Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa
File:                     23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa (raw, json)
Hash identifier:          bIMPXt4yLpPEJ71/Yry2FGWttZFveq8rp3PxsnEUogs=
Subject key identifier:   46:1D:B5:CE:DE:74:0E:A1:75:8C:8F:7D:B1:D0:22:C3:2A:12:D0:1D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA2E8ADC7198555BA5D80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.46.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a2:e8:ad:c7:19:85:55:ba:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=4175fa98-c372-4f16-9cec-cf09fe8ca6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:c4:15:2d:70:14:d1:c3:50:2a:88:f7:6b:
                    06:2a:9c:ca:54:7e:30:c9:f3:40:d8:68:3e:25:e3:
                    78:8a:91:c9:ff:22:ce:a4:75:56:d1:cc:cb:9e:ee:
                    34:db:9e:ed:f3:3e:44:33:05:8b:a6:8e:f0:52:52:
                    18:70:89:c2:46:e5:af:2a:97:b4:93:a3:71:08:c6:
                    3f:26:34:76:fa:e8:ef:78:fa:0f:a3:7e:e9:a4:74:
                    65:d0:09:52:80:81:ed:02:71:7d:0f:5a:22:55:d8:
                    ee:5b:7a:75:82:7e:0a:e3:9e:eb:94:24:80:73:1d:
                    80:7a:dd:af:2b:ae:28:e1:f4:8a:52:98:52:b9:17:
                    ec:2f:a0:fd:39:f2:d9:68:f0:8c:f9:70:ed:14:6f:
                    ad:6e:6e:44:b5:e9:84:7d:4c:f0:b0:1e:3c:5b:0a:
                    d8:7e:67:2f:28:97:4a:c5:ef:ed:f5:db:0a:85:57:
                    0f:0d:5d:da:ab:b3:d0:e2:91:51:42:de:d2:03:5d:
                    8d:75:5f:8a:3a:3e:31:36:79:6e:35:db:7d:64:c3:
                    18:9e:0b:82:77:87:4d:ac:ae:5a:7e:47:09:b1:fc:
                    9f:73:38:d6:a4:b0:36:7e:32:6d:f1:72:d2:26:f3:
                    01:68:97:48:73:01:2b:ab:00:33:4e:cb:59:28:52:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:B5:CE:DE:74:0E:A1:75:8C:8F:7D:B1:D0:22:C3:2A:12:D0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23bf4f0d-6ed0-33ea-bead-00bf9a055af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.46.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:0a:98:03:60:d5:fb:58:49:f1:54:66:06:a9:47:9e:f5:
         51:f4:35:01:6d:61:19:f5:92:13:00:ad:04:da:14:3c:66:5e:
         32:17:7c:2b:c0:0d:fa:6a:bf:78:ed:55:98:e1:ea:0c:e4:a7:
         ab:1d:95:b2:02:bd:ef:49:a3:0b:1a:78:ac:16:b2:f1:cc:56:
         2a:ee:3a:1b:9e:2c:24:e9:91:f4:e3:02:69:77:9c:95:b8:4d:
         b6:69:d4:16:a7:61:c4:3c:6d:98:62:c8:c4:99:04:4b:be:24:
         05:ef:ed:ee:d7:c4:9c:3b:fb:30:75:ee:96:16:d4:ff:12:f4:
         f3:de:4a:58:da:f6:95:93:f6:61:92:81:cf:df:c6:17:49:0a:
         7c:a4:e3:c3:bd:c7:e2:fc:ee:62:1a:8d:7e:cb:5d:dd:24:76:
         1f:48:2a:2a:fb:2d:15:13:b8:16:05:30:6f:d3:6f:b5:fb:e9:
         ab:99:5d:30:20:b2:77:84:48:2a:ce:e3:39:07:65:42:a1:ac:
         83:a8:6c:ff:5b:79:b4:09:ec:64:ab:4c:f2:f8:05:92:eb:52:
         cb:79:e1:fa:79:55:ed:a2:05:a4:6f:51:ce:8a:68:c9:aa:73:
         56:35:b1:06:28:fa:00:94:e6:25:d8:51:a1:f6:e2:65:c7:81:
         24:4b:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:44:45 2026 by rpki-client