Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/d4c087c1-198a-36fa-aee7-6acd120d868d.roa
File:                     d4c087c1-198a-36fa-aee7-6acd120d868d.roa (raw, json)
Hash identifier:          PX8LIHNM5XP9CnlvJ/NIQfaIic9Rbu70cb1srV7/4mI=
Subject key identifier:   51:91:F4:60:CE:34:73:72:DB:A8:76:A0:B4:D4:E7:CA:61:54:D8:01
Certificate issuer:       /CN=783153ed-0646-4e7e-bf89-e00b1c63f0d7
Certificate serial:       010D0C9F4328584FD4398F17A6F29B7B024B2380
Authority key identifier: D2:82:F8:EF:2B:04:BA:00:05:7E:ED:94:42:D3:80:A7:12:83:E3:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/d4c087c1-198a-36fa-aee7-6acd120d868d.roa
Signing time:             Fri 13 Nov 2026 18:02:48 +0000
ROA not before:           Fri 13 Nov 2026 18:02:48 +0000
ROA not after:            Thu 11 Feb 2027 18:02:48 +0000
asID:                     26340
IP address blocks:        149.112.152.0/23 maxlen: 23
                          149.112.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/783153ed-0646-4e7e-bf89-e00b1c63f0d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/783153ed-0646-4e7e-bf89-e00b1c63f0d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d4:39:8f:17:a6:f2:9b:7b:02:4b:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783153ed-0646-4e7e-bf89-e00b1c63f0d7
        Validity
            Not Before: Nov 13 18:02:48 2026 GMT
            Not After : Feb 11 18:02:48 2027 GMT
        Subject: CN=caa83c63-8bfa-420e-aac3-b186ac0fbf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:e0:cd:77:fe:7a:81:f8:2a:94:ff:a5:ef:
                    e8:27:87:ab:84:bd:d7:f0:8d:e2:8e:1d:cc:e3:19:
                    2f:11:ee:38:23:c2:b4:fd:fc:f7:96:df:15:a8:42:
                    8e:7d:84:e0:d3:bb:ec:b2:82:17:a9:c0:0e:ee:94:
                    46:de:29:23:eb:d9:2a:49:b9:a0:16:83:a0:bd:66:
                    87:b1:6d:33:fb:6e:2b:3b:bc:5d:1f:1f:1a:9f:c1:
                    b2:61:e2:2f:89:88:a4:e8:ba:f2:bc:9a:05:cd:34:
                    78:88:74:d4:96:93:21:ed:80:27:e3:c5:8f:ec:4c:
                    57:31:60:bb:9f:13:dc:41:20:0c:1c:df:35:25:9a:
                    e1:29:23:63:e8:65:60:8a:de:80:53:f8:14:83:6d:
                    63:f8:db:36:20:1e:71:a9:d8:e1:d4:da:fc:ad:d9:
                    a0:6f:95:bf:2e:2b:75:42:c5:b1:3a:03:cb:3b:fe:
                    5d:3a:a6:6b:c0:57:c7:1d:c2:f0:d5:9a:2a:21:47:
                    68:29:8c:c2:95:ee:fd:60:20:33:30:6e:ed:fb:08:
                    d9:14:89:d8:df:20:5b:01:10:8b:12:7f:89:ea:07:
                    30:eb:0a:1d:79:63:2d:d6:1d:08:49:da:ae:04:cf:
                    53:df:71:5f:a9:fb:da:5e:59:c6:b9:9e:f3:d5:7c:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:F4:60:CE:34:73:72:DB:A8:76:A0:B4:D4:E7:CA:61:54:D8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/d4c087c1-198a-36fa-aee7-6acd120d868d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7/783153ed-0646-4e7e-bf89-e00b1c63f0d7.crl

