Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60629843-150e-3edf-9672-2b9923d8b527.roa
File:                     60629843-150e-3edf-9672-2b9923d8b527.roa (raw, json)
Hash identifier:          wH5jKvNbRTj2rSVCSeZLhc1afihxztHZ0mGNIqu1v0M=
Subject key identifier:   3F:9D:F2:53:45:98:40:8D:29:9F:89:54:AB:90:25:54:8F:D2:D9:96
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC2151C6734598033ABAD40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60629843-150e-3edf-9672-2b9923d8b527.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:15:1c:67:34:59:80:33:ab:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=51732007-76d2-47be-a1ab-0c7d3191ec4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:c2:4f:4b:77:a8:7f:e5:3a:d1:07:68:db:
                    a3:c1:9b:04:b5:5c:52:a1:e2:2b:52:fc:9d:51:ae:
                    a7:78:49:c3:22:34:fd:28:5e:b3:cf:7f:fc:c0:64:
                    86:f8:95:6b:41:08:5a:f4:32:2d:9f:21:9a:72:ca:
                    e8:4c:4d:99:6a:5c:d2:6f:d0:5b:8e:8d:f0:3a:b0:
                    7c:58:cb:26:0d:00:1d:71:68:39:20:a9:9d:5d:10:
                    63:e5:a9:6e:3d:b7:2e:98:b5:b0:d8:de:45:61:0c:
                    54:6c:e3:69:9d:c4:f8:4c:e5:fb:a2:ee:ef:64:ef:
                    d6:66:f4:8b:25:79:56:b0:2b:de:5a:3a:9c:41:7f:
                    b0:b3:9f:18:f5:80:61:1b:22:5e:45:6c:a7:bc:6e:
                    9f:65:9f:20:f8:6a:0e:df:eb:87:8d:3d:a1:b5:59:
                    5d:a6:54:c6:e5:34:e9:5b:60:4b:76:19:51:ab:2d:
                    75:3b:57:71:fe:7a:5a:2f:38:2f:1c:09:27:e4:bf:
                    fa:17:52:56:4b:5c:f8:0c:0e:98:c9:58:89:03:b7:
                    eb:1b:4d:9d:d6:d5:0b:6b:71:20:96:8e:e4:b2:a5:
                    1e:dd:41:31:4d:c7:7a:e5:84:82:b1:84:d7:22:3c:
                    6e:66:cb:fe:56:05:92:01:4f:92:77:43:c7:eb:a7:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9D:F2:53:45:98:40:8D:29:9F:89:54:AB:90:25:54:8F:D2:D9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/60629843-150e-3edf-9672-2b9923d8b527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:d7:c6:64:2f:a7:79:a1:28:c7:82:fb:50:d3:e4:bd:ae:
         08:44:6c:b4:54:85:46:3b:35:7e:40:de:84:0e:9c:2c:e3:c5:
         dd:cf:03:28:6f:1d:dd:b1:2a:5c:96:8a:d8:59:d9:a5:8d:62:
         72:24:21:1c:c1:7d:41:b1:40:05:74:17:3c:e3:21:80:79:00:
         44:25:ee:82:15:34:0f:3d:2b:b0:67:b7:80:88:f2:1b:14:d8:
         4f:18:65:f7:ca:e1:56:6b:91:fa:2f:25:b2:a3:c3:f9:8c:27:
         10:c0:e1:f2:b5:88:45:85:06:ed:a9:74:f3:4b:b4:1f:37:8c:
         9e:da:01:4e:5d:8a:8b:d3:7a:79:1d:b4:c2:0f:fc:bd:6a:92:
         7c:19:ec:8b:60:41:a6:d3:81:23:c5:ca:6a:4e:f9:9a:42:14:
         a4:b2:65:4c:12:2e:31:43:02:72:83:ca:1f:4d:3c:fc:47:17:
         ba:9a:7b:1f:7b:c0:fd:0b:86:55:8d:60:4a:61:72:ca:fe:43:
         51:e0:f0:f6:ee:8a:a2:d8:82:6f:cd:ab:77:dd:31:bc:cd:fb:
         51:d5:bc:57:21:f1:c9:28:99:98:77:04:13:b2:7f:59:be:e1:
         11:81:91:23:16:da:ee:7c:78:45:e2:20:f9:d8:2a:dc:e4:83:
         2f:79:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:44 2026 by rpki-client