Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdd9930-48ed-3dd5-957d-8f49d5b3cdd6.roa
File:                     7cdd9930-48ed-3dd5-957d-8f49d5b3cdd6.roa (raw, json)
Hash identifier:          eHSQUDSw6tDAnGNYlGgQY8/CN1jrPmGn5OuJIJhuAP0=
Subject key identifier:   7A:3A:6E:28:C5:AB:BC:4D:CE:98:D7:05:F2:51:4C:87:DC:7F:6E:3B
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8B92C2FB31B28B5F7080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdd9930-48ed-3dd5-957d-8f49d5b3cdd6.roa
Signing time:             Fri 06 Mar 2026 15:38:28 +0000
ROA not before:           Fri 06 Mar 2026 15:38:28 +0000
ROA not after:            Thu 04 Jun 2026 14:38:28 +0000
asID:                     81
IP address blocks:        152.26.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8b:92:c2:fb:31:b2:8b:5f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:28 2026 GMT
            Not After : Jun  4 14:38:28 2026 GMT
        Subject: CN=20e62f5d-95fb-45a4-86d2-5deb00964d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:0c:cf:19:13:11:d1:1a:b2:4e:e7:77:dc:
                    39:65:ff:43:bd:0a:38:86:03:a8:7d:45:d7:3d:e7:
                    d1:5a:f2:9f:39:e2:a9:d1:04:c8:46:52:29:a5:49:
                    d5:ae:73:c2:94:39:30:7e:5c:aa:ae:24:ee:be:95:
                    a1:e8:79:1f:14:70:fc:fb:a7:d6:29:6b:94:ee:c5:
                    a4:34:b1:a5:e0:18:b9:68:fb:36:24:82:14:0b:dd:
                    c6:43:6a:af:64:41:c7:76:8d:fe:51:dd:74:3a:87:
                    5b:3b:4a:e4:a5:a1:67:f8:d2:8a:19:9d:86:20:7e:
                    2e:63:ac:37:56:26:38:6f:6d:97:a7:5e:2a:ae:39:
                    86:63:d7:67:87:1c:e4:e1:79:1a:1a:f6:f8:05:9b:
                    13:7b:3b:72:e1:cd:9e:00:79:8d:e2:7b:1c:92:07:
                    12:44:d7:b5:0a:2b:40:81:87:fd:37:17:83:97:1c:
                    23:fa:cf:8c:29:88:80:10:4f:4c:f5:46:10:bd:8c:
                    66:33:1f:62:52:7f:8e:3b:a4:ea:84:af:b2:d9:05:
                    5f:58:68:61:7a:3c:92:50:bb:23:a1:fa:8f:54:44:
                    9b:bf:21:eb:8b:1b:46:78:d5:76:b7:6b:fd:e1:b1:
                    be:b6:30:0d:7a:de:47:0b:53:56:70:8e:e1:ac:7a:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:6E:28:C5:AB:BC:4D:CE:98:D7:05:F2:51:4C:87:DC:7F:6E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7cdd9930-48ed-3dd5-957d-8f49d5b3cdd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:f9:f2:98:be:5c:38:1a:07:72:17:01:b6:35:77:ef:da:
         12:6b:e6:8a:c3:d7:7b:90:cd:6e:d8:0a:b1:ee:19:ae:d8:7c:
         c4:f9:a2:ef:1f:14:c2:b3:00:9c:4e:64:c1:41:cc:5b:64:4e:
         f8:b3:9e:20:68:4e:6b:08:aa:52:c0:e3:79:18:b1:40:69:af:
         9d:63:cf:bf:83:ab:56:20:9d:53:1a:e7:6f:27:62:6b:85:c7:
         e2:aa:47:39:84:85:32:7c:18:1d:e8:e9:5b:5f:36:02:88:1d:
         35:93:45:ab:67:50:ab:f0:1d:83:5f:95:98:91:fe:5a:a5:57:
         f7:62:00:34:59:94:63:ce:b1:be:55:e6:a2:57:6d:7b:b8:98:
         51:fc:d1:be:b5:96:9b:2e:b3:1f:98:ab:11:46:58:ca:30:0c:
         9c:51:fb:e3:45:9d:9a:d2:e2:4b:4e:4a:20:0c:1d:21:eb:fb:
         8b:da:ea:a6:16:87:41:ed:73:7b:16:2d:bf:0f:4b:75:5a:47:
         1e:a0:f8:82:a2:99:6d:02:07:f4:6b:9f:30:4b:89:6d:02:5f:
         c0:d3:5b:b9:b2:fe:49:7a:a3:64:76:61:91:25:c7:11:cd:23:
         05:e9:5a:6c:f9:9f:6b:d4:e3:36:59:84:ee:27:65:3f:82:8a:
         ab:b8:22:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYuSwvsxsotfcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk
MjBlNjJmNWQtOTVmYi00NWE0LTg2ZDItNWRlYjAwOTY0ZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1IMzxkTEdEask7nd9w5Zf9DvQo4hgOofUXX
PefRWvKfOeKp0QTIRlIppUnVrnPClDkwflyqriTuvpWh6HkfFHD8+6fWKWuU7sWk
NLGl4Bi5aPs2JIIUC93GQ2qvZEHHdo3+Ud10OodbO0rkpaFn+NKKGZ2GIH4uY6w3
ViY4b22Xp14qrjmGY9dnhxzk4XkaGvb4BZsTezty4c2eAHmN4nsckgcSRNe1CitA
gYf9NxeDlxwj+s+MKYiAEE9M9UYQvYxmMx9iUn+OO6TqhK+y2QVfWGhhejySULsj
ofqPVESbvyHrixtGeNV2t2v94bG+tjANet5HC1NWcI7hrHoksQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHo6bijFq7xNzpjXBfJRTIfcf247MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2NkZDk5MzAtNDhlZC0z
ZGQ1LTk1N2QtOGY0OWQ1YjNjZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEG1+fKYvlw4GgdyFwG2NXfv2hJr5orD13uQzW7YCrHuGa7YfMT5ou8f
FMKzAJxOZMFBzFtkTvizniBoTmsIqlLA43kYsUBpr51jz7+Dq1YgnVMa528nYmuF
x+KqRzmEhTJ8GB3o6VtfNgKIHTWTRatnUKvwHYNflZiR/lqlV/diADRZlGPOsb5V
5qJXbXu4mFH80b61lpsusx+YqxFGWMowDJxR++NFnZrS4ktOSiAMHSHr+4va6qYW
h0Htc3sWLb8PS3VaRx6g+IKimW0CB/RrnzBLiW0CX8DTW7my/kl6o2R2YZElxxHN
IwXpWmz5n2vU4zZZhO4nZT+Ciqu4Ioc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:23 2026 by rpki-client