Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa
File:                     ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa (raw, json)
Hash identifier:          LANqUCYEi8l2g6NenzC2wjg6C3F7nSVBezenVynt8TQ=
Subject key identifier:   8D:CC:29:C3:39:3D:FE:E1:9E:EE:62:2A:CF:45:05:32:74:AC:FE:AA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EA786EA8320B6BB437D068680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20115
IP address blocks:        150.224.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ea:83:20:b6:bb:43:7d:06:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db23c151-1da8-497f-a2b9-fad53a9af620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:26:0d:58:4b:4a:17:59:b8:4e:48:36:24:
                    97:83:cc:58:99:f4:66:65:18:20:66:1d:06:7a:f1:
                    2a:17:75:0b:f8:1b:bf:87:aa:02:3b:f8:c5:ce:fc:
                    1c:ae:89:7b:6f:15:9a:87:4e:b3:00:e4:9e:71:67:
                    12:b5:f8:16:9b:22:a5:99:3f:40:7b:0d:e4:af:e7:
                    f6:70:c0:a6:fd:81:40:c1:e2:fa:a8:e9:f2:b9:d5:
                    c6:79:60:2b:28:70:6e:70:ff:8f:0f:32:67:0f:e7:
                    02:18:4c:57:32:96:22:11:f8:d3:c9:24:6e:d1:02:
                    0e:4e:56:1e:18:6f:9c:76:92:c2:3a:ab:a0:29:ce:
                    15:17:90:6a:0b:8d:b0:48:e4:48:1f:33:dd:2f:3b:
                    34:19:b3:bb:de:85:4b:96:2f:47:4c:3b:a8:52:04:
                    8d:a1:9d:84:9f:fb:31:7f:c0:09:9a:42:b1:4b:a4:
                    cf:b7:8d:93:b7:17:45:a7:c0:72:5e:54:52:07:fd:
                    e4:77:8c:e0:ef:da:51:a9:29:2b:c4:39:b3:34:ad:
                    8c:5e:8f:2b:be:fd:9a:fd:82:2f:70:ca:0f:6e:ea:
                    08:8a:26:64:74:eb:2f:5d:6c:10:af:be:23:53:32:
                    f3:32:05:d7:bd:e8:1c:fc:87:d0:23:60:fa:1e:ef:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:29:C3:39:3D:FE:E1:9E:EE:62:2A:CF:45:05:32:74:AC:FE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ca98a600-1558-3e52-91ad-64d2ed38d9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:c5:2e:48:35:25:93:3b:e9:ac:d7:7c:f0:3d:39:92:29:
         97:fd:e1:bf:0b:9d:88:9e:a0:1a:e4:7a:6f:17:67:c9:36:42:
         2a:0f:63:15:d8:b2:9c:5c:c6:9c:bc:bd:db:11:03:df:e0:8a:
         57:fb:e9:61:f0:bf:59:46:c7:1c:79:cc:1b:8f:33:e9:61:bb:
         85:7d:2e:7e:d7:3f:1f:78:21:47:37:cb:cb:ef:77:44:c8:5f:
         ba:35:51:1f:44:28:8f:68:3b:d2:a9:59:62:2b:71:ae:d5:f2:
         22:c2:9f:f9:29:b9:d6:dd:7b:d2:dc:27:ac:f8:3e:cc:74:d6:
         93:6d:3c:6a:58:a8:e6:7d:c9:df:c4:98:b0:e5:cb:56:f6:ca:
         f4:e5:53:ac:f7:ed:90:6a:75:20:dc:46:96:34:da:68:0b:0e:
         a7:f9:60:be:7e:35:b1:9f:33:6d:13:22:c5:64:34:c3:a8:a7:
         95:88:60:c4:13:b4:15:c3:d1:9e:2e:6a:37:de:e7:dd:26:00:
         cb:3d:b9:a9:dd:40:aa:6f:aa:8b:59:20:a8:8e:4b:d8:d0:c0:
         f3:3a:c1:58:84:4f:8b:16:fb:73:58:9c:3f:bb:18:0f:25:85:
         0e:de:30:76:54:3f:88:90:1a:d5:3f:50:aa:36:d3:f2:aa:f1:
         ac:8b:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:43 2026 by rpki-client