Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa
File:                     f424a47a-e8ad-3721-9b85-711f6e59b979.roa (raw, json)
Hash identifier:          dGJB3URXWf/niDbQVd9SX+fImrZwA0nwfe+N2RhAwfY=
Subject key identifier:   F4:05:02:D0:03:45:89:99:AB:7F:8B:0A:91:7A:4A:0A:A8:9B:1E:92
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584DB77031B04236BBDB48B1B860
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     7385
IP address blocks:        152.44.148.0/24 maxlen: 24
                          152.44.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:31:b0:42:36:bb:db:48:b1:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=152e12b4-ddfa-446f-9e3d-1a0a73b4dee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:55:a8:c2:aa:f3:67:9a:db:47:a8:30:25:
                    d2:ae:f9:f8:cd:c9:ac:cc:22:72:ef:02:44:5f:eb:
                    de:c3:81:b1:35:8b:ba:7d:35:74:5d:cc:09:54:e2:
                    d1:2e:74:aa:33:76:12:47:98:5e:16:c9:23:2d:5e:
                    2a:84:4a:98:dc:a1:ac:b6:96:cb:0b:e1:c5:eb:46:
                    28:b5:86:15:38:92:32:1a:fb:3c:86:ab:d1:5f:0f:
                    99:07:ec:73:b3:28:27:6e:91:eb:e1:23:79:4b:c8:
                    73:37:44:78:76:ac:a2:ff:d7:e0:32:bd:cc:f2:31:
                    39:14:e6:0c:c5:c9:b3:9e:df:e7:d6:23:10:04:61:
                    62:50:f1:43:53:4d:3a:82:d7:eb:7d:c2:bc:26:27:
                    15:99:b5:60:ff:a5:a8:77:e1:a3:d1:8c:37:bf:19:
                    0e:4f:20:90:a3:46:95:31:ae:eb:50:d0:e2:52:ca:
                    67:84:40:4b:85:77:ee:83:8c:6a:42:50:fb:07:5f:
                    0b:d2:ec:77:f5:f8:9f:c2:c5:6d:7d:dd:51:42:ec:
                    85:75:75:d7:8e:68:eb:8e:5e:f7:94:fc:d6:86:0c:
                    92:60:19:08:9f:be:d4:85:9a:d0:bd:d2:ee:3f:eb:
                    be:8a:24:a7:eb:96:8c:84:8f:62:6a:54:02:06:ff:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:02:D0:03:45:89:99:AB:7F:8B:0A:91:7A:4A:0A:A8:9B:1E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:e1:82:dc:0b:f7:a5:24:b6:1a:27:2f:06:12:b5:ab:92:
         9f:9a:ee:fb:f9:96:12:20:df:48:f6:5e:60:a9:d9:de:93:1e:
         65:d9:7a:cc:c3:c7:fb:bd:9f:f7:80:b2:75:84:c4:4f:7b:cb:
         44:81:cb:5e:ca:15:d6:dd:38:7f:87:ad:7f:9b:ef:19:28:ec:
         83:39:7d:c1:02:f5:54:09:15:a7:c8:40:6c:12:07:31:ed:d7:
         96:94:0a:e7:9f:d5:88:2b:bb:07:7b:c6:5c:5d:3b:fd:4e:e2:
         50:83:72:cc:e5:68:41:5c:cb:7f:3a:8a:1b:97:1e:db:c0:7d:
         49:2f:cb:cc:f2:e6:b4:6d:8d:ce:1f:7f:b2:1f:cc:dd:19:9c:
         a4:17:12:e6:ec:92:3e:73:03:51:b0:f3:ba:14:bb:97:14:71:
         6b:c0:d4:38:7c:f9:1d:09:9a:7b:e0:89:7a:5c:36:d1:d7:a5:
         ef:6e:1f:e1:7d:54:aa:23:ac:e2:ce:cb:06:d6:0a:70:f9:17:
         46:94:77:46:e3:49:58:a2:ab:40:cd:6c:d2:a4:49:ec:5c:72:
         21:dc:b4:cc:0c:ee:e4:e1:cb:36:32:c2:df:05:86:6d:96:32:
         e7:75:4b:c4:57:9d:2c:e6:3d:05:ab:62:ef:05:3b:3d:ad:8d:
         d5:5f:96:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDGwQja720ixuGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
MTUyZTEyYjQtZGRmYS00NDZmLTllM2QtMWEwYTczYjRkZWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjztVqMKq82ea20eoMCXSrvn4zcmszCJy7wJE
X+vew4GxNYu6fTV0XcwJVOLRLnSqM3YSR5heFskjLV4qhEqY3KGstpbLC+HF60Yo
tYYVOJIyGvs8hqvRXw+ZB+xzsygnbpHr4SN5S8hzN0R4dqyi/9fgMr3M8jE5FOYM
xcmznt/n1iMQBGFiUPFDU006gtfrfcK8JicVmbVg/6Wod+Gj0Yw3vxkOTyCQo0aV
Ma7rUNDiUspnhEBLhXfug4xqQlD7B18L0ux39fifwsVtfd1RQuyFdXXXjmjrjl73
lPzWhgySYBkIn77UhZrQvdLuP+u+iiSn65aMhI9ialQCBv9yqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQFAtADRYmZq3+LCpF6Sgqomx6SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjQyNGE0N2EtZThhZC0z
NzIxLTliODUtNzExZjZlNTliOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCyUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH684YLcC/elJLYaJy8GErWrkp+a7vv5lhIg30j2XmCp2d6THmXZeszD
x/u9n/eAsnWExE97y0SBy17KFdbdOH+HrX+b7xko7IM5fcEC9VQJFafIQGwSBzHt
15aUCuef1Ygruwd7xlxdO/1O4lCDcszlaEFcy386ihuXHtvAfUkvy8zy5rRtjc4f
f7IfzN0ZnKQXEubskj5zA1Gw87oUu5cUcWvA1Dh8+R0JmnvgiXpcNtHXpe9uH+F9
VKojrOLOywbWCnD5F0aUd0bjSViiq0DNbNKkSexcciHctMwM7uThyzYywt8Fhm2W
Mud1S8RXnSzmPQWrYu8FOz2tjdVfluc=
-----END CERTIFICATE-----
Generated at Sat May 9 03:58:20 2026 by rpki-client