Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa
File:                     82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa (raw, json)
Hash identifier:          ViQUhlYUuGsdCp+tsnunk21HmOaMnuOsG5UnG9BM7KY=
Subject key identifier:   D5:D9:58:94:3F:D5:78:15:99:92:A2:E6:0F:AC:A8:F7:4C:1E:35:16
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8C8B055FAF8BF1189280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa
Signing time:             Fri 06 Mar 2026 15:38:28 +0000
ROA not before:           Fri 06 Mar 2026 15:38:28 +0000
ROA not after:            Thu 04 Jun 2026 14:38:28 +0000
asID:                     53785
IP address blocks:        152.40.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8c:8b:05:5f:af:8b:f1:18:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:28 2026 GMT
            Not After : Jun  4 14:38:28 2026 GMT
        Subject: CN=e7c396c6-02da-479b-a70a-354233a744a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:d3:ed:8b:ff:b2:db:03:bb:6c:b7:b5:dd:
                    af:a9:fa:80:24:9a:f1:1d:b4:ee:af:a7:8c:95:49:
                    54:4c:bf:a0:48:b5:f1:5a:4e:d6:bc:ad:71:66:5e:
                    ee:e3:a7:f1:a7:3d:d6:08:69:d5:87:55:3d:30:13:
                    74:f6:88:af:26:c9:50:69:76:7b:df:27:59:1d:8d:
                    90:be:aa:ec:39:2b:13:b4:c2:9e:ad:9c:c6:a8:67:
                    4b:51:4e:d4:25:51:a1:14:51:a9:c3:23:f0:56:c1:
                    75:ce:fb:31:73:d8:e3:2f:c2:04:27:14:31:16:df:
                    6a:d5:17:9c:20:ee:ea:68:d9:d9:c1:6d:fe:89:b4:
                    38:81:44:68:de:6b:b5:59:c3:7e:bf:e0:b3:dc:59:
                    94:61:13:6e:66:3b:fd:ef:a5:98:b0:3c:03:d5:ca:
                    4a:dc:d8:4f:21:72:6a:c6:80:07:81:b1:ee:61:2b:
                    d8:a0:ea:b2:0b:35:d6:4f:5d:e2:a4:74:6e:f7:cf:
                    ff:be:b7:37:28:18:b6:4e:6a:18:12:9d:74:e5:a4:
                    e2:e8:ce:10:24:36:10:33:07:c8:9f:bd:f0:3b:83:
                    b2:be:2e:0a:06:f2:96:98:17:22:04:14:b2:7b:13:
                    81:b7:5d:d7:45:ee:3d:dc:6c:33:1c:d6:b1:b1:14:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:58:94:3F:D5:78:15:99:92:A2:E6:0F:AC:A8:F7:4C:1E:35:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/82b619a8-206a-3ddf-8014-5d59f2e2eafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.40.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:bf:79:fa:12:71:00:d0:31:8e:9a:36:f1:b1:79:b7:20:
         1e:09:34:f0:ad:b3:38:6e:e6:f4:ce:8b:0b:9d:0b:65:5a:6c:
         51:cb:e8:84:ee:bd:de:10:4d:45:45:ed:d4:51:ac:93:70:32:
         9d:3f:11:f3:44:f6:f8:c5:fc:d0:08:7a:b5:96:db:9d:a2:0c:
         06:38:79:c4:a4:26:ca:03:27:6d:06:a7:d1:c3:77:b4:50:f6:
         18:84:73:a4:7d:3b:f2:35:a3:7b:39:ab:2e:54:6a:43:65:eb:
         88:e6:c8:51:24:7f:ec:f8:93:c9:dd:b5:f0:90:6b:de:99:48:
         46:33:0e:d0:57:eb:09:53:f4:30:d1:e1:dc:a7:3e:36:97:38:
         3c:0b:69:87:2e:e7:3b:61:2a:7d:9d:35:bc:d9:5d:19:e1:a1:
         f3:4f:87:ef:57:dc:5a:52:28:1e:5e:95:f4:06:ee:a1:4a:5a:
         4f:7b:58:ae:d6:88:93:32:1c:a1:f8:1a:6d:a5:1d:e5:25:98:
         e7:83:14:b4:8b:a5:68:6e:e9:be:dd:95:55:73:7e:37:6c:65:
         91:20:c4:b7:eb:d9:b4:49:8d:85:2c:6b:18:56:b1:66:4d:bb:
         bf:9c:cc:2a:2e:d3:68:81:c0:e9:97:55:6f:77:58:6d:24:43:
         f3:01:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:47:10 2026 by rpki-client