Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/be99f798-39d6-38ef-b8c1-647a00eac4d5.roa
File:                     be99f798-39d6-38ef-b8c1-647a00eac4d5.roa (raw, json)
Hash identifier:          0uYQZgeKJvRh/sYl3F7v5JgoaTx3hSZnIPLpFip66x0=
Subject key identifier:   5B:B0:37:C6:1F:44:18:6C:B0:3E:9B:E4:DA:BA:F8:95:9B:68:87:2F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99CAB59D0C05F0B8E4C8F08
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/be99f798-39d6-38ef-b8c1-647a00eac4d5.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        152.44.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ab:59:d0:c0:5f:0b:8e:4c:8f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=0a18bdf6-b1b7-4af4-be29-ba6bb0fe31b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:60:f8:33:10:87:d5:84:0b:8f:62:95:7f:65:
                    fa:85:5e:b6:b0:a0:89:74:7c:a7:11:77:bc:36:0d:
                    02:fd:fe:8d:c0:16:8a:4c:2e:ee:68:5e:b6:f6:60:
                    22:6d:4e:5e:95:61:6a:5f:cd:5b:13:2b:dd:0b:b5:
                    0f:8b:ab:04:3b:e8:1c:ab:8c:9a:75:68:2e:0e:9f:
                    77:f9:37:53:3e:3c:35:02:22:13:7a:10:a5:66:79:
                    41:40:97:09:d3:40:af:6d:91:a7:fd:19:40:fc:fa:
                    a1:7e:01:1b:c5:46:b7:dc:f7:bb:25:aa:7d:ec:77:
                    e4:05:4c:7f:28:1e:af:b9:40:3b:df:6d:f6:84:9e:
                    9b:ca:5f:ea:ce:75:15:d4:4d:4a:ef:93:86:ca:a3:
                    7f:d6:d6:6a:6f:d6:41:d0:99:62:1a:b4:0d:0e:94:
                    e4:ef:fe:81:9f:78:26:8f:48:4f:23:07:a2:12:54:
                    11:17:84:3a:a3:68:ab:27:e0:a6:0e:84:77:7d:71:
                    c4:b6:c1:13:71:5a:8b:25:7f:65:ac:bb:f5:01:54:
                    da:c2:5e:fa:5b:37:ae:0e:1d:21:4d:fe:1c:da:71:
                    48:5d:d3:10:cf:51:1f:65:7d:83:b4:07:6f:d7:0d:
                    c8:81:cd:b6:32:6c:5a:4e:bf:21:8b:61:34:6e:24:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:37:C6:1F:44:18:6C:B0:3E:9B:E4:DA:BA:F8:95:9B:68:87:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/be99f798-39d6-38ef-b8c1-647a00eac4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:69:13:09:27:5c:29:cb:fc:e3:7d:0e:65:b6:8f:9a:bd:83:
         b0:5c:33:af:6e:92:45:2e:da:a9:09:38:19:85:a6:ab:b3:2f:
         2e:59:6e:19:26:b2:6b:f5:e7:9d:37:a4:55:56:17:bd:c4:ae:
         b1:b9:2a:72:6e:ca:23:03:96:18:88:47:69:50:4b:c8:a0:a4:
         df:29:d0:39:f7:34:3c:7c:93:88:87:59:0b:7b:4b:72:7c:6d:
         33:7b:e9:df:5b:74:13:fe:58:4e:46:32:bc:cf:12:17:ec:06:
         6d:39:65:1e:c6:3e:d2:08:95:78:de:3a:d6:3d:78:80:c8:97:
         be:4e:90:53:8d:d2:c4:8d:4d:db:6f:a0:7b:c7:b9:a2:9a:fc:
         f9:97:fd:05:3c:8d:26:67:2c:6b:5a:97:97:6d:63:01:db:e4:
         36:54:2c:73:67:71:55:5c:55:4b:c2:1f:1c:c8:b6:aa:c5:55:
         b7:a5:5a:2b:59:1d:5b:05:81:21:e0:fa:54:06:76:b3:11:76:
         89:37:ce:cf:2a:23:cd:9f:86:ea:da:fc:bc:ea:38:db:b9:e6:
         b6:9a:90:9f:e1:c3:7f:f0:47:0b:1e:53:b3:d8:02:e6:eb:b2:
         79:c2:ae:99:31:a4:bf:37:34:f0:e6:10:e5:6f:5a:15:d7:83:
         7d:26:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:56 2026 by rpki-client