Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa
File:                     1c7fd5e1-f386-333a-b550-2f8973624be2.roa (raw, json)
Hash identifier:          6lCSiMrQLw1MhS2zTgX36TWfkhKVT0/7R/tZX4XnZ8Y=
Subject key identifier:   01:35:3F:A3:BB:77:DB:F4:3B:90:48:6C:27:53:CC:21:CB:E0:BF:1E
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584E7A64D61EADAFF5B29CB88F40
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     55562
IP address blocks:        153.46.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d6:1e:ad:af:f5:b2:9c:b8:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=508e7aa5-51cc-4929-ad4c-5598958d6e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:6c:a7:fb:c9:68:6b:32:17:6e:c3:ba:67:
                    8c:f1:81:57:bb:c3:cb:cd:a3:27:0b:45:c9:80:1c:
                    bb:c6:c0:8d:84:e2:3c:c3:89:97:f0:b3:6e:0f:4a:
                    0b:55:01:55:70:c5:28:7b:75:d6:c4:cb:3b:d5:8c:
                    cc:9e:f8:48:30:40:76:22:4c:6a:b0:99:71:2d:9a:
                    8c:4b:01:24:75:43:23:52:54:f6:4c:1a:23:5f:d5:
                    2c:4e:75:fd:5a:57:a1:08:37:ee:74:31:65:b1:a8:
                    8f:04:8b:c2:a5:bb:0f:ca:4a:5c:1e:0f:a4:cd:74:
                    ac:3e:76:ef:12:24:3d:4a:26:88:32:20:0b:99:a3:
                    cb:07:cf:01:46:5e:5e:90:a7:48:7c:10:77:91:81:
                    8e:33:fc:87:3e:1c:e9:2b:ea:bc:08:af:f4:93:59:
                    94:06:8e:4b:00:0b:6e:1f:c8:77:38:12:4e:d4:47:
                    7b:1c:49:fa:19:6d:cf:6c:bb:8d:d1:be:b7:27:da:
                    b4:0b:2c:7d:13:d1:17:32:e4:47:9e:ae:18:6c:ac:
                    c6:31:18:a5:33:25:ef:a6:81:2b:b8:bb:14:6a:09:
                    05:8e:6a:df:f3:6a:38:14:b5:aa:fd:30:4a:a3:c7:
                    b9:9e:27:34:d5:4b:cd:57:2c:27:94:7b:dc:ad:e2:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:3F:A3:BB:77:DB:F4:3B:90:48:6C:27:53:CC:21:CB:E0:BF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:45:79:c9:ce:e3:bf:71:96:d2:4a:1a:6b:6c:64:15:e9:
         24:2d:ea:1e:21:e7:ac:ac:f4:63:c0:c8:83:8d:8e:ba:29:a5:
         fc:dd:89:68:27:18:d6:d3:90:25:1e:be:ff:be:b4:d9:9f:85:
         e7:53:9c:3d:3d:56:1d:d8:93:7d:11:1f:1e:cf:47:98:64:27:
         f4:10:02:23:ef:a1:23:2d:be:a4:b6:1e:22:b8:3d:03:67:6a:
         e4:ed:78:92:ee:65:3c:9e:14:ca:06:c1:e8:f8:7b:e6:aa:b5:
         c0:9c:15:d9:9a:ef:74:78:cc:76:9f:fc:6e:1b:29:bb:e3:59:
         d9:0e:4f:a0:9b:d3:92:60:a2:59:cd:ec:64:64:62:7d:9e:26:
         f6:f2:74:42:de:f4:da:67:14:ed:88:06:d9:97:fb:90:64:c3:
         36:72:67:4a:f1:2d:1a:aa:1b:20:3e:66:2e:36:e8:0b:ee:56:
         53:d8:aa:f1:68:a8:fd:01:63:74:63:e8:eb:3b:c1:2b:e3:12:
         be:53:a1:29:cf:8f:e1:61:da:b8:ea:ab:10:7e:d8:97:70:b9:
         c5:66:c4:f2:02:a3:b0:3f:90:d6:27:f3:bb:34:95:3a:f5:eb:
         eb:53:7a:16:d1:e9:ea:89:e0:1f:27:5f:9f:de:14:85:fb:81:
         93:f6:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:41 2026 by rpki-client