            X509v3 Authority Key Identifier:
                keyid:D2:82:F8:EF:2B:04:BA:00:05:7E:ED:94:42:D3:80:A7:12:83:E3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/783153ed-0646-4e7e-bf89-e00b1c63f0d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:69:38:ec:68:85:e1:c9:a5:84:28:be:de:7d:c4:77:36:aa:
         46:51:4b:38:2a:9d:df:ff:e4:54:c1:ef:98:de:d2:60:ad:db:
         65:d2:cc:fd:8b:78:4e:59:f8:d0:c8:cf:24:3a:2a:dc:10:d6:
         f4:60:b3:7b:f7:2f:4b:81:be:ce:98:33:b4:6c:a1:72:d2:ce:
         d8:04:b4:43:b9:1c:58:93:5b:1c:17:ef:dc:d6:d2:b1:52:4b:
         1b:f0:c7:0d:ab:c7:ec:61:28:69:f3:e7:d0:4e:72:8d:1c:dc:
         03:5d:fb:9a:0e:c1:3f:2b:bc:4f:8d:15:fe:4e:fa:e3:a6:c8:
         a8:31:7d:f0:b7:4d:fb:bc:b8:65:50:5c:21:1d:b9:75:09:2c:
         1c:28:8a:8e:8c:18:65:84:d6:a5:06:84:15:66:61:da:da:f8:
         47:21:a6:9e:d9:44:de:4f:6c:27:72:2d:89:85:ab:aa:d2:4d:
         81:f9:3e:5c:e5:b4:89:d7:e9:6a:ce:e9:ab:d1:12:7c:6f:4a:
         de:04:78:1b:d2:22:d3:63:85:3b:88:6e:df:fd:08:a5:98:c7:
         05:46:fc:cd:50:fe:5b:d8:25:47:93:b3:95:36:a0:ac:3e:aa:
         e0:83:7a:71:34:c0:24:76:0d:7b:74:f2:18:20:f7:f5:ce:e9:
         94:f6:80:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/UOY8XpvKbewJLI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzMTUzZWQtMDY0Ni00ZTdlLWJmODktZTAwYjFjNjNm
MGQ3MB4XDTI2MTExMzE4MDI0OFoXDTI3MDIxMTE4MDI0OFowLzEtMCsGA1UEAxMk
Y2FhODNjNjMtOGJmYS00MjBlLWFhYzMtYjE4NmFjMGZiZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWXgzXf+eoH4KpT/pe/oJ4erhL3X8I3ijh3M
4xkvEe44I8K0/fz3lt8VqEKOfYTg07vssoIXqcAO7pRG3ikj69kqSbmgFoOgvWaH
sW0z+24rO7xdHx8an8GyYeIviYik6LryvJoFzTR4iHTUlpMh7YAn48WP7ExXMWC7
nxPcQSAMHN81JZrhKSNj6GVgit6AU/gUg21j+Ns2IB5xqdjh1Nr8rdmgb5W/Lit1
QsWxOgPLO/5dOqZrwFfHHcLw1ZoqIUdoKYzCle79YCAzMG7t+wjZFInY3yBbARCL
En+J6gcw6wodeWMt1h0ISdquBM9T33FfqfvaXlnGuZ7z1Xz3lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGR9GDONHNy26h2oLTU58phVNgBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi83ODMx
NTNlZC0wNjQ2LTRlN2UtYmY4OS1lMDBiMWM2M2YwZDcvZDRjMDg3YzEtMTk4YS0z
NmZhLWFlZTctNmFjZDEyMGQ4NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m
ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvNzgzMTUzZWQtMDY0Ni00ZTdlLWJm
ODktZTAwYjFjNjNmMGQ3Lzc4MzE1M2VkLTA2NDYtNGU3ZS1iZjg5LWUwMGIxYzYz
ZjBkNy5jcmwwHwYDVR0jBBgwFoAU0oL47ysEugAFfu2UQtOApxKD4/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0
MS1iMzliLTMyMzM1M2ExZWJmMi83ODMxNTNlZC0wNjQ2LTRlN2UtYmY4OS1lMDBi
MWM2M2YwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERpOOxoheHJpYQovt59xHc2qkZRSzgqnd//5FTB75je0mCt22XSzP2L
eE5Z+NDIzyQ6KtwQ1vRgs3v3L0uBvs6YM7RsoXLSztgEtEO5HFiTWxwX79zW0rFS
Sxvwxw2rx+xhKGnz59BOco0c3ANd+5oOwT8rvE+NFf5O+uOmyKgxffC3Tfu8uGVQ
XCEduXUJLBwoio6MGGWE1qUGhBVmYdra+Echpp7ZRN5PbCdyLYmFq6rSTYH5Plzl
tInX6WrO6avREnxvSt4EeBvSItNjhTuIbt/9CKWYxwVG/M1Q/lvYJUeTs5U2oKw+
quCDenE0wCR2DXt08hgg9/XO6ZT2gGw=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:41 2026 by rpki-client