Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
File:                     c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa (raw, json)
Hash identifier:          G3YdnHTW7yt2KJOYDoFZvRsHB8sAc3Af0vkLDSW/+3A=
Subject key identifier:   6A:D9:3A:65:4F:7A:FC:8C:68:45:42:11:B4:06:5E:C5:E4:26:CE:F2
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584DCAFB078A84E328B0B6FBA720
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     25697
IP address blocks:        152.44.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:07:8a:84:e3:28:b0:b6:fb:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=21162e4f-e6d9-473c-9276-cbf06542a43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:28:12:ca:fa:79:a6:8f:46:57:a4:31:5f:
                    32:dc:23:d6:d3:d9:a3:c9:b2:2a:ef:c0:ec:30:32:
                    49:d4:10:29:14:1a:8b:a5:09:50:9b:55:b4:e2:f2:
                    2b:b5:c0:13:3f:ca:4f:34:14:9e:2c:4d:ca:da:0f:
                    e0:9f:0a:b8:c1:80:03:a1:59:42:6c:eb:b2:c2:4c:
                    54:f9:7d:70:82:03:bf:46:d6:db:8c:61:32:82:94:
                    90:25:98:13:c7:12:4e:fe:f7:a6:ae:57:95:71:cb:
                    d1:b1:4e:aa:af:c7:3f:77:9c:ca:53:8a:92:dd:dc:
                    bf:ca:a1:44:25:3d:c5:ab:8f:b3:fa:0d:ea:99:1a:
                    0b:40:fb:ee:a6:38:b7:9b:14:c7:a5:80:3c:e8:2d:
                    50:a9:79:f4:3d:77:16:76:5d:8a:c9:7c:81:bd:0e:
                    cd:30:f7:e2:b5:f3:4b:ce:7e:05:b4:75:84:a6:c3:
                    8c:8b:0f:7a:2a:10:63:3d:59:71:34:b6:eb:2a:bb:
                    ba:30:97:c6:e9:d4:1b:0d:03:99:00:b0:77:3f:e7:
                    0d:47:11:49:68:88:52:10:71:c9:8a:39:11:f0:7f:
                    a8:a2:51:67:04:17:ca:dc:da:14:c3:6d:81:ec:74:
                    7f:a5:ea:62:cc:4c:33:0c:05:3f:8d:0f:bc:8e:81:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:3A:65:4F:7A:FC:8C:68:45:42:11:B4:06:5E:C5:E4:26:CE:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/c1beb45d-0a3d-33f9-911f-d29bafacb3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:19:4e:c7:82:48:d4:5d:35:a0:35:d9:3e:70:5f:61:8c:73:
         1a:22:28:8a:ec:d8:76:f5:92:7a:47:c9:08:f4:9d:b6:fd:0c:
         c5:42:bf:01:7e:be:21:38:38:5b:d9:e4:37:d4:c1:a4:2a:3b:
         a8:35:b5:e5:4c:eb:df:45:4d:6b:9b:f1:e3:3b:0e:f7:f2:c0:
         85:96:06:00:9a:a4:e5:02:3a:fc:4b:ba:30:0d:5a:02:e9:68:
         66:84:24:8e:9f:a9:e8:1a:ea:b9:29:12:60:d4:9e:b1:f2:53:
         cf:f6:fb:ae:43:a7:bd:11:c9:25:c5:87:97:a3:80:2d:1a:71:
         94:85:64:13:e6:00:b4:ed:fe:9e:43:f4:82:0c:fc:4a:7b:34:
         31:4a:93:9e:f7:ca:3a:d8:5a:4f:4c:9b:e4:a0:3d:f0:42:91:
         26:d5:ef:6f:12:f4:f1:50:4a:2d:a2:c8:3b:cf:dc:cb:c5:3c:
         6d:61:0d:cd:f1:88:14:9f:0b:d8:53:2e:44:6f:98:61:94:60:
         05:82:4d:a1:10:03:53:6e:e1:d4:c8:0d:9e:80:1f:e1:c9:93:
         68:a3:f4:c2:dc:7a:d9:1f:82:c0:4e:d1:3c:b5:31:ff:92:4c:
         f9:f9:67:05:8f:10:d1:d8:4d:28:33:41:7a:66:44:45:c5:22:
         03:6b:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:15 2026 by rpki-client