Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc01c73b-8813-3441-8cca-08bd696f1337.roa
File:                     fc01c73b-8813-3441-8cca-08bd696f1337.roa (raw, json)
Hash identifier:          69SO/Rt5GXo1Wgh4wpeFGX4DtbzOqxoN/Sku5c36JG4=
Subject key identifier:   98:03:ED:2C:52:90:9C:37:67:09:83:FE:F0:E7:D6:D5:47:56:7B:6C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9DC120D4D85B35513F3DD600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc01c73b-8813-3441-8cca-08bd696f1337.roa
Signing time:             Fri 24 Apr 2026 20:12:37 +0000
ROA not before:           Fri 24 Apr 2026 20:12:37 +0000
ROA not after:            Thu 23 Jul 2026 20:12:37 +0000
asID:                     150191
IP address blocks:        149.5.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:c1:20:d4:d8:5b:35:51:3f:3d:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 24 20:12:37 2026 GMT
            Not After : Jul 23 20:12:37 2026 GMT
        Subject: CN=4df6a5ea-477b-406f-a093-e2e546db79ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:28:90:39:9c:a7:a5:e5:7f:13:60:a3:22:
                    b8:c8:a6:68:3e:42:0d:2b:64:73:ad:aa:51:ed:88:
                    ba:88:74:f5:86:38:70:77:ae:45:0e:24:de:cc:74:
                    f2:e8:e9:73:74:55:f1:30:97:39:50:90:da:ea:eb:
                    63:ea:58:6d:ce:1c:cb:14:46:b9:37:73:a6:20:f4:
                    f0:91:95:58:90:cb:bd:c2:53:be:54:4c:25:84:e3:
                    1a:83:12:a5:11:1f:1d:1c:46:e0:22:fe:9c:d2:61:
                    9c:c2:e7:fb:2e:ee:d3:14:7f:85:34:26:df:19:3c:
                    9c:53:fe:6c:55:55:db:40:7d:10:cf:d6:fd:b4:87:
                    4c:9a:e1:e8:8f:64:0b:4d:ea:7d:34:fd:18:67:53:
                    6d:70:01:b6:dd:05:7a:0c:85:1f:f3:7c:b3:92:56:
                    17:09:d1:3b:f4:4a:aa:4b:52:38:15:38:90:07:a0:
                    9a:77:8c:50:5c:bc:fd:65:25:98:0f:f4:b9:34:07:
                    44:7d:91:ff:4c:f0:9a:0b:97:65:d8:ef:b4:f7:f0:
                    4b:70:9e:1b:e3:0b:49:f1:83:5c:f6:9d:bd:2f:67:
                    e9:5a:44:1b:13:27:6d:a8:52:fd:c6:aa:be:64:98:
                    39:2c:fd:2d:cd:37:b8:9f:52:1f:f6:22:dc:64:b4:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:03:ED:2C:52:90:9C:37:67:09:83:FE:F0:E7:D6:D5:47:56:7B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fc01c73b-8813-3441-8cca-08bd696f1337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.5.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:42:56:86:a3:c7:8c:6b:93:8a:87:8c:f2:c1:06:16:57:
         0d:47:19:3f:75:55:fb:8f:46:b6:26:36:d8:d1:59:b0:ef:ec:
         26:51:23:ca:cd:3d:60:0e:47:1e:90:6f:1d:55:9f:da:0a:a8:
         1d:5f:3d:9b:b7:55:f8:a8:31:3f:62:93:92:0e:d0:11:b5:2e:
         50:fd:05:e6:59:c2:ac:25:7d:c8:70:6e:d5:d3:d0:2d:2a:ad:
         86:f1:cc:a8:e0:9c:c5:0d:36:55:c3:be:14:12:af:24:71:8f:
         f9:e0:72:f7:9f:ec:5d:05:b1:28:95:2d:47:dd:70:91:d4:89:
         41:c5:98:cc:94:75:ab:2b:a3:1c:27:6b:91:5c:8e:50:f3:8c:
         0b:34:37:fa:a1:53:80:cd:f8:f6:e5:ad:6d:d4:53:84:a4:4c:
         3b:f0:01:0f:b4:7e:8c:44:e3:ce:f4:e1:94:09:01:f1:5c:97:
         b5:43:78:67:7c:fb:42:7b:d1:66:c1:95:8a:fe:0c:e3:db:1e:
         b7:19:18:b4:66:f8:b2:43:66:31:9c:35:19:90:0d:9d:24:05:
         0f:6f:37:c2:cb:c7:69:5a:5a:c0:27:c5:63:c4:6c:65:fd:da:
         04:d1:9a:59:e8:e0:df:bd:f0:b5:9f:fe:76:f0:ac:02:8a:72:
         55:f4:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:12:00 2026 by rpki-client