Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa
File:                     1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa (raw, json)
Hash identifier:          OHfFS7FhJJKW/P4SsxI+SnbH+4g0ZS5+BJbeiT0Tz9s=
Subject key identifier:   24:DD:C7:2D:A0:2D:82:95:F2:12:2A:0E:D7:2B:5B:1F:FF:0D:15:F6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA795FC98428C6E3E27E5C780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.45.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:fc:98:42:8c:6e:3e:27:e5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ab020aa6-8dbc-4f84-b012-ec3f7c463ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:9b:6d:17:c8:c6:c2:e1:fa:d8:7d:58:c0:
                    91:0b:9d:90:cd:7c:cd:4e:90:82:f2:d0:09:e4:bd:
                    88:58:fd:1c:4c:0a:1c:ac:f6:72:a5:4d:1a:67:89:
                    77:2a:e8:55:d6:d2:25:44:56:12:13:4e:0d:74:6a:
                    4a:1e:11:6d:11:40:8b:e6:67:8f:e0:24:e2:1a:d1:
                    cd:a6:6a:04:8f:da:61:0e:a5:9d:34:f7:4a:3f:60:
                    d1:11:35:11:9f:01:39:a6:50:47:cf:f6:bf:ef:83:
                    5c:a6:71:c1:f0:a0:c7:ed:6c:47:bf:8a:b9:4b:f5:
                    2e:a0:96:6d:b0:66:92:36:5e:13:ac:bb:63:cf:bb:
                    38:72:a1:fc:0c:d7:46:62:96:5e:8f:5a:99:32:cf:
                    2c:57:bc:42:e0:18:79:ef:94:a5:31:9b:a7:c6:0a:
                    db:be:12:19:61:bc:54:c8:5a:87:fb:de:c5:e0:ff:
                    a4:3d:6b:ee:3b:49:4e:d3:e2:db:2c:90:09:a4:de:
                    53:dc:85:83:99:34:0f:d7:76:73:7f:c3:4f:f4:5a:
                    5f:51:e2:ca:b4:05:ef:9c:9f:5a:c1:43:5e:fd:d5:
                    c9:10:eb:b8:90:32:48:b6:dd:23:07:ed:e5:9e:8a:
                    af:3a:da:93:07:2e:31:ba:2f:ab:09:d7:fa:e6:3f:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DD:C7:2D:A0:2D:82:95:F2:12:2A:0E:D7:2B:5B:1F:FF:0D:15:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:70:ba:d2:83:e2:8b:12:9e:72:9d:a6:50:b6:55:ab:4a:ec:
         c1:97:23:6d:8a:79:82:72:26:de:d3:ea:c2:25:ac:93:f9:19:
         a9:aa:65:0e:96:44:5a:7c:d4:df:e6:fe:60:32:fe:ea:78:aa:
         bd:d8:7f:b5:94:d6:b4:b8:dc:3b:d1:6b:ac:e8:db:c6:63:39:
         31:3a:d8:56:7b:65:46:76:81:db:3a:fb:af:ea:fd:d0:85:3d:
         a8:96:39:4e:fc:46:d9:d2:aa:fd:99:36:18:5c:78:64:a2:d9:
         9f:e8:0a:d6:24:75:f1:24:40:73:22:82:35:9a:a5:d5:1b:e7:
         71:3f:41:3d:05:d5:24:8d:59:d0:84:c9:e7:ce:18:56:cc:a6:
         c2:4e:6c:af:3a:87:18:c2:a0:5a:64:45:ca:d5:82:95:ea:00:
         ad:8d:49:73:e4:a2:6b:bc:0f:79:e1:dd:35:da:3f:3c:f8:3c:
         f6:8a:96:37:2f:5e:b5:69:fb:c1:f6:49:e9:ce:7a:b5:e1:6b:
         23:e4:d6:04:b9:ea:05:1f:f3:8d:97:0a:a6:0a:eb:3b:28:9e:
         a0:5e:25:37:46:93:cc:c5:f8:8e:9e:f5:fa:94:c2:94:59:df:
         a9:b5:9f:1a:e8:b4:fa:74:ae:e5:6f:9e:18:c8:f6:04:32:8b:
         2e:02:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:13 2026 by rpki-client