Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd3eaee-7ced-3dbc-a668-31eebbe4f7e3.roa
File:                     7fd3eaee-7ced-3dbc-a668-31eebbe4f7e3.roa (raw, json)
Hash identifier:          yHzT4/cIbrPSB4jOvzyLShmVi9Ea4JS/xX5u3x/IsY0=
Subject key identifier:   E3:43:99:0E:38:50:1E:97:8D:DC:D0:91:09:7A:14:BC:29:62:D7:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E640F92499E5764BD4A1B9800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd3eaee-7ced-3dbc-a668-31eebbe4f7e3.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        184.30.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:92:49:9e:57:64:bd:4a:1b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=3f1ece8f-7b1b-41d2-957e-d12a1843c1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:8a:bf:18:af:ae:4a:f1:55:da:48:33:0c:
                    db:9b:f9:ee:87:10:7c:97:be:81:97:e9:ac:be:47:
                    16:41:ef:7d:38:21:11:13:cd:74:ea:a4:0a:2d:25:
                    0d:31:cf:86:e3:ad:1b:2d:5f:b7:ff:2b:7f:b6:f9:
                    16:6a:82:24:12:bc:72:9c:97:93:e0:86:b0:f4:dd:
                    bc:c3:df:69:77:f5:22:fa:22:e8:f9:0e:08:ee:28:
                    ec:1e:0f:43:7d:7f:a1:bf:d6:8a:35:f8:02:75:22:
                    4a:89:70:1c:5f:74:bb:80:aa:4c:c9:41:fe:04:36:
                    0c:2d:f0:ea:99:24:82:58:86:98:33:23:ea:85:f1:
                    27:e0:4f:af:8b:66:96:94:68:d3:75:c8:1c:3f:61:
                    fd:3d:d3:34:f6:82:8d:a8:fb:d7:5d:01:59:07:2e:
                    10:f7:8f:2c:f1:9f:57:5a:26:53:54:c2:69:17:48:
                    17:32:06:3e:6a:a6:70:0a:b4:37:e1:bd:2a:ac:92:
                    c2:a3:ed:2d:8b:88:ae:63:b3:c8:85:4d:67:3b:04:
                    b6:c1:31:7b:28:52:61:1d:ef:b5:28:97:8c:f0:5c:
                    65:e5:95:96:17:43:f1:af:d3:93:9f:ae:71:bc:94:
                    3f:b0:3c:5b:1c:7f:ec:96:2b:4d:d8:07:4d:46:19:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:43:99:0E:38:50:1E:97:8D:DC:D0:91:09:7A:14:BC:29:62:D7:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd3eaee-7ced-3dbc-a668-31eebbe4f7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.30.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d7:50:8c:b7:c4:4e:ee:cb:27:92:79:ed:e4:3f:43:bc:83:
         f2:7f:6b:37:24:35:69:e1:0d:84:eb:51:25:6e:86:3d:20:34:
         37:b7:c8:75:31:f0:4b:13:63:10:a9:88:c9:75:d5:1d:44:bf:
         98:ff:fa:f6:21:ef:2b:a1:59:e3:ab:fd:1a:75:ad:d6:2b:42:
         32:bf:28:a5:a3:03:89:e7:b2:c5:f4:32:3b:8d:20:03:44:56:
         d9:de:d9:1c:39:84:65:63:90:fd:66:0f:de:d1:8d:36:8d:49:
         cb:1e:c3:1a:78:f7:65:cb:15:ca:43:0a:e8:cc:d1:30:63:cf:
         fd:d1:36:72:ae:f8:6f:32:09:a1:8d:2d:6f:50:46:eb:53:4d:
         4c:62:a4:28:25:92:3d:58:77:7a:fe:af:c3:aa:de:c6:95:94:
         84:61:fb:34:13:50:81:fa:24:4c:3c:1d:e7:5c:ce:d6:2b:13:
         81:6a:cc:6c:ce:f7:24:bc:20:64:e5:53:ce:01:8b:19:d1:19:
         58:e7:22:6a:7f:f2:cf:10:f7:98:90:06:0d:78:40:42:ae:45:
         94:39:19:37:41:1b:04:69:85:89:58:f2:73:6a:89:5b:69:28:
         15:7b:1b:05:c8:26:2a:d7:6d:e9:f6:98:e0:c4:9d:6e:1b:26:
         9e:5c:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:45 2026 by rpki-client