Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/4e9ad755-fef0-3580-b03c-2f645899ca89.roa
File:                     4e9ad755-fef0-3580-b03c-2f645899ca89.roa (raw, json)
Hash identifier:          sS2OldBXuOWF2FNVq+mQy2n/rC8yDsznbFryNJnb7v8=
Subject key identifier:   F6:CD:9B:0E:D5:B9:EE:CB:4B:73:6A:2E:09:27:21:9B:ED:92:A6:5B
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584E6144B80CF60ECA18B857C180
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/4e9ad755-fef0-3580-b03c-2f645899ca89.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     30083
IP address blocks:        148.72.134.0/24 maxlen: 24
                          148.72.144.0/24 maxlen: 24
                          148.72.155.0/24 maxlen: 24
                          148.72.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b8:0c:f6:0e:ca:18:b8:57:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=492ef6a6-1005-477a-9598-25a53570c6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:79:0d:5f:ce:c6:46:47:23:e0:31:72:3a:
                    f6:c2:31:fe:21:3a:8c:36:ea:53:68:f0:5a:e9:67:
                    f2:70:54:76:47:4c:e0:10:85:36:ce:9c:cd:62:ce:
                    51:f7:8b:e9:a3:15:6f:b6:6b:85:a1:b8:48:50:c8:
                    11:3a:0e:84:10:e9:64:b2:06:b6:bd:f3:98:13:79:
                    20:b1:63:ca:71:a8:9c:e2:e0:e5:ee:a8:ad:6e:49:
                    fd:d7:c4:fe:b5:5b:d3:07:7c:36:cc:76:80:f0:ec:
                    24:d2:6d:1c:68:03:12:65:11:15:df:a7:09:1d:f3:
                    97:e2:91:d9:63:47:d9:7f:e6:0e:e6:25:4e:d0:1e:
                    ca:95:22:ea:a9:1e:38:27:b7:d4:82:3a:3b:04:7d:
                    50:96:b0:dd:42:25:7f:d3:0f:04:be:26:80:7b:1a:
                    26:d1:3b:44:7a:12:42:e8:48:46:67:78:71:78:1e:
                    89:86:04:01:25:73:06:eb:fd:1e:89:9c:75:0e:27:
                    3d:65:07:ed:2a:33:fd:4f:73:ba:2f:ba:8b:fd:e3:
                    1f:c2:cf:ef:d2:9b:83:54:84:37:b7:b7:a4:1f:18:
                    e4:64:69:de:81:7d:de:ba:51:a6:e9:d8:a3:fd:4d:
                    9f:38:ad:56:72:d7:01:3f:38:57:16:3a:39:52:cd:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:9B:0E:D5:B9:EE:CB:4B:73:6A:2E:09:27:21:9B:ED:92:A6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/4e9ad755-fef0-3580-b03c-2f645899ca89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.72.134.0/24
                  148.72.144.0/24
                  148.72.155.0/24
                  148.72.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:f4:8b:36:af:74:36:e3:0a:c3:d0:4f:68:2f:11:d0:2f:
         89:20:6e:d7:d2:5c:ed:3d:1b:3b:d6:0f:d2:ae:65:5a:8a:ee:
         6e:95:48:d8:6e:62:9f:fe:83:01:6a:81:f4:8b:d8:dc:c9:5a:
         ed:c6:16:7f:85:ff:29:04:28:c9:d3:b0:bf:41:48:fd:f7:13:
         2e:72:a9:26:f2:ce:87:53:e8:f2:96:9b:18:30:7e:d5:02:d8:
         74:ea:50:b8:8e:74:da:2f:13:6a:38:38:bb:71:bf:b7:ac:b8:
         62:14:e5:99:94:8c:89:6d:43:22:8a:6d:f5:a3:3f:7f:e1:b0:
         ec:5a:e3:2d:ff:5e:b8:76:0d:ad:82:80:62:86:b2:fd:66:b9:
         e1:cc:f2:fd:15:e7:ee:23:8e:4c:df:0b:7a:df:36:9b:cd:15:
         19:4d:7b:a4:98:d9:cc:37:1e:0e:6d:3d:3e:f0:16:58:27:21:
         54:dd:c1:f5:52:13:c9:ae:57:aa:7b:d7:42:4b:f1:73:5a:34:
         b9:29:b3:0d:1f:80:23:d1:77:de:b5:22:a8:cf:9b:04:91:a3:
         26:88:b9:c9:8c:50:ef:f9:2d:ae:e8:29:28:2c:8f:58:2d:94:
         96:d9:ef:9c:22:c1:45:0c:0d:0c:8a:55:bd:49:24:00:ec:3b:
         04:c0:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:03:11 2026 by rpki-client