Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
File:                     c826d2c7-c973-3a95-b348-80cf23735821.roa (raw, json)
Hash identifier:          kNsEiWaAGrlTd1DYNaOn9vbZNFQGklHn7NpmUBdcMn8=
Subject key identifier:   C2:60:B4:07:D4:2E:48:9A:6F:15:8B:F1:50:F7:02:2A:67:24:70:BD
Certificate issuer:       /CN=a75ece7f-5380-409e-b027-b6733c088c34
Certificate serial:       010D0C9F4328584EA788984C7B3A3366406D9760
Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     59
IP address blocks:        146.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:98:4c:7b:3a:33:66:40:6d:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=09a5381b-7b48-4f07-8a13-f2dab56ba1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:60:36:fe:e3:3d:5b:1c:53:83:aa:e3:20:
                    76:a5:df:c2:12:93:09:22:af:96:68:73:41:18:40:
                    6c:ff:74:c7:5f:13:93:87:62:d8:62:00:71:85:e1:
                    36:af:21:0f:2a:f5:41:05:eb:82:a6:89:61:26:a6:
                    8e:21:7e:20:60:9c:41:f0:77:74:1d:3f:cf:b1:5b:
                    28:db:13:7e:ee:95:de:2e:34:89:69:38:be:28:5f:
                    cb:9f:ec:7a:0f:65:93:3a:67:1f:40:24:45:5a:15:
                    4e:37:86:09:4d:51:da:92:e2:cb:fc:27:64:13:73:
                    01:05:da:e0:1e:88:67:dd:cd:b9:a0:65:a0:4e:7d:
                    5c:b8:49:3f:14:6c:fe:74:3f:53:8d:e2:7f:e9:9a:
                    a3:b1:ad:b4:eb:5a:d7:7e:b7:9b:13:06:f8:b8:cc:
                    54:39:03:1c:45:ed:e3:34:3a:9a:e1:89:20:84:66:
                    67:87:a0:dd:07:f2:c0:e8:52:7f:23:e2:17:db:2d:
                    4e:b1:f1:22:f7:79:46:5e:5d:91:5d:db:5a:5d:df:
                    9a:5a:75:68:18:4f:89:00:ba:cd:9d:39:b7:80:99:
                    d4:29:48:2c:55:c9:f6:bc:22:90:63:a2:49:10:3a:
                    9a:26:1b:12:9f:44:72:ec:fa:6f:76:99:dd:4f:4a:
                    58:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:60:B4:07:D4:2E:48:9A:6F:15:8B:F1:50:F7:02:2A:67:24:70:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c826d2c7-c973-3a95-b348-80cf23735821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl

            X509v3 Authority Key Identifier:
                keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:58:7c:4e:41:b8:3e:69:65:fe:27:20:e5:2e:be:3f:5b:58:
         5c:0b:45:d7:79:f0:6c:4d:0d:47:b3:d5:4d:ce:0d:58:f4:cc:
         57:fc:b7:41:5a:7d:2b:f0:9e:1e:a0:0c:2d:17:e7:bc:b1:68:
         1e:86:03:62:b7:5f:98:4f:5f:20:64:e4:7e:70:dc:39:29:8d:
         56:c6:6f:9d:b3:cb:30:5e:e8:d6:59:a0:12:3a:96:3e:e4:45:
         a6:6f:b5:17:02:5c:5f:fe:6e:5b:c1:77:2c:c8:93:97:b5:17:
         fa:dc:7f:be:19:80:76:ca:8f:2d:1f:77:18:13:20:7e:18:bc:
         2b:b8:c0:d7:0d:10:82:9f:a8:ad:93:57:fa:16:e3:86:6d:b6:
         52:4a:16:05:ea:68:c5:76:f2:52:b8:7c:83:3b:39:93:50:cf:
         64:ba:c1:09:8c:6a:bf:df:18:29:5e:a4:3a:9e:6b:af:e5:b4:
         2d:dd:ae:18:ac:ad:97:9a:ae:9b:81:e0:a8:ac:63:4b:eb:33:
         0c:64:15:a3:6a:f5:77:1a:79:2c:fb:08:ac:38:4c:19:b3:0c:
         fd:e4:d4:67:9b:52:47:c3:30:7e:9b:a0:ad:5f:b1:eb:11:23:
         d0:05:08:d5:b6:53:57:ce:73:2a:4d:00:3e:8f:5d:61:3c:32:
         d5:f2:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:22 2026 by rpki-client