Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa
File:                     90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa (raw, json)
Hash identifier:          HAP/qATpkxqrKSI3XucA4/FVqpN3L5vV+Yaly+hj7vM=
Subject key identifier:   7C:52:C6:61:BC:BF:63:77:0E:33:23:29:9B:03:D7:03:51:71:8B:A7
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584DC29AF46AA89AC9977591B720
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     1239
IP address blocks:        64.40.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f4:6a:a8:9a:c9:97:75:91:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=15f7c7fc-3dba-4e29-b614-80dbb4611290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:cc:f4:01:9b:94:cf:df:71:32:3e:7f:06:
                    b7:35:a0:eb:65:38:73:f3:70:d9:94:ce:57:79:9e:
                    9f:cb:35:4f:54:f5:35:5d:b3:77:f3:bd:b8:85:54:
                    74:93:8b:60:38:4b:9c:9d:8b:4e:20:c9:1f:39:5d:
                    18:c2:7f:ac:80:33:73:96:f8:dd:c5:0b:8f:3e:57:
                    5f:b9:ec:3a:d2:5f:98:a0:46:65:7e:c3:f4:ef:bb:
                    17:2f:4c:95:71:57:c5:56:f0:dd:f1:d0:50:a7:08:
                    73:e7:19:1d:68:3c:6e:2f:e4:40:22:3e:4c:19:d2:
                    5f:ba:3a:e2:4d:e2:51:30:e9:da:e7:b6:77:09:63:
                    b8:71:62:84:51:06:79:06:8b:a7:da:43:eb:8b:64:
                    ea:0a:55:6e:41:ab:0b:21:a7:1d:b5:52:cf:d9:35:
                    1e:b6:f9:39:46:5c:8d:c7:6d:45:e3:0e:ca:09:74:
                    2b:55:e7:ac:40:17:ae:e4:51:eb:a8:51:ca:05:a0:
                    10:39:b1:b6:31:25:a1:67:73:53:fa:9e:72:04:2e:
                    98:2d:71:c6:65:09:a7:c0:56:e2:60:19:c2:3c:8f:
                    6c:15:20:95:2f:56:ae:82:a1:4b:4f:59:f9:f6:0b:
                    18:52:68:93:8f:cb:d6:7d:25:cf:85:07:d2:a1:1c:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:C6:61:BC:BF:63:77:0E:33:23:29:9B:03:D7:03:51:71:8B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:fa:6c:71:6c:cb:46:84:78:b7:21:a7:fe:21:9f:26:06:
         fc:79:0c:c6:72:65:57:01:56:11:d2:8f:72:e9:eb:d7:4b:df:
         64:bc:78:14:8e:0f:e3:14:b6:35:1c:26:7c:b3:28:36:1b:38:
         ea:9c:79:4a:30:bc:ae:3d:51:69:a9:d1:69:61:75:69:43:5b:
         c8:c6:e3:f2:db:e9:11:4c:34:60:99:5b:b6:bb:88:3a:e0:cf:
         d0:0b:b5:08:64:de:87:33:fc:c6:25:37:a3:b9:17:60:3e:ed:
         1d:3f:71:31:8a:a1:0c:dd:0b:5d:ee:8e:ba:b9:cc:8d:74:ec:
         09:a7:90:43:77:f5:e3:7b:ac:bd:43:20:6d:4e:5a:93:92:27:
         08:c1:8b:01:6d:d0:08:04:aa:a9:65:ab:ad:12:3f:ae:f0:32:
         16:f7:4f:c4:cc:53:63:0e:0f:3e:5a:9b:cf:33:b3:4f:f1:1d:
         01:71:a4:7d:36:bc:a5:1c:dc:98:6b:5f:db:cb:23:3f:89:c9:
         03:63:a2:f4:ac:b9:f2:48:59:5e:82:e7:da:87:8e:c1:59:1e:
         81:1e:2c:83:aa:ae:29:e5:b7:26:a5:7e:8d:68:6e:dd:a6:7e:
         90:9d:5f:03:0e:1e:7c:6e:00:42:d3:4a:3d:6b:4b:b7:2b:08:
         58:ea:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:19 2026 by rpki-client