Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/315ed042-dc6b-3c7e-8582-8c079a6caa53.roa
File:                     315ed042-dc6b-3c7e-8582-8c079a6caa53.roa (raw, json)
Hash identifier:          XSa//zSzLp4nAa0DgNGZWgZTyjw9g46PnWPJWPqWXXA=
Subject key identifier:   34:5A:00:0D:97:CD:3A:8F:A5:D6:FB:68:47:E6:CF:1A:16:59:12:B6
Certificate issuer:       /CN=13d1e2d5-5089-4514-80fb-652631b3cfab
Certificate serial:       010D0C9F4328584D310C35CABBEC915A467C3358
Authority key identifier: 03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/315ed042-dc6b-3c7e-8582-8c079a6caa53.roa
Signing time:             Mon 16 Mar 2026 21:40:47 +0000
ROA not before:           Mon 16 Mar 2026 21:40:47 +0000
ROA not after:            Sun 14 Jun 2026 21:40:47 +0000
asID:                     62917
IP address blocks:        198.13.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:0c:35:ca:bb:ec:91:5a:46:7c:33:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d1e2d5-5089-4514-80fb-652631b3cfab
        Validity
            Not Before: Mar 16 21:40:47 2026 GMT
            Not After : Jun 14 21:40:47 2026 GMT
        Subject: CN=ee9588c2-9c29-4281-928a-06d5e11e5cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:95:0b:f2:8d:c6:a9:7f:91:81:d0:ac:68:3c:
                    0d:32:73:ac:78:a2:5e:8e:8b:6e:65:9a:52:53:ed:
                    df:d5:32:f3:60:d5:ed:d4:ee:ee:7d:04:78:0b:03:
                    a9:96:38:7e:57:46:61:d5:5a:45:bb:5e:ba:ca:3e:
                    57:41:16:8a:16:a9:86:bc:d3:f5:da:d5:83:ed:7b:
                    3f:bf:da:2b:7b:79:af:15:7d:d2:3d:4f:4f:11:98:
                    5f:c7:b4:b3:e7:59:cf:b3:8b:f2:ae:1a:00:19:97:
                    d5:75:d9:01:49:c4:c4:e6:75:f7:66:a6:59:fe:e8:
                    74:17:7f:86:55:90:a2:1a:43:6d:fa:e7:d7:00:7a:
                    fc:d0:62:cc:b8:95:3b:1d:02:77:d7:01:83:a9:8c:
                    bd:eb:3d:4d:3f:8e:c0:64:be:4b:31:fb:b2:2d:a9:
                    1c:d4:d8:12:1b:7b:3e:b7:59:54:32:c4:48:1a:87:
                    c0:e0:6b:eb:97:3b:63:4a:25:14:ef:31:c6:31:0f:
                    c4:05:71:57:a4:6d:d3:04:d2:8c:6d:56:0f:09:b7:
                    5f:01:e1:69:2e:24:a5:1a:1e:6e:26:24:ec:bc:9c:
                    f5:c0:2f:92:55:91:8d:31:1a:50:31:e5:77:6a:cf:
                    dd:7b:d4:bc:be:e5:02:37:6a:f9:ff:f1:5d:b1:77:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:00:0D:97:CD:3A:8F:A5:D6:FB:68:47:E6:CF:1A:16:59:12:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/315ed042-dc6b-3c7e-8582-8c079a6caa53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab/13d1e2d5-5089-4514-80fb-652631b3cfab.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:40:F7:C9:7E:C0:C8:FC:BB:2E:B0:A6:53:6F:04:20:D6:E1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/13d1e2d5-5089-4514-80fb-652631b3cfab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0a:0b:ee:59:df:0b:6d:58:57:df:83:7b:47:3a:a2:2c:22:
         8f:33:3d:c8:fa:33:ba:f5:a1:71:bb:c4:86:ac:08:40:4d:7d:
         3c:95:36:ce:3a:21:57:64:74:09:d4:6d:89:72:3a:89:cc:93:
         39:57:38:71:6e:f8:e9:4a:7c:8e:d0:64:62:87:12:dd:1b:08:
         9d:fe:28:c4:1c:a7:7c:fc:b7:9c:f0:98:2a:3f:fb:15:fa:7b:
         a6:3e:ad:30:7e:5c:89:24:14:0f:3c:8c:36:15:b7:66:2d:70:
         f1:86:9f:21:60:e9:34:81:42:d0:8b:f3:60:e7:7e:1f:01:2c:
         77:da:69:ce:e6:74:d2:b2:16:16:e0:de:c7:f2:97:fd:2a:05:
         81:7b:72:13:c0:26:e7:6d:fd:ce:a4:51:84:67:28:37:1c:31:
         15:fe:19:93:83:a3:8e:22:a2:d7:4d:fb:ba:32:bb:5b:0c:eb:
         cc:6e:e2:7a:34:aa:e7:a1:77:c0:68:53:e8:ce:1d:e4:f5:37:
         fd:2e:da:77:5d:19:5a:ad:2b:45:92:36:31:64:f8:2b:32:78:
         d6:e4:d4:69:a2:fb:fb:dc:08:cc:fb:1b:b0:da:fe:d8:35:0e:
         4a:b4:58:3f:65:db:45:62:e1:f1:c8:02:a6:1e:b3:c8:8d:c5:
         28:37:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:14 2026 by rpki-client