Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
File:                     a570bcc4-0473-34be-a001-4329ef970092.roa (raw, json)
Hash identifier:          mlkHY1F8UXeboQGHMK2hTeDCFGySfqsQ+SgynAZ5SGw=
Subject key identifier:   95:D3:8C:45:6F:63:AE:46:7F:07:77:E1:A3:D0:AE:F3:8B:BA:81:0E
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF103E5B543E643103F980
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     20718
IP address blocks:        162.252.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:10:3e:5b:54:3e:64:31:03:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=910979a9-c91f-4a24-8d26-b60bbd4d5fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:d5:6b:19:dc:dd:0b:2b:42:7b:5e:ce:6d:
                    be:fe:dc:56:c2:21:6c:6b:fb:63:a9:c4:11:17:b1:
                    39:88:0a:6b:ac:92:78:3a:ea:fa:85:8f:21:92:17:
                    84:9e:cf:51:cd:73:0d:7a:86:ae:a2:50:1e:78:22:
                    d7:06:d4:d0:de:9a:3d:b1:63:d1:76:45:eb:e7:3c:
                    12:d1:e2:90:7e:a1:05:a4:c9:db:09:11:20:db:28:
                    db:a0:43:5a:68:82:1a:d2:b9:45:7d:fd:85:1f:d6:
                    9a:fb:ce:80:29:84:3e:75:2e:c8:e9:d9:8b:b6:73:
                    ab:67:ce:bf:2a:1c:e6:8a:f6:34:63:dd:c2:3f:cd:
                    9f:92:fc:93:af:72:af:12:40:00:b4:24:b2:39:f9:
                    a7:e2:3f:85:12:f2:cd:63:ea:f1:fa:d5:d6:d9:32:
                    2d:c6:2f:5d:c5:8a:fd:7f:32:95:70:bc:60:5b:43:
                    56:54:ad:7d:d2:ce:4e:f6:10:9b:f7:35:d9:28:fa:
                    5b:d9:30:96:12:c1:a6:16:01:be:7d:3f:90:90:48:
                    93:86:0c:ea:99:a9:f1:ec:7c:5c:78:fb:e7:db:36:
                    12:8a:4b:a7:88:62:e9:29:84:b3:7b:25:54:77:4a:
                    a3:4a:42:46:77:5b:20:7a:66:c6:b5:c3:80:2b:14:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:8C:45:6F:63:AE:46:7F:07:77:E1:A3:D0:AE:F3:8B:BA:81:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:ba:ca:ad:a4:15:bf:9f:3b:49:c4:8d:78:90:98:f0:ab:
         26:5e:87:d0:75:0c:43:f3:ba:0f:35:4c:fa:62:bb:90:b6:80:
         ef:ca:ba:0d:74:65:8b:ae:24:51:fc:42:8a:77:dd:eb:1d:0b:
         75:94:9d:6e:55:a5:cd:26:97:06:fc:80:5c:37:a3:44:f8:89:
         73:bf:dd:53:60:70:65:6d:dd:d7:2e:e3:c8:94:dd:e2:df:79:
         62:2e:18:8f:74:1c:06:11:c7:24:e4:41:d9:ba:93:ba:e9:11:
         00:ad:53:15:cf:c0:4a:83:94:1e:12:65:85:c9:e3:9a:23:50:
         7f:41:7e:e0:0d:57:0d:96:d7:49:a1:c1:2e:54:16:33:e0:2c:
         5f:68:96:2c:cf:3e:7a:28:51:b8:13:4e:80:15:d9:4c:39:ae:
         11:27:9b:2c:13:71:ed:54:fc:10:c4:17:ef:59:fd:f4:05:21:
         a7:1f:91:6d:e3:64:ef:87:b6:15:4a:17:57:96:11:55:6a:2c:
         7f:53:cc:91:d3:49:d9:89:00:cc:9b:e0:2d:73:64:e7:43:0d:
         8c:6e:32:3a:6c:b9:97:70:78:f0:e5:1e:d3:cb:7f:db:9b:ee:
         96:6d:bd:eb:67:8b:5f:38:66:3c:c2:73:ef:0c:39:f3:f0:19:
         5c:68:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:28:47 2026 by rpki-client