Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa
File:                     4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa (raw, json)
Hash identifier:          DfMKZWXy3rr+R60Csf3/h2sq0vfNHEYrZx1BQvbRM3w=
Subject key identifier:   0A:DE:C9:F2:6E:E6:C6:80:9E:CC:20:F0:17:C8:E8:E7:F3:60:76:4A
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584EA7887099B42B5F58B771CC5C
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     56201
IP address blocks:        169.148.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:70:99:b4:2b:5f:58:b7:71:cc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b4947e71-b3f0-401a-b193-c6706fcfa01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:bc:9f:fd:10:da:7a:0d:9e:59:54:9a:af:
                    e8:8a:88:d7:2e:91:3b:19:30:3c:03:5b:e2:0a:14:
                    e1:a5:26:a1:64:7e:0b:76:7d:de:9c:a4:65:b0:c0:
                    bf:73:e1:77:6a:62:85:c3:67:2f:bc:47:92:de:89:
                    5a:2a:b9:96:cd:d1:a6:4b:ae:0f:aa:a8:7b:c1:f8:
                    61:76:90:c8:d6:82:6f:0a:dc:da:a7:56:a4:94:08:
                    53:97:d8:50:0b:ef:c7:21:03:3a:c8:b2:7b:5e:f3:
                    d2:84:cd:69:aa:92:eb:ba:dc:30:4e:f0:6b:06:72:
                    16:3e:80:e4:6e:5f:cd:43:6f:58:8d:e9:26:de:e0:
                    90:31:bd:fe:b1:ab:0f:d3:c5:24:6e:62:45:61:80:
                    7d:9b:39:b5:4c:5f:37:5d:ca:a2:c8:f1:b0:2d:1b:
                    7f:2f:d2:14:ef:00:4f:57:1a:2d:4d:be:a7:2f:35:
                    50:72:82:e9:fc:e5:ff:51:e9:de:fa:de:eb:84:78:
                    f5:06:fb:d8:af:99:ab:2c:7c:46:a6:06:37:8e:c9:
                    a5:cf:f4:bb:c6:d5:98:a1:fe:1a:ee:29:d7:68:68:
                    73:0e:87:d0:2c:36:8e:94:ec:aa:8b:0b:b3:80:a1:
                    37:ae:4b:45:a0:ed:93:98:bd:b7:b4:ed:ce:2e:bc:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DE:C9:F2:6E:E6:C6:80:9E:CC:20:F0:17:C8:E8:E7:F3:60:76:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/4345d46c-0cf0-3c15-89ba-ba4f5d04ebce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:11:ac:e3:59:e2:a4:af:87:ff:cb:cf:d8:e7:63:8a:7b:
         4b:53:91:e8:8b:46:66:50:8d:f3:01:1f:08:37:d2:98:66:4e:
         46:a5:04:11:b2:11:bd:7f:3c:7a:a4:f4:89:a6:53:2e:4b:e4:
         1c:cf:bc:89:01:de:ab:4f:8f:5c:b0:a0:eb:e4:d9:e4:08:ef:
         0a:d2:b7:30:d8:dc:a3:38:70:0b:ec:09:56:63:b8:a6:1d:ad:
         9e:cb:eb:92:78:37:81:41:67:44:1c:68:d3:11:26:db:d8:94:
         0c:01:85:f9:5f:df:0b:17:1a:41:1f:fd:c8:89:e5:bc:14:e1:
         6a:08:42:9b:ea:a4:27:8f:29:97:8b:bd:68:42:55:54:60:b6:
         87:24:0b:ec:52:22:a7:04:f2:ba:93:e6:32:5b:44:2d:82:ec:
         d5:de:0b:61:0a:03:ba:53:70:99:45:63:49:c6:0b:d9:5e:c2:
         5e:20:78:4e:62:72:bb:b6:75:6b:c8:9d:19:ac:82:a5:62:bb:
         52:24:4f:93:27:0c:c7:72:f4:6f:aa:1d:e1:60:57:55:9a:ce:
         8e:4c:26:a9:79:34:6f:e8:62:21:0a:a3:d1:b6:3c:38:f5:bf:
         12:16:98:9f:e3:22:a3:a3:90:78:b2:0a:a7:75:6d:1b:aa:db:
         81:b1:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:22 2026 by rpki-client