Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33127d35-0212-3a07-b419-8922ec5e0c69.roa
File:                     33127d35-0212-3a07-b419-8922ec5e0c69.roa (raw, json)
Hash identifier:          umaOdFeRQ2m3nFHWMI2zsffZA7oV1R7We41RJtbfFIw=
Subject key identifier:   50:E7:63:A7:0E:60:64:F0:6D:70:68:3D:7A:EE:95:10:93:08:05:18
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA1D5553FA29E74CD4A00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33127d35-0212-3a07-b419-8922ec5e0c69.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        152.45.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a1:d5:55:3f:a2:9e:74:cd:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=4e5aff67-c4b9-4d90-927e-7edc8e5f872c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:f5:af:2e:5e:1e:11:c9:b6:92:89:6d:8b:
                    87:29:10:be:6e:92:aa:fd:b9:b7:27:dc:ec:92:22:
                    05:79:f4:4e:d9:5c:ea:da:b2:6a:a3:4b:07:f0:7b:
                    ba:d4:32:9d:bf:0b:92:13:91:89:15:1c:bf:d5:18:
                    ad:dc:f1:4a:23:c3:62:63:df:7a:b3:3a:64:a3:6f:
                    ab:27:e9:ce:f9:b8:1a:03:3e:d0:29:cc:99:24:8b:
                    e0:89:58:70:20:d5:05:2f:9b:f8:c9:a8:19:de:6b:
                    cc:f1:25:f1:86:6d:51:44:3e:a6:a1:09:5f:8c:a5:
                    35:d5:3f:25:b8:6c:f1:6e:aa:4f:8a:df:b6:28:08:
                    2a:43:2e:ac:94:1d:a9:18:72:4e:ae:ac:7a:63:3d:
                    42:1d:b2:94:98:34:48:15:0f:6d:83:8d:c3:19:9d:
                    33:d7:16:47:a6:80:09:8b:a7:b6:a1:f2:05:1a:e1:
                    a9:05:8e:cf:27:93:df:ef:08:fe:05:1c:8c:da:7d:
                    6f:1a:2c:dd:94:36:4e:f2:4c:1c:47:e9:70:ab:1f:
                    21:d1:74:32:6a:d5:13:80:8d:d3:f2:8e:8f:74:39:
                    6f:da:18:e9:62:92:e1:34:f4:ef:57:5d:5b:67:bd:
                    ee:0c:68:71:df:25:56:41:33:cb:0d:e6:7a:9d:45:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E7:63:A7:0E:60:64:F0:6D:70:68:3D:7A:EE:95:10:93:08:05:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/33127d35-0212-3a07-b419-8922ec5e0c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:8e:d7:56:07:35:fc:49:fb:7e:89:b3:6a:ce:31:fe:6e:
         7f:c9:55:21:bb:b2:26:03:8e:b9:34:89:8c:54:e4:e5:22:4d:
         9f:b1:a4:fb:cf:cd:44:5b:c0:27:43:33:56:87:cc:83:f8:0f:
         c4:15:46:e7:38:12:df:3d:04:ee:18:12:c8:6c:0d:ee:e3:e0:
         b4:15:72:b2:05:c4:cd:c1:53:40:e1:24:b9:73:cc:a8:1b:06:
         3e:0c:ff:c4:c3:9f:38:86:cb:a1:a2:3e:0b:9e:00:38:60:0d:
         de:f9:bd:97:3e:4b:4a:4b:17:71:40:f7:6a:28:51:eb:66:18:
         47:0b:0d:81:a3:ba:40:c7:83:6a:5b:cd:01:0e:7f:af:f7:6b:
         71:50:7a:93:34:9c:e9:eb:15:9e:7a:bf:d6:b3:65:b4:92:4f:
         6e:d7:9d:30:d2:f7:d9:30:3e:0f:2e:09:da:45:1a:90:e0:b4:
         1c:df:e0:09:bd:2b:0c:c2:e5:8a:58:dd:79:bd:25:1b:36:0d:
         9c:fe:1a:68:ba:3f:61:fa:37:a7:a3:43:20:d2:a9:03:ae:63:
         b0:45:bf:99:3e:dd:47:cd:0c:3c:e4:08:f5:a6:ab:8e:5d:1c:
         6d:28:ed:d0:00:0b:2c:cc:27:36:07:2d:28:6d:c3:ec:83:33:
         2d:f7:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:41 2026 by rpki-client