Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa
File:                     1e746d0f-5ec2-3256-addd-5807f9b93443.roa (raw, json)
Hash identifier:          truwtzJ1sYA7zS4MtxSLnL9F4cjP5DS58n4rSOnhWDk=
Subject key identifier:   23:C4:74:E7:D1:56:36:CC:EA:A1:88:01:9C:49:9D:47:89:F5:33:9D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9FF4FE09AA2078B8FD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.22.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9f:f4:fe:09:aa:20:78:b8:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=526c335a-1d92-46cd-ae92-f65c9238ec7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:c6:1b:ff:83:8e:27:d2:fe:16:88:3e:a5:
                    5a:bf:5a:35:c7:00:e6:fc:8f:0a:7f:cd:3f:66:2f:
                    b7:4d:f3:93:9e:7a:ad:b7:24:66:7e:28:4d:05:bd:
                    a6:d1:46:e0:32:83:bb:29:94:b4:7b:bb:88:90:7a:
                    bc:d1:8d:f7:f7:ec:d6:8d:cd:a5:e4:cd:42:e1:98:
                    aa:d2:21:57:24:e2:66:a1:3a:a9:33:66:8a:e0:1c:
                    ed:70:ff:1d:46:52:a7:12:0c:94:62:f7:46:f3:25:
                    22:a4:ab:bb:44:87:ec:e8:d3:ba:2c:d9:2e:9d:d4:
                    77:ff:d1:86:2c:a9:ef:96:bf:cb:f6:00:dd:bc:42:
                    f8:a0:09:cd:56:5c:de:2d:3c:d2:da:dd:a8:57:08:
                    76:c0:2b:fd:d1:e2:f1:3d:38:41:b7:2f:97:54:8c:
                    32:42:d5:78:7f:96:1d:02:60:d4:c6:76:29:d5:b4:
                    fd:9f:31:9e:cf:e0:d7:f6:aa:e5:f5:91:21:64:ef:
                    28:9c:8d:a5:af:28:33:21:9c:c1:a8:ed:88:26:eb:
                    de:66:05:81:a2:29:44:52:4f:0a:85:d5:c9:84:87:
                    9c:2a:22:96:91:09:ca:df:14:0b:9b:20:46:bc:95:
                    ef:0c:cc:7e:4e:20:91:65:77:83:75:52:38:f2:9f:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:74:E7:D1:56:36:CC:EA:A1:88:01:9C:49:9D:47:89:F5:33:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1e746d0f-5ec2-3256-addd-5807f9b93443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:41:14:e2:e7:1f:43:a4:0c:49:00:2d:03:b6:17:79:a6:9b:
         96:3d:8e:2f:3a:17:26:1d:b6:f0:d6:ff:8e:34:01:84:27:4a:
         ce:3a:09:22:04:99:4c:d7:e0:a2:20:be:5a:4a:6c:56:2f:ee:
         2f:c8:b0:5a:ab:89:a5:43:30:7b:d9:09:49:3c:76:93:7f:89:
         62:e0:53:16:f4:f8:d8:61:2a:da:ca:a2:4a:71:6c:7d:1e:8b:
         6c:7a:86:a4:a7:d3:8d:e3:3a:fe:64:71:bb:c2:02:c2:f6:d8:
         9a:a2:6a:25:22:df:72:39:b8:d1:47:c5:f5:d5:ea:09:a3:48:
         59:b7:fa:50:40:12:f6:c9:c9:b1:20:49:a5:0d:9c:bb:eb:92:
         d6:be:76:f9:e1:fc:78:df:a8:5b:f5:93:26:73:fc:eb:07:e7:
         bb:2f:b2:99:96:09:cd:48:b3:cb:a2:2a:21:23:14:b8:82:ca:
         dd:08:06:cb:b7:72:e5:b2:30:55:8f:a3:24:7a:5c:5d:ab:cd:
         0a:af:ad:da:27:33:45:d0:45:16:b4:2b:a5:04:ca:97:ca:37:
         c6:0b:b9:2b:10:a1:70:5d:63:6f:f5:48:39:af:1f:39:14:26:
         71:d3:2a:ff:eb:ba:12:9a:7e:55:ea:65:e2:af:43:c8:d7:06:
         ff:65:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:42 2026 by rpki-client