Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/921c49f7-fd04-3000-b684-4b057a18ed9e.roa
File:                     921c49f7-fd04-3000-b684-4b057a18ed9e.roa (raw, json)
Hash identifier:          ogqWaIUvzqYPsfkw7bTXW588GCSKJ/C3iNjC6ROnrrU=
Subject key identifier:   C7:D2:E0:76:5D:6C:63:64:3A:7E:CD:15:B1:F9:78:2B:CB:BC:89:68
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584DADAAECA3ADE2A1E5FA8EC2E0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/921c49f7-fd04-3000-b684-4b057a18ed9e.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     55286
IP address blocks:        152.232.130.0/24 maxlen: 24
                          152.232.179.0/24 maxlen: 24
                          152.232.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ec:a3:ad:e2:a1:e5:fa:8e:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=5edea5d1-4207-44fd-879f-ff78bc613db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:ef:76:fb:d2:9c:a5:71:8b:d4:70:c0:4c:
                    70:66:28:b3:05:cc:ca:b6:dd:10:2c:2d:5c:c0:31:
                    bc:1e:08:f5:7e:c1:90:56:c7:af:75:3e:6d:f1:ee:
                    a0:ae:70:8a:19:f2:74:77:90:ec:2f:49:e9:17:e8:
                    f3:0e:78:d9:7f:42:82:56:85:58:d2:4d:6e:fa:22:
                    4c:0d:1b:9b:fb:90:0a:b4:ba:15:f7:72:7d:29:bc:
                    6b:f8:8a:15:50:8e:2e:e2:7f:e3:a6:3e:f2:ad:e9:
                    a7:6c:3f:79:ba:6b:a5:53:a5:7f:7c:83:98:68:96:
                    9d:91:39:8d:73:63:21:31:3d:bf:b1:78:3a:58:cd:
                    16:e0:a1:51:85:b7:0b:91:39:f7:fa:de:21:9b:46:
                    e0:66:ac:39:06:3c:0b:37:1f:e9:55:48:1b:25:a7:
                    c9:04:8d:6a:f5:9b:4b:b5:c6:58:1c:c6:36:ae:36:
                    54:d9:61:b3:14:57:81:ad:76:72:c8:c2:79:9c:da:
                    85:e1:df:26:9d:e1:b1:53:c9:d8:75:c5:66:af:53:
                    03:c8:df:b2:0f:99:19:a2:d4:06:87:92:f3:d5:15:
                    42:13:af:5f:42:bd:f7:fa:ab:ff:16:4e:ff:36:04:
                    3c:54:1d:bf:fd:c8:59:31:aa:fc:22:18:a1:1b:bc:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:E0:76:5D:6C:63:64:3A:7E:CD:15:B1:F9:78:2B:CB:BC:89:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/921c49f7-fd04-3000-b684-4b057a18ed9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.232.130.0/24
                  152.232.179.0/24
                  152.232.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:72:cc:a2:57:d5:6d:66:ef:ac:98:eb:9a:c2:25:ab:83:
         37:ad:f4:01:64:63:54:38:f9:dc:e3:2b:27:62:e2:e4:c6:7f:
         d1:dd:54:d6:53:10:49:0d:49:fa:9c:cf:bc:87:c0:64:fc:27:
         0a:66:42:29:ce:dc:97:5c:27:4a:01:ab:a1:64:6e:14:8b:11:
         51:68:ea:97:f5:ac:ab:de:05:4f:c9:78:0f:da:bb:b4:7c:ea:
         17:f7:a4:2b:e3:14:f0:71:86:b9:be:f3:42:c0:1e:74:70:81:
         b4:47:2f:9e:87:13:3d:50:37:b3:98:87:c2:c4:b2:19:dd:66:
         c2:07:5b:3f:f6:52:e3:04:51:87:36:b1:88:c1:3e:c0:b2:84:
         1a:41:3e:cd:f7:8d:bb:ee:85:4b:29:4d:ff:a2:0e:5d:b5:a1:
         65:bc:73:5b:78:04:64:09:00:22:82:91:be:4c:b0:16:24:a5:
         3e:74:54:72:4e:c4:1b:98:4a:59:c5:4e:31:28:41:61:af:12:
         8b:b4:23:54:9a:71:dd:5e:68:a3:d6:c9:5e:82:80:ec:52:3d:
         e9:87:40:a1:2d:31:56:78:f1:85:13:f5:ca:be:21:53:08:2e:
         88:fa:55:bb:7a:6b:34:0c:31:f5:e6:d1:2a:a9:13:1f:72:6b:
         c0:54:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:14 2026 by rpki-client