Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
File:                     a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json)
Hash identifier:          AAHi15EXrgQsv3lX4ecw02Uf1PTIR+X9auF3qHEoN6E=
Subject key identifier:   B0:34:5C:E6:27:CB:6E:8D:9E:8B:0E:2B:7B:F7:AF:11:F3:A8:8B:59
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584D09125FFE34A6EA93D9C46E00
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     36850
IP address blocks:        152.19.0.0/16 maxlen: 16
                          152.23.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5f:fe:34:a6:ea:93:d9:c4:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=9a7c645d-0e7a-4a6c-938c-266a7d8b99ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:60:2b:69:f9:04:6d:11:2f:70:d3:df:ca:
                    9a:60:48:2b:5d:83:07:76:0c:38:9a:63:2d:ef:56:
                    94:1f:ca:4a:85:b7:d3:85:05:dc:aa:46:0d:05:fe:
                    c9:d8:29:e9:f8:07:fe:4d:95:93:37:79:0f:5f:43:
                    05:23:e4:7b:02:2a:86:f9:20:1c:db:59:33:41:26:
                    3f:ad:4b:af:3e:1d:ea:a9:a5:9a:e4:cb:1e:5f:bc:
                    9e:13:07:cf:55:1a:0d:63:f3:4c:3d:c8:50:d0:f8:
                    77:f3:6e:22:93:29:21:73:e3:f4:5b:65:dc:19:bf:
                    3b:04:3b:41:05:66:62:5a:29:cd:7c:6d:cd:f6:ac:
                    bd:43:02:f9:34:5c:90:17:2b:47:c8:ee:16:4f:88:
                    7b:2b:4c:23:cb:a4:3c:c2:76:7d:00:56:28:3a:96:
                    90:09:fd:20:88:4e:e6:5a:d3:2e:fd:76:4a:a8:d0:
                    ee:0e:55:3a:12:2f:8a:73:ce:93:6b:e7:ca:9b:a7:
                    c9:ed:3d:45:fc:e2:16:cf:ed:9e:2d:21:1f:34:3b:
                    39:83:5f:11:f5:e8:c5:80:8c:3b:e9:d0:59:e9:e7:
                    46:24:52:e8:e3:26:42:f2:4f:6a:a0:e7:a0:6e:9b:
                    d2:11:f0:36:df:5a:23:f1:2f:c0:0b:02:4b:c5:38:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:5C:E6:27:CB:6E:8D:9E:8B:0E:2B:7B:F7:AF:11:F3:A8:8B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.19.0.0/16
                  152.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:90:eb:d2:45:a2:8f:1c:d8:e2:89:3d:41:01:76:00:be:
         0a:d9:f3:d1:4a:95:23:7d:b9:87:3d:8f:69:53:47:b6:0e:16:
         b7:ed:c6:45:19:c6:ac:60:18:97:23:a6:56:c2:ac:66:97:17:
         07:5c:0f:d4:bb:8c:c6:0e:cd:60:07:85:c6:e8:d2:af:12:bc:
         9f:b8:b2:19:5d:91:0a:ea:72:7a:ca:21:64:51:72:94:32:17:
         0b:63:8e:6f:71:52:1b:29:8d:57:86:ee:2d:7a:46:c3:ef:af:
         dd:0f:fc:46:37:49:b1:61:3b:b5:f1:b6:cb:dc:ae:3f:dc:72:
         ea:11:e2:80:06:b6:05:ca:0a:f1:af:b9:a1:4e:66:2d:27:bc:
         91:5f:f0:54:b9:98:f6:13:23:9c:9e:51:7e:a1:da:7c:f2:e1:
         39:24:30:26:9a:b4:d3:13:e2:2b:31:dc:4a:e6:c7:28:45:33:
         70:55:0b:30:57:95:a7:e9:5d:7a:41:8a:e8:ad:6b:67:7f:42:
         0d:80:44:10:6f:ad:08:0f:15:89:da:3d:52:c2:47:1b:53:b1:
         5d:ce:11:ac:af:5e:11:39:93:52:be:9e:4a:39:5c:94:a8:5d:
         4c:18:a6:dd:98:f4:2d:19:1b:b1:5b:52:03:ec:67:aa:1b:95:
         e5:44:d1:da
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE0JEl/+NKbqk9nEbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz
NjFhMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OWE3YzY0NWQtMGU3YS00YTZjLTkzOGMtMjY2YTdkOGI5OWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFpgK2n5BG0RL3DT38qaYEgrXYMHdgw4mmMt
71aUH8pKhbfThQXcqkYNBf7J2Cnp+Af+TZWTN3kPX0MFI+R7AiqG+SAc21kzQSY/
rUuvPh3qqaWa5MseX7yeEwfPVRoNY/NMPchQ0Ph3824ikykhc+P0W2XcGb87BDtB
BWZiWinNfG3N9qy9QwL5NFyQFytHyO4WT4h7K0wjy6Q8wnZ9AFYoOpaQCf0giE7m
WtMu/XZKqNDuDlU6Ei+Kc86Ta+fKm6fJ7T1F/OIWz+2eLSEfNDs5g18R9ejFgIw7
6dBZ6edGJFLo4yZC8k9qoOegbpvSEfA231oj8S/ACwJLxTjXLwIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFLA0XOYny26NnosOK3v3rxHzqItZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5
ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvYTU4ZTE0ZDUtNTQ3Zi0z
ZDcxLWFlYjgtZmQ0YjA2ZTg3NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy
YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw
MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0
YjQ3MDM2MWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAmBMDAwCY
FzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQBD+ZDr0kWijxzY4ok9QQF2AL4K2fPRSpUjfbmHPY9pU0e2Dha3
7cZFGcasYBiXI6ZWwqxmlxcHXA/Uu4zGDs1gB4XG6NKvEryfuLIZXZEK6nJ6yiFk
UXKUMhcLY45vcVIbKY1Xhu4tekbD76/dD/xGN0mxYTu18bbL3K4/3HLqEeKABrYF
ygrxr7mhTmYtJ7yRX/BUuZj2EyOcnlF+odp88uE5JDAmmrTTE+IrMdxK5scoRTNw
VQswV5Wn6V16QYrorWtnf0INgEQQb60IDxWJ2j1SwkcbU7FdzhGsr14ROZNSvp5K
OVyUqF1MGKbdmPQtGRuxW1ID7GeqG5XlRNHa
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:29 2026 by rpki-client