Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa
File:                     08424691-e488-3b93-9a8d-564530dbb008.roa (raw, json)
Hash identifier:          DbkYEDt87uGGraD5Nl6XOI8QX9Mjya2UoT8SFmiJuXo=
Subject key identifier:   62:8A:DD:8A:3D:18:99:19:FD:47:DB:3C:A4:6D:D5:8E:D5:55:32:58
Certificate issuer:       /CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
Certificate serial:       010D0C9F4328584D9D95B4B38884A9F13950BA00
Authority key identifier: CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa
Signing time:             Fri 24 Apr 2026 18:45:07 +0000
ROA not before:           Fri 24 Apr 2026 18:45:07 +0000
ROA not after:            Thu 23 Jul 2026 18:45:07 +0000
asID:                     8075
IP address blocks:        162.252.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:95:b4:b3:88:84:a9:f1:39:50:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1
        Validity
            Not Before: Apr 24 18:45:07 2026 GMT
            Not After : Jul 23 18:45:07 2026 GMT
        Subject: CN=4d070ffe-d373-4abc-9b2e-c44cc0128316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:da:8f:d0:06:3e:70:69:29:60:17:c7:63:
                    b4:fd:72:3a:63:da:4d:7b:64:49:08:a1:08:15:f3:
                    bd:42:6b:e4:43:e6:be:4b:fb:2e:08:94:99:8d:1a:
                    8d:c4:83:cc:3c:32:10:39:90:51:c9:94:bb:3a:e1:
                    90:ba:f6:b0:91:4b:ca:eb:5b:99:2f:f2:3f:41:26:
                    cc:af:53:33:fe:b7:b1:1b:b9:cb:86:20:29:da:fb:
                    e6:3a:27:60:e4:26:05:da:4c:c6:e2:00:f3:df:2a:
                    59:e2:8a:3d:73:45:19:b5:04:b3:56:61:71:df:27:
                    08:b9:13:20:2f:6c:47:14:b0:ef:ca:ec:de:f6:da:
                    fd:5a:12:e7:e3:7e:9d:38:d8:17:2b:e9:f8:6c:3b:
                    b4:7c:6d:22:05:9e:84:f2:71:ee:14:12:d2:f5:fe:
                    09:8d:62:f0:56:dd:8a:a3:49:db:f8:cc:8d:17:7d:
                    83:28:a5:9d:a5:b5:19:41:37:53:dc:18:d1:92:7f:
                    b1:58:1a:f6:5f:b9:5e:99:63:a6:1d:34:f9:2d:b4:
                    7b:b0:28:61:f5:bc:1b:74:98:e7:13:2f:af:34:13:
                    52:9b:a4:f8:57:e7:e4:6d:82:9a:ef:0f:b8:fd:9f:
                    dd:ff:7b:8a:c1:f1:91:bb:a8:46:7c:78:ab:3e:25:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:DD:8A:3D:18:99:19:FD:47:DB:3C:A4:6D:D5:8E:D5:55:32:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:70:2a:a9:ec:41:2c:fe:09:65:c0:f9:8d:24:89:ef:db:
         f3:2d:bf:e0:26:ae:22:30:66:60:69:46:c5:93:19:62:e6:7b:
         5a:e0:3f:44:1b:ab:08:36:41:41:46:1a:cd:5c:f5:7d:9e:05:
         18:2f:5e:53:86:b4:81:06:84:95:d9:06:85:95:45:af:29:23:
         08:e7:81:9a:5e:00:90:53:99:ee:ae:a6:c5:96:b7:36:20:98:
         78:9d:cd:2b:3c:28:90:42:9e:bb:7b:55:e3:1b:52:36:a3:d4:
         a3:cd:ae:53:70:3e:01:f1:ed:31:82:fb:e4:a2:34:b7:e0:9d:
         18:c4:ce:2d:26:97:3f:3d:18:e7:bf:63:cb:73:4c:65:6c:73:
         bb:66:26:50:e4:4d:c6:dd:da:a4:cf:fd:be:a5:70:33:15:1d:
         44:31:c6:1f:51:01:d1:ab:06:0b:8b:41:c3:e5:ec:54:d6:74:
         5c:47:45:23:67:b8:17:55:45:cd:15:5b:6f:44:40:7f:67:6a:
         4b:03:e7:29:73:f8:9d:82:a5:46:8c:b7:13:f8:9c:51:d8:bc:
         06:d5:ad:93:83:67:3a:b6:ff:11:86:ac:a4:b4:d1:cb:48:58:
         90:fc:b3:bc:ee:c4:4d:35:42:06:c9:68:7a:9a:71:f9:cf:35:
         6c:c4:c1:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2dlbSziISp8TlQugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1MmIxYzUtOGViNi00YWRkLTk5ZjYtN2ZhMjgxODRk
Y2QxMB4XDTI2MDQyNDE4NDUwN1oXDTI2MDcyMzE4NDUwN1owLzEtMCsGA1UEAxMk
NGQwNzBmZmUtZDM3My00YWJjLTliMmUtYzQ0Y2MwMTI4MzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOLaj9AGPnBpKWAXx2O0/XI6Y9pNe2RJCKEI
FfO9QmvkQ+a+S/suCJSZjRqNxIPMPDIQOZBRyZS7OuGQuvawkUvK61uZL/I/QSbM
r1Mz/rexG7nLhiAp2vvmOidg5CYF2kzG4gDz3ypZ4oo9c0UZtQSzVmFx3ycIuRMg
L2xHFLDvyuze9tr9WhLn436dONgXK+n4bDu0fG0iBZ6E8nHuFBLS9f4JjWLwVt2K
o0nb+MyNF32DKKWdpbUZQTdT3BjRkn+xWBr2X7lemWOmHTT5LbR7sChh9bwbdJjn
Ey+vNBNSm6T4V+fkbYKa7w+4/Z/d/3uKwfGRu6hGfHirPiW7sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGKK3Yo9GJkZ/UfbPKRt1Y7VVTJYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUy
YjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEyODE4NGRjZDEvMDg0MjQ2OTEtZTQ4OC0z
YjkzLTlhOGQtNTY0NTMwZGJiMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDE1MmIxYzUtOGViNi00YWRkLTk5
ZjYtN2ZhMjgxODRkY2QxLzAxNTJiMWM1LThlYjYtNGFkZC05OWY2LTdmYTI4MTg0
ZGNkMS5jcmwwHwYDVR0jBBgwFoAUzg7Xkd0XmHYSrqnmfSqXaoh5pMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUyYjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEy
ODE4NGRjZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovwqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1hcCqp7EEs/gllwPmNJInv2/Mtv+AmriIwZmBpRsWTGWLme1rgP0Qb
qwg2QUFGGs1c9X2eBRgvXlOGtIEGhJXZBoWVRa8pIwjngZpeAJBTme6upsWWtzYg
mHidzSs8KJBCnrt7VeMbUjaj1KPNrlNwPgHx7TGC++SiNLfgnRjEzi0mlz89GOe/
Y8tzTGVsc7tmJlDkTcbd2qTP/b6lcDMVHUQxxh9RAdGrBguLQcPl7FTWdFxHRSNn
uBdVRc0VW29EQH9naksD5ylz+J2CpUaMtxP4nFHYvAbVrZODZzq2/xGGrKS00ctI
WJD8s7zuxE01QgbJaHqacfnPNWzEwUs=
-----END CERTIFICATE-----
Generated at Tue May 12 21:39:12 2026 by rpki-client