u/eN+NwXK/EH5FQedtB0+3woSbB2uNKp7VD9yLmQ0DF3UdsPf8U8wFd9s93CS/jF
uQQ223LPQaIQ9DUwTN5Jgl/g4mA7/9vIPGg/r+P5vi8WsjjC05O1g3Q4Qzv9YtHM
PR2D5vcJNoMPAa/CPW3RIjfJy3ABl/pJuwyD9+p3ubECNut8xZfKxp9TZWjUpMXX
Eo8RNs3RQN0roCxzOkRyxafQasRn0QNNd5+hWcNj1gh9ifzoAwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFGWRmsye7YJBQA5xvcjjln6ClAjYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRm
YWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvN2M4NDgxMjItZDJiMS0z
ZWY5LThhNWQtMmFmNDgwMWFlZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGY0ZmFmMmEtMTdmZi00ODI3LTli
ZWMtYzZmZmNiMmFkMDkyLzRmNGZhZjJhLTE3ZmYtNDgyNy05YmVjLWM2ZmZjYjJh
ZDA5Mi5jcmwwHwYDVR0jBBgwFoAU4BNewN3Gcqc4VJWHF5QWjm2ZcC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZm
Y2IyYWQwOTIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmIP4AwQC
mIT4AwQCmIX4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIZ/67kIucBL+22H2aI+eHNWfuTNpLaSbhbru08G
JOoTlEYWCqY5FhUoq7jop2cXfhfBbItTe9+ubu6LxdluLUjLj0AF9R+1M9i6ei9T
ehlivBPzWQYpR3B886vaOYp7ZNpPhJOHpZ328NBUM6wQT31qL4H/K1fRYu4K5q7f
wwt7oE/BOwPotApT0g4FVhbSgZsHGyNhci/8mhvhLtF/aUXyCZzdAIaCduBFbGhl
JUncd61XI9/x/LgyltyaL37B8V5mEhCYdeCgXbE8PtB1qcF0yA133y4wwBGw5HwP
CJEuekKMzOIi5pRVQLvJRnKa7TrfaTgt3+GTmgUHOI54pbk=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:10:01 2026 by rpki-client