Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
File:                     5148236d-6dcf-3d81-bb39-4975817cb970.roa (raw, json)
Hash identifier:          SJ8FGLWQE05zOmBC54nszk1vFNtGNPV7w3J7kLM7t5Q=
Subject key identifier:   1D:14:BE:1D:B0:69:A7:33:4A:7B:E1:19:6D:DC:49:06:61:BC:91:B6
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F4328584E7A64D5EA19F4C1D784519480
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     9025
IP address blocks:        153.46.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d5:ea:19:f4:c1:d7:84:51:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=e3f63d92-8057-40b7-830e-4f328d0733d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:66:94:b7:6d:fb:09:79:d8:43:47:99:c2:
                    90:69:83:b0:8d:d4:d9:69:be:e0:90:30:3a:64:17:
                    83:17:75:f5:03:7e:ba:6f:b4:24:7e:1d:ac:9c:96:
                    ed:ca:be:6b:0e:f2:8b:37:99:48:f3:c2:26:02:f5:
                    ac:97:2a:dd:0f:98:80:61:1c:bc:26:42:8d:d0:48:
                    be:bc:dd:0d:1d:c3:2a:44:f3:40:16:f6:b1:d5:f9:
                    4b:a2:db:09:e6:45:d2:ef:e3:88:d6:83:35:44:bb:
                    7c:d7:23:04:55:2d:52:cc:ef:96:11:56:ba:e9:8b:
                    25:35:f2:c9:66:b7:6d:93:b6:18:4e:34:68:fe:6e:
                    d5:97:74:96:fd:b3:13:5e:47:c8:a0:3a:c8:03:56:
                    b6:8d:fa:66:fa:35:4a:5d:43:4b:47:69:57:d8:27:
                    61:47:fa:c9:08:ed:c8:e4:c2:0b:0e:81:6a:af:d2:
                    9a:b1:eb:e8:1d:e5:88:a7:d2:e3:22:b4:3e:b7:e1:
                    73:66:e4:ac:bc:4d:2e:9d:e2:98:a4:03:14:c3:85:
                    ed:fd:cb:95:0b:20:d5:3f:cc:d0:97:60:81:6f:91:
                    ef:cb:a1:c4:0f:f7:55:39:5c:cf:29:56:0a:2d:61:
                    5b:3e:a9:52:40:56:b8:e1:5d:c2:e0:0e:cc:da:af:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:BE:1D:B0:69:A7:33:4A:7B:E1:19:6D:DC:49:06:61:BC:91:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:18:2a:4a:c8:30:b2:ba:78:9f:90:2d:22:3d:70:c6:f1:9b:
         05:e2:1f:45:e0:ed:34:ba:19:01:16:5d:6b:39:1e:18:2d:19:
         09:b3:8d:05:8c:78:a0:46:b8:6e:7f:b9:4d:3a:70:71:1a:ec:
         f1:76:ac:a3:95:91:d9:a9:d3:d7:84:0c:ed:ac:6a:91:06:ac:
         67:98:26:07:7c:4d:4f:d8:7b:ad:f3:8f:e9:03:4c:e2:93:66:
         f3:b3:a4:2e:bc:9f:73:94:c7:a0:bc:c5:17:52:01:10:1d:87:
         47:76:52:8e:6e:b0:a8:a1:a0:b4:e8:79:2e:90:b6:64:7f:17:
         04:a1:09:24:f1:d7:cc:da:98:3d:66:82:84:e1:54:38:88:b5:
         4e:b1:d8:97:d9:8b:f6:6e:65:24:5b:c7:df:fc:0f:20:61:db:
         3d:b0:07:ca:a0:5b:4b:93:fb:7a:1f:87:ca:5f:b4:b8:a1:79:
         e5:ad:64:56:dd:82:02:7d:6e:d0:17:73:65:86:4b:47:14:87:
         31:0a:c5:78:a9:f6:e6:de:59:ac:e7:59:20:ee:66:f7:ff:d4:
         c1:b8:7e:11:19:97:86:fa:09:19:b0:14:c5:89:e3:a8:97:27:
         b6:e8:fd:80:77:44:db:38:d4:20:6f:fd:aa:8b:8c:a6:44:34:
         da:21:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:04 2026 by rpki-client