Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa
File:                     AS152492.roa (raw, json)
Hash identifier:          qTt8QonDWAh2QWEuh0w6sucpMI/cax9b5bmEuoCek5M=
Subject key identifier:   C8:B5:3D:4B:47:98:80:28:38:AD:AA:2C:39:00:F5:B3:71:BA:C1:70
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       38C1E2F522D93D2846992EF44C03095A903B1D58
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa
Signing time:             Fri 24 Jul 2026 12:15:25 +0000
ROA not before:           Fri 24 Jul 2026 12:10:25 +0000
ROA not after:            Fri 23 Jul 2027 12:15:25 +0000
asID:                     152492
IP address blocks:        72.11.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:e2:f5:22:d9:3d:28:46:99:2e:f4:4c:03:09:5a:90:3b:1d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 24 12:10:25 2026 GMT
            Not After : Jul 23 12:15:25 2027 GMT
        Subject: CN=C8B53D4B4798802838ADAA2C3900F5B371BAC170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:aa:e0:4c:f5:de:95:e4:3c:e6:d4:37:ee:
                    0a:c0:e9:3c:a7:08:47:18:1a:19:7c:8c:e7:3f:3b:
                    42:02:42:bc:a5:21:5f:6d:5d:88:be:fb:74:f4:dc:
                    48:e3:88:3d:26:97:2d:41:3a:55:39:18:05:e4:54:
                    b0:ae:6d:15:6e:f4:37:cd:12:a8:46:53:55:2d:9e:
                    1c:ab:4d:54:e7:54:ad:80:1e:36:91:49:b8:f9:1c:
                    60:c6:c1:6f:69:dd:9e:1b:c7:74:7d:cb:94:57:08:
                    37:26:c5:dd:79:db:03:05:b9:d1:36:9b:bf:d7:b4:
                    c3:c8:9a:f2:a6:c7:6d:d0:01:3a:61:6d:bf:49:a9:
                    ac:85:f3:a8:1e:89:f2:90:bb:ce:7a:10:31:e4:c0:
                    44:df:31:0e:35:5e:0c:bf:9e:79:05:47:77:0f:7b:
                    0c:6c:ad:03:06:fc:97:a4:d9:52:d9:11:45:9c:26:
                    0e:d2:37:29:e5:d9:68:b2:03:b9:e4:22:85:cc:98:
                    03:f7:89:7f:8d:7a:fe:59:36:dc:55:e5:d1:f0:88:
                    81:d8:54:77:d8:a0:1f:91:aa:3a:68:f6:58:9f:e0:
                    03:11:74:9f:ee:d3:ba:cd:0c:09:a0:a9:04:63:fd:
                    63:a3:81:89:e9:e5:20:8d:ca:a6:b4:32:da:ba:e6:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B5:3D:4B:47:98:80:28:38:AD:AA:2C:39:00:F5:B3:71:BA:C1:70
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152492.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:ec:2a:b3:63:4d:a6:d1:fa:f8:1a:b6:cd:5e:f2:13:18:
         00:2b:5b:5e:db:7e:7f:21:df:69:80:05:37:8a:b1:9f:e6:b8:
         4b:ef:ae:2b:47:c3:1f:96:33:d0:b7:02:1e:87:ec:ab:79:43:
         49:eb:69:27:1c:b5:7e:05:ed:60:5e:af:a4:07:8a:29:a7:dc:
         05:45:5d:cd:f7:ee:89:c6:3e:0e:d9:3a:f3:43:14:cb:97:ae:
         4b:ed:b5:e5:54:aa:c9:e1:63:75:e6:0d:0d:93:2b:47:57:bd:
         1f:1b:db:05:57:67:1e:32:d9:df:10:60:97:d2:83:49:48:0b:
         77:02:14:fa:87:0d:cb:02:78:b3:e9:1c:5f:59:48:49:ef:57:
         f9:12:e2:fa:e7:27:92:9a:b8:5b:a5:17:58:8a:1d:5b:c1:5e:
         bd:e5:a8:83:f0:df:fa:d5:b8:df:d3:77:cc:f0:45:07:08:a0:
         43:aa:f7:b0:06:78:46:f5:af:c5:55:19:e8:70:d9:5a:ce:a5:
         35:2b:da:dd:b1:aa:fa:14:58:d2:c4:31:8b:7c:f8:fa:53:9d:
         01:24:44:f5:a7:ec:ae:c0:64:10:2f:a8:e2:9d:5f:97:a9:ba:
         ce:bc:56:3e:c7:d3:b5:dd:87:7d:4b:b3:5d:e0:b0:0e:fc:03:
         6c:26:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:49:21 2026 by rpki-client