Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a2f135c8-d0e9-307a-8b7d-36056eb3dad7.roa
File:                     a2f135c8-d0e9-307a-8b7d-36056eb3dad7.roa (raw, json)
Hash identifier:          SBjnItMhmLxqb4qJXQOlBy9kKgGLsoE+co/TP9+rO7w=
Subject key identifier:   2C:0D:A5:93:02:AC:D2:EE:91:C8:D8:AA:E0:C8:9B:29:44:D9:1D:35
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D8E17DE00A30257F01700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a2f135c8-d0e9-307a-8b7d-36056eb3dad7.roa
Signing time:             Fri 06 Mar 2026 15:38:29 +0000
ROA not before:           Fri 06 Mar 2026 15:38:29 +0000
ROA not after:            Thu 04 Jun 2026 14:38:29 +0000
asID:                     81
IP address blocks:        152.46.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:8e:17:de:00:a3:02:57:f0:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:29 2026 GMT
            Not After : Jun  4 14:38:29 2026 GMT
        Subject: CN=7dc396eb-e90e-407b-ae27-5c54fab113eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:4b:92:53:85:66:0c:db:bc:b5:07:b3:30:
                    81:06:8c:db:78:b7:5e:fd:ad:4d:f2:23:85:07:c1:
                    37:b7:1c:38:72:34:08:d6:ad:62:07:45:cf:eb:66:
                    62:8a:87:00:7d:03:80:ec:86:60:fd:75:9d:e9:ac:
                    86:46:da:81:3d:dd:95:29:2b:3a:8d:34:ca:8b:49:
                    b9:80:16:e0:81:a5:37:54:16:f3:84:3d:f0:8e:c9:
                    eb:d0:de:34:a1:65:16:c4:73:e2:1f:7d:32:9a:d6:
                    6d:fe:72:b1:69:3e:25:e3:97:41:61:90:b0:10:4b:
                    4c:ff:52:fc:8d:87:2e:75:fd:c6:e7:95:5c:7d:aa:
                    6b:80:b2:3b:e1:22:87:e0:27:08:08:e9:fe:17:51:
                    22:7b:1e:a1:92:4e:0f:fe:4e:f1:72:52:e0:8e:2d:
                    03:3e:e4:70:8b:4b:15:f0:15:91:fd:c8:08:7a:7b:
                    9d:ba:a1:5e:6a:88:63:c7:c3:42:2f:7f:34:24:8d:
                    21:71:1e:06:08:0f:8e:19:64:95:c8:dc:1c:c6:cf:
                    7c:ba:22:c4:5e:69:fe:ef:a3:4f:d8:de:90:92:18:
                    da:b0:b7:cc:89:f9:45:bc:d3:a9:07:29:49:75:1e:
                    19:59:43:14:59:5e:de:33:83:87:6b:ca:ea:d0:48:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:A5:93:02:AC:D2:EE:91:C8:D8:AA:E0:C8:9B:29:44:D9:1D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a2f135c8-d0e9-307a-8b7d-36056eb3dad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4a:e7:c8:31:11:50:cc:06:95:48:84:8b:be:97:25:29:fb:
         08:69:d4:20:2d:be:d9:5f:1e:ff:83:bd:02:68:18:23:e6:c3:
         fe:10:23:53:52:f9:04:40:26:f4:e4:7d:54:4a:3f:24:6f:e9:
         96:7e:35:8b:17:b3:e7:ee:e7:69:f4:e8:8f:68:87:6e:10:95:
         31:41:7d:7c:12:61:18:c0:c3:12:37:1e:c4:d4:9c:b3:19:d0:
         4a:94:61:0d:fd:e2:9e:a3:eb:72:42:56:20:93:1a:3a:f6:f5:
         bd:27:c6:5d:f2:83:0c:40:1b:0a:93:33:a2:28:45:6a:dc:32:
         73:9e:e5:42:7e:cd:b7:5f:70:0e:c4:9a:b6:24:af:15:bc:98:
         f8:a5:a6:53:54:2f:44:26:bd:17:b3:c7:91:3d:32:ea:d1:aa:
         e9:99:28:c0:13:2f:b5:6d:c0:6e:85:60:0b:34:93:9c:e1:0e:
         14:22:52:af:cc:b9:ee:62:5f:5c:e3:6a:db:38:17:b9:7f:d9:
         32:65:fe:5c:2d:ef:75:0d:22:a7:aa:63:64:bf:d4:5c:e4:f3:
         02:d9:82:07:30:c4:b2:d6:ae:15:52:76:48:0c:a0:6d:0b:68:
         b9:1c:18:45:45:1f:3a:89:5e:a3:df:12:c4:44:49:f3:55:35:
         48:59:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:26 2026 by rpki-client