Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/79e05093-459b-363a-9bf8-6b23fb61a8f3.roa
File:                     79e05093-459b-363a-9bf8-6b23fb61a8f3.roa (raw, json)
Hash identifier:          6c+DXlsXDq0LM9VxdctqyQfDDZvsVTWPtbI+gfL1qcQ=
Subject key identifier:   78:C1:23:C5:44:FD:73:31:C7:0A:8B:1F:45:E8:4F:33:AD:7B:DF:6E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584CEBC2143FCC611B40F2835B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/79e05093-459b-363a-9bf8-6b23fb61a8f3.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     81
IP address blocks:        152.14.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:14:3f:cc:61:1b:40:f2:83:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=411e9502-7dba-41a3-9407-450aefc40f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:75:fd:ba:99:d7:c5:50:ae:34:b1:84:0b:e0:
                    e2:55:5f:8b:d5:2c:c2:08:9e:56:1a:28:37:8e:32:
                    eb:16:b9:62:67:da:f5:87:50:0b:a5:67:b6:18:73:
                    cd:55:30:ba:c5:a5:9c:0d:41:37:d6:59:33:f4:92:
                    22:56:38:c6:cc:6c:95:e5:32:d3:9a:5e:a8:ff:fc:
                    b6:b8:37:4f:f4:a3:ba:55:a1:0c:7a:79:23:f6:89:
                    5a:90:56:64:17:fa:3f:7c:2e:28:07:78:c2:97:06:
                    cf:f4:0b:19:7b:af:21:91:08:50:ce:43:e3:09:99:
                    11:92:69:50:80:fb:f7:62:31:76:55:c0:f7:bd:c8:
                    ce:0f:15:b5:5a:7b:86:8d:ae:44:c2:70:b2:7a:45:
                    60:49:7f:69:89:69:1a:2b:eb:58:82:54:65:08:36:
                    d8:f2:40:28:ea:c5:69:63:89:45:4f:1d:52:12:4b:
                    18:14:a7:a9:04:65:94:4c:aa:8d:5f:d3:31:96:51:
                    52:cf:dd:31:d4:8a:bb:11:a4:c4:15:60:e9:2c:0d:
                    e3:39:d1:c9:0d:40:65:fd:cf:dd:ba:f8:5c:a9:88:
                    d4:1e:3d:0b:bf:52:67:da:d3:dc:42:e3:d8:20:50:
                    25:ce:0f:b4:af:62:d2:5b:88:03:b3:31:38:c4:a7:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:23:C5:44:FD:73:31:C7:0A:8B:1F:45:E8:4F:33:AD:7B:DF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/79e05093-459b-363a-9bf8-6b23fb61a8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:a7:0a:26:ea:04:20:51:fa:01:f5:37:6c:c5:95:28:7a:
         fd:e1:cc:e5:ac:7f:7a:2f:70:72:51:16:e6:d6:45:4f:d5:09:
         82:a0:27:5e:88:b1:0a:2d:99:99:36:81:73:c9:f8:a4:ad:a1:
         f2:16:97:b1:f7:65:1c:51:45:5e:90:e2:56:a5:d0:a1:c1:e5:
         22:6c:9f:af:fd:59:3f:b3:96:8e:47:1d:aa:aa:4a:6e:f0:59:
         d3:c0:a9:7e:b6:89:54:55:24:bf:75:b2:c2:2d:01:40:f4:72:
         d6:0d:e5:e8:7a:64:20:ce:4a:bb:a5:52:07:0d:1a:ca:2c:3b:
         be:06:f3:af:14:68:76:27:8d:d6:b6:dd:92:b2:7d:a6:5d:fe:
         d2:04:26:3c:31:2e:77:6d:85:75:9a:a8:38:db:68:9c:11:61:
         d8:6b:37:15:ad:49:28:a8:87:03:bc:1c:6a:ec:d5:40:3c:42:
         7f:cc:fe:33:6e:13:f0:ff:8a:bb:88:94:26:11:f5:ac:f5:a4:
         44:48:b7:e6:ea:70:30:bd:c5:c9:d8:32:fc:30:dd:c3:28:c6:
         58:aa:98:28:00:96:03:1d:e1:af:f4:0a:14:1c:1f:f6:1d:c9:
         85:45:1d:b8:05:a5:d1:ec:4d:d2:79:8c:52:6e:08:e3:88:04:
         59:b0:7f:6a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzrwhQ/zGEbQPKDWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
NDExZTk1MDItN2RiYS00MWEzLTk0MDctNDUwYWVmYzQwZjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinX9upnXxVCuNLGEC+DiVV+L1SzCCJ5WGig3
jjLrFrliZ9r1h1ALpWe2GHPNVTC6xaWcDUE31lkz9JIiVjjGzGyV5TLTml6o//y2
uDdP9KO6VaEMenkj9olakFZkF/o/fC4oB3jClwbP9AsZe68hkQhQzkPjCZkRkmlQ
gPv3YjF2VcD3vcjODxW1WnuGja5EwnCyekVgSX9piWkaK+tYglRlCDbY8kAo6sVp
Y4lFTx1SEksYFKepBGWUTKqNX9MxllFSz90x1Iq7EaTEFWDpLA3jOdHJDUBl/c/d
uvhcqYjUHj0Lv1Jn2tPcQuPYIFAlzg+0r2LSW4gDszE4xKd4bwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHjBI8VE/XMxxwqLH0XoTzOte99uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNzllMDUwOTMtNDU5Yi0z
NjNhLTliZjgtNmIyM2ZiNjFhOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAK0GnCibqBCBR+gH1N2zFlSh6/eHM5ax/ei9wclEW5tZFT9UJgqAnXoix
Ci2ZmTaBc8n4pK2h8haXsfdlHFFFXpDiVqXQocHlImyfr/1ZP7OWjkcdqqpKbvBZ
08CpfraJVFUkv3Wywi0BQPRy1g3l6HpkIM5Ku6VSBw0ayiw7vgbzrxRodieN1rbd
krJ9pl3+0gQmPDEud22FdZqoONtonBFh2Gs3Fa1JKKiHA7wcauzVQDxCf8z+M24T
8P+Ku4iUJhH1rPWkREi35upwML3Fydgy/DDdwyjGWKqYKACWAx3hr/QKFBwf9h3J
hUUduAWl0exN0nmMUm4I44gEWbB/ag==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:47 2026 by rpki-client