Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa
File:                     0155302e-2572-3721-b5e8-e23b57d6cd96.roa (raw, json)
Hash identifier:          zFyEBN61rR455/rPLhXEJHyctpe8MvvGBNVq3FLA+Sc=
Subject key identifier:   0A:55:5D:B8:9E:E1:5F:A9:FF:1B:30:9B:C9:25:AF:0F:EE:65:45:21
Certificate issuer:       /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
Certificate serial:       010D0C9F4328584EB2B1B79C36A91E940A387F80
Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     16668
IP address blocks:        192.148.252.0/23 maxlen: 23
                          192.148.252.0/24 maxlen: 24
                          192.148.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b7:9c:36:a9:1e:94:0a:38:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=9cf8d176-5184-4d3d-8d7a-80ef9b1d39f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:78:d2:bd:73:95:5c:73:c9:f8:a0:d6:5c:
                    c4:46:b6:be:9f:c6:78:65:02:fb:52:8e:ab:0d:7d:
                    1c:49:21:df:1a:77:18:d5:91:08:f6:bc:6f:1a:3b:
                    cb:1e:9e:e7:ee:83:c2:8b:8c:08:de:b7:52:93:22:
                    21:62:65:d1:9b:18:f2:e5:71:1c:16:f6:62:7f:61:
                    9f:7a:b5:be:cd:e6:3d:44:b0:98:77:48:ad:40:cd:
                    6a:e7:4a:91:a0:ea:a5:97:4b:28:e4:aa:ec:a1:12:
                    68:84:c6:78:76:f2:8d:60:64:ae:60:a1:d1:5f:71:
                    8d:d9:bf:a5:2b:ec:56:a1:c5:d9:ef:33:98:19:c4:
                    42:a1:b2:06:3a:08:a6:93:fa:6b:08:12:d9:e6:34:
                    e3:1c:61:6f:0d:c9:38:50:19:9b:4f:cf:a4:32:80:
                    90:fc:be:3f:15:95:9b:b2:16:b5:ef:25:6a:0c:50:
                    40:89:5c:cc:1d:2b:f3:8c:e4:6d:78:5d:bf:70:01:
                    12:16:24:e9:4d:9e:d7:5d:f6:2a:8e:fa:43:e6:5b:
                    be:45:20:7e:cc:f4:e0:b7:f3:0c:b8:0a:54:a0:a2:
                    ef:dc:29:0c:66:5e:4c:70:f2:e4:8a:1f:55:d4:5d:
                    fc:0f:50:19:bf:e2:f5:7b:8a:92:d7:8e:78:d6:bf:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:5D:B8:9E:E1:5F:A9:FF:1B:30:9B:C9:25:AF:0F:EE:65:45:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/0155302e-2572-3721-b5e8-e23b57d6cd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl

            X509v3 Authority Key Identifier:
                keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:de:3e:ef:90:c1:5a:54:44:62:5a:2c:22:16:10:35:b3:
         2e:29:80:ce:e6:2b:32:30:8f:38:a7:9a:3f:3b:c8:59:58:f5:
         b4:6e:6e:a5:81:9d:3e:1f:97:cf:9f:88:2d:db:29:65:da:cf:
         2b:50:65:64:15:07:56:39:27:69:b5:77:11:be:e2:01:58:ab:
         db:8a:81:6d:42:dc:0a:16:c7:94:b8:31:34:f1:e6:ff:a9:fb:
         35:19:ea:ef:e7:e7:90:f8:d5:c1:ec:d3:95:54:3e:26:69:c9:
         1c:cb:56:05:2f:01:f2:ee:ac:63:e4:ba:8b:c7:ab:a1:01:19:
         66:6f:4c:78:07:0c:09:84:ea:ce:24:df:76:03:46:cc:f2:46:
         8b:79:28:a1:1b:4a:02:de:d4:42:69:66:83:07:dc:cb:bf:b0:
         27:b0:df:c5:ac:60:d5:af:39:34:65:56:61:6d:7e:2a:4c:c4:
         53:7b:a0:24:a9:a7:39:f9:78:40:28:a6:81:9b:de:f6:5e:9c:
         83:25:78:bc:fa:94:e4:6f:17:37:37:b7:ec:1e:a8:17:cc:20:
         2f:2c:a9:e4:59:16:bd:cd:20:3f:51:7b:88:c0:48:89:13:7d:
         8c:92:54:3d:c1:37:92:30:13:99:b5:43:40:e5:9b:d6:8c:98:
         4a:9f:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:39 2026 by rpki-client