Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
File:                     779a63bf-08f6-3f6f-bed1-9894398f6634.roa (raw, json)
Hash identifier:          tou2zYVWWlISIjWDiNJqXvHJj7YhOYVrzZEYgL77mWE=
Subject key identifier:   4F:A3:7A:44:28:3F:FA:2A:0D:E3:EB:54:1B:89:88:27:C3:F6:32:2B
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584DB3403707F1DF1023CA439780
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     21947
IP address blocks:        192.150.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:37:07:f1:df:10:23:ca:43:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=d9ad445a-1099-4853-88d1-a7e935c42a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:70:7c:7f:75:4c:9d:25:62:be:4a:55:a7:
                    56:79:fd:28:70:9f:3d:95:4f:4d:da:f7:2a:c2:ba:
                    91:64:22:31:92:58:d1:36:a2:0c:2c:a8:6d:05:b9:
                    80:9d:7b:0e:85:9a:5a:45:4d:b3:36:b4:2f:4e:c8:
                    58:03:5e:de:1f:af:00:a3:fa:e5:a2:11:3b:fa:10:
                    03:59:17:4e:77:20:fa:4a:01:24:7d:11:67:15:67:
                    d2:c0:9e:28:2d:8b:d6:32:06:13:20:b2:78:d4:1a:
                    74:37:6a:46:ea:9c:3b:93:db:91:6b:09:44:b5:25:
                    16:02:fd:cc:7c:e7:f0:9f:83:93:85:85:a6:f6:61:
                    44:ec:cc:bf:23:7b:58:6b:e7:56:fa:c1:43:26:8c:
                    16:74:ba:44:42:34:1a:30:9e:5a:00:c2:df:39:74:
                    5b:4f:71:a2:37:0d:4d:50:b3:8a:b2:f3:da:d6:f5:
                    97:30:2f:c9:a4:b3:3d:a8:d5:17:f9:ed:84:ce:99:
                    29:83:22:8e:f3:65:67:07:b7:a4:30:44:a5:79:dd:
                    04:1a:38:32:e4:16:5b:cc:4f:07:5e:6c:18:a6:43:
                    73:3e:ae:c4:49:aa:1b:ef:a3:46:61:c3:c1:48:e9:
                    5d:2d:79:b5:86:a6:3c:16:ac:14:ad:1d:9e:8d:1c:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:7A:44:28:3F:FA:2A:0D:E3:EB:54:1B:89:88:27:C3:F6:32:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:6b:e7:9d:09:ed:c3:6e:fa:52:e1:33:87:0c:85:51:07:
         fb:3f:40:fc:09:b6:97:ea:86:f0:b3:86:e2:53:1a:f1:72:65:
         74:58:8c:f0:d2:35:28:20:f0:2d:82:a2:c3:df:22:6d:84:41:
         c4:e4:44:fb:36:bd:32:8e:89:a1:e8:2e:aa:7f:43:8b:b0:a4:
         e0:16:f2:24:5c:89:48:16:88:5f:ae:36:82:94:03:99:06:26:
         8b:94:67:dc:2a:3b:86:53:aa:a1:1e:f7:c3:74:42:9d:a8:e8:
         99:18:0c:f5:c7:21:52:6b:bf:99:c5:a1:fa:85:b7:db:38:ef:
         20:5a:da:db:4c:7d:93:b1:58:23:9e:2f:8a:81:d2:e8:e9:96:
         07:59:8d:40:ac:70:f0:de:8b:00:38:95:95:22:ec:8c:ee:4c:
         0a:1b:41:54:fb:ee:4f:3c:07:17:26:a9:b8:1a:26:1b:b4:38:
         f8:03:0d:2c:db:75:ad:29:0f:00:86:3b:89:2b:41:7c:b4:2c:
         c6:aa:55:38:35:b5:f6:7b:98:09:03:1f:53:28:cc:8f:7d:0a:
         68:ad:bb:3c:eb:03:9b:56:9a:17:86:94:a6:5b:27:44:3a:c9:
         20:06:d5:58:c0:22:6c:a1:05:0d:ca:fa:b2:d2:52:b8:ff:c3:
         5a:a6:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:51 2026 by rpki-client