Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
File:                     152d19fc-a4dd-3003-8922-b7d5efb068f1.roa (raw, json)
Hash identifier:          AGn6QbxZ/RN5byOOpNsBEo/5SeYQ3tzqQpqPQK2LfTs=
Subject key identifier:   0A:69:D4:0C:C4:3E:C4:0F:3F:3D:F1:B9:D9:6C:61:35:84:BF:28:58
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584D9E50146C88EA146D5E7F47C0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     21949
IP address blocks:        206.223.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:14:6c:88:ea:14:6d:5e:7f:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=a2f3aa69-ae44-46d7-a35c-67c32e9a571a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:b7:2f:6a:c8:7f:d6:d9:25:fc:c0:97:d9:
                    1e:29:6d:5a:12:cd:16:d5:d0:73:fc:6f:ff:5c:1c:
                    82:b6:cd:3d:83:c0:0c:b7:12:60:9b:ad:44:91:e3:
                    e6:03:fe:b4:1d:82:13:47:19:24:9e:e7:21:7b:75:
                    09:9e:42:e7:38:4c:bd:89:57:31:2d:35:86:02:5c:
                    46:91:f3:a4:49:fc:a1:75:00:26:35:4c:54:27:ab:
                    e0:46:88:d3:c0:04:7f:7d:40:b3:06:18:9d:ea:73:
                    89:16:cd:80:54:96:5a:d9:3b:bd:0c:21:9e:92:ed:
                    16:13:ea:cb:5d:0d:03:64:b7:a4:b0:ed:ff:41:20:
                    ad:6d:93:28:1d:70:43:3c:83:ff:b3:ee:ce:4a:cd:
                    14:8d:9f:1a:1d:31:8b:25:36:34:4a:51:f0:7b:36:
                    19:e9:58:f0:72:65:40:c7:ca:d7:bc:21:09:e0:b7:
                    ef:d9:46:eb:b6:f5:2c:bc:f5:76:2e:00:45:76:c0:
                    e2:a8:a3:97:ea:09:54:a5:95:0f:55:8a:13:a7:10:
                    57:47:42:ee:30:6f:c2:67:ae:7c:32:9e:ee:69:23:
                    da:ae:c5:16:28:de:36:93:40:9d:df:aa:88:00:c3:
                    57:a9:2b:7f:e4:43:f8:d9:ae:68:18:41:26:0e:b4:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:69:D4:0C:C4:3E:C4:0F:3F:3D:F1:B9:D9:6C:61:35:84:BF:28:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:31:ae:55:06:a7:ae:a8:62:d6:29:53:52:62:7f:e0:96:dc:
         a1:0c:b7:46:8d:5b:67:9d:52:4d:6a:25:38:77:9d:cb:1a:39:
         77:57:72:f9:90:fb:44:80:ff:4e:3a:d8:fb:20:5b:a6:2e:67:
         93:6b:6f:10:c1:9e:0e:de:6d:5b:7e:ae:b9:bc:10:57:d5:c8:
         a1:32:40:36:68:2c:4a:f9:83:22:48:c9:05:e7:3a:0a:b5:19:
         fe:a4:97:24:bf:d9:75:92:ec:9a:cd:0b:25:4d:a4:60:05:7a:
         59:8b:92:cf:6a:c9:e4:c4:4c:65:ad:3a:a2:ce:51:7d:d4:4a:
         aa:4f:88:f8:dc:43:d4:92:a8:1d:96:4b:a6:44:d2:40:cf:fa:
         e7:4c:7d:df:7a:ae:e5:4e:b6:a5:d5:a6:f9:41:a2:23:31:dd:
         fe:74:58:e2:23:1b:b2:77:e9:a6:60:33:97:22:6a:bb:e0:56:
         7f:d6:16:ae:f6:05:50:33:c1:80:08:db:4f:50:ad:20:fe:64:
         82:b6:66:c6:8f:01:e7:8b:34:82:ee:c8:ba:ea:7d:54:9e:c0:
         49:7b:02:5e:17:f0:fa:ba:42:d8:a7:ad:ba:31:d5:7c:9b:7d:
         63:32:cb:52:6e:5a:55:43:91:95:53:3d:37:60:5d:60:5f:7d:
         e1:90:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:41 2026 by rpki-client