Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/658ea06d-3a7a-3ff5-9362-3df90ce20c75.roa
File:                     658ea06d-3a7a-3ff5-9362-3df90ce20c75.roa (raw, json)
Hash identifier:          2TT/RNW1DApGuWm4iPcWniEHxU7AXggRwN0OEea8rsU=
Subject key identifier:   BA:47:A9:B0:55:4D:70:98:D3:87:F0:A2:6E:1D:21:00:68:33:AC:C5
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F4AD7DC3FEDEEDCC56C281820
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/658ea06d-3a7a-3ff5-9362-3df90ce20c75.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     31898
IP address blocks:        152.68.0.0/24 maxlen: 24
                          152.68.1.0/24 maxlen: 24
                          152.68.2.0/24 maxlen: 24
                          152.68.3.0/24 maxlen: 24
                          152.68.4.0/24 maxlen: 24
                          152.68.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:dc:3f:ed:ee:dc:c5:6c:28:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=f6150bbe-f523-48eb-9793-384e49d6abc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:da:db:b2:d7:e1:3a:d0:09:4f:1f:a9:2b:
                    c2:d8:f5:b1:51:8f:5b:77:14:71:f9:d8:c5:16:4a:
                    ae:4b:91:57:80:54:0d:5e:6a:8d:57:0a:1f:6e:e8:
                    f5:c4:6b:c1:cf:70:81:0b:95:85:2b:41:9d:75:28:
                    59:34:79:a7:da:a2:2a:15:ea:fb:c9:fa:00:e3:b3:
                    e7:1c:74:0e:88:2e:cc:f2:ad:85:4b:48:a3:21:09:
                    30:5f:b2:be:a7:89:ea:ae:b5:57:08:fb:e2:c9:98:
                    e3:89:4c:a2:dc:ae:f2:34:a9:e1:d7:b9:3a:ec:3c:
                    f7:6f:58:a2:11:5d:3f:7b:1c:39:a9:dc:bc:61:c1:
                    8a:53:f6:58:4b:b4:bc:ce:39:2b:61:c4:06:58:fe:
                    1c:8c:bf:95:b0:0f:83:14:08:72:98:49:87:3d:66:
                    6b:8d:2f:ad:56:80:e3:1b:33:4b:96:d0:64:6c:09:
                    12:c3:cb:fb:09:65:6b:7a:4c:f7:98:ec:8f:e6:d3:
                    c6:17:08:c3:4b:78:4f:10:e8:88:cf:6e:c1:46:50:
                    af:d5:a9:16:c5:e6:e3:c7:f8:64:61:dd:6b:a3:73:
                    6b:6a:c0:45:c7:be:de:cd:98:99:cc:de:bf:65:11:
                    b9:18:53:be:0e:63:6e:25:0c:c5:61:f0:15:ca:b2:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:A9:B0:55:4D:70:98:D3:87:F0:A2:6E:1D:21:00:68:33:AC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/658ea06d-3a7a-3ff5-9362-3df90ce20c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.68.0.0-152.68.5.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:34:2d:5f:65:da:3c:82:fa:1f:1b:cd:4e:4a:e7:eb:10:07:
         95:37:c9:07:da:c0:eb:f7:48:18:e0:89:d2:7f:29:86:5f:b7:
         bf:24:cb:b4:be:ca:d4:5f:67:8b:a7:6a:cc:fd:82:7c:21:d7:
         e5:1c:94:ce:66:2e:db:76:f5:42:34:1a:cb:68:ec:dd:17:4d:
         43:e4:b1:73:c8:36:65:ce:83:d6:4a:f5:ac:94:c0:b3:79:a0:
         14:4f:ab:90:89:98:e9:ed:34:8a:fd:76:20:a1:64:6d:3e:c6:
         a6:bb:3d:59:66:b6:f7:2f:4d:22:85:6f:da:23:a2:9d:ca:f4:
         ee:32:4a:99:14:1f:04:f7:59:76:17:66:20:6c:0d:ec:48:c3:
         1a:e3:55:7a:75:5d:1c:0f:5a:c8:c4:d2:94:20:0b:62:88:dc:
         06:05:a5:4a:d1:fb:ed:1e:7f:1a:a5:d1:be:31:ec:b2:db:04:
         68:b4:c7:84:c4:37:db:f6:a4:b8:fe:0f:de:55:7d:32:bd:a7:
         59:ed:7e:05:98:3f:35:ac:dc:9d:f7:7d:ef:4d:c1:94:ac:04:
         5c:73:d1:cb:d0:1c:66:45:06:cf:6d:e5:a3:5e:bd:d7:20:cd:
         6d:5f:70:77:e3:41:72:df:41:27:d3:b0:d2:8a:6c:70:2e:33:
         ce:13:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:58:38 2026 by rpki-client