Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5e7d7245-5d62-398a-b6fb-57243c437e59.roa
File:                     5e7d7245-5d62-398a-b6fb-57243c437e59.roa (raw, json)
Hash identifier:          s1iHB2eGYih/wJ1SdwVyGwSzuMzGfZAwI5NNKiPWoGQ=
Subject key identifier:   43:75:47:BA:1F:05:E6:E3:8C:01:0D:D0:56:EF:22:E8:0D:12:BA:86
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584CF76F6F2A9C9990872ECB31E0
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5e7d7245-5d62-398a-b6fb-57243c437e59.roa
Signing time:             Tue 24 Feb 2026 06:23:50 +0000
ROA not before:           Tue 24 Feb 2026 06:23:50 +0000
ROA not after:            Mon 25 May 2026 05:23:50 +0000
asID:                     139006
IP address blocks:        169.148.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f7:6f:6f:2a:9c:99:90:87:2e:cb:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Feb 24 06:23:50 2026 GMT
            Not After : May 25 05:23:50 2026 GMT
        Subject: CN=0ba78757-c36d-4922-bb92-6b155f9563fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:d6:51:ea:d2:42:7e:7b:bb:fe:d2:9c:41:
                    51:95:4a:37:0a:a6:f8:31:47:5d:8f:d6:f0:3a:7e:
                    2b:08:0c:8d:48:4f:00:70:45:e9:a0:7a:e2:5b:d7:
                    2c:7d:5d:19:23:e8:51:a7:69:7b:04:06:87:c3:c4:
                    3a:94:6a:7e:eb:ea:7b:59:09:cd:17:e2:4d:4a:84:
                    a4:55:b0:de:b9:f2:f5:da:31:c2:28:5c:5e:36:d9:
                    40:c3:5e:5b:aa:05:e9:fd:7b:77:2a:c3:d4:e2:cd:
                    72:90:72:6b:73:c1:20:9d:d4:cf:6f:c0:51:dc:2c:
                    88:b4:e7:7f:82:26:4d:cc:2d:6f:e4:f8:cc:de:f4:
                    15:ac:d2:cb:77:87:4a:49:1f:1b:a7:5d:0c:f6:90:
                    10:58:02:64:0b:5c:e6:3f:63:c0:39:a7:68:d0:b9:
                    c2:52:ef:06:53:53:09:e2:83:38:81:a1:3c:c2:5a:
                    0c:f6:8e:c6:ad:f2:7c:91:83:9e:9d:39:ff:82:5a:
                    7f:eb:b7:89:e9:1d:cb:01:8b:d1:c4:07:9a:69:4b:
                    40:44:2f:06:6f:55:a8:e0:16:86:4d:5f:90:f6:bf:
                    e0:11:c0:c4:25:ba:da:e3:2b:d7:b8:22:ac:6d:42:
                    0f:13:62:f5:00:51:2e:34:17:78:3f:9c:02:86:a1:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:75:47:BA:1F:05:E6:E3:8C:01:0D:D0:56:EF:22:E8:0D:12:BA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5e7d7245-5d62-398a-b6fb-57243c437e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:77:a0:9f:7e:ca:80:38:8f:60:3e:80:fd:d0:e5:30:4c:
         94:d1:0d:e9:05:73:01:71:fb:b9:c2:ca:7f:bb:85:a4:61:47:
         47:68:ee:4e:fe:12:32:8f:64:87:c5:82:6a:4f:8d:9f:4f:e8:
         41:cd:17:70:f0:38:ba:1e:c3:cb:a8:72:97:88:5a:aa:ce:dd:
         74:69:0b:5e:ea:c1:12:d5:6e:de:de:41:d2:af:cf:ce:2d:2c:
         62:de:b0:c8:a4:4d:3e:33:58:a9:b8:81:3f:dc:28:69:3e:df:
         1e:87:cf:f1:d6:2f:e4:45:fc:92:02:bf:27:4c:85:4a:c5:34:
         83:6e:13:70:1b:1f:9f:bf:ad:bd:60:9d:8a:a7:f0:6c:4b:d4:
         6d:6c:86:04:f2:35:7b:d4:c4:84:85:bc:7e:d2:42:62:6c:2d:
         9f:40:05:5e:cd:d4:26:1c:3a:61:4c:c3:bd:1f:2d:4d:8f:a0:
         35:29:57:95:7f:da:29:2d:30:fd:8b:f9:39:74:ad:60:e4:37:
         96:6e:a3:56:4a:c6:36:a8:56:eb:a0:d1:2c:bc:0d:0a:ee:44:
         67:45:ca:a8:4e:38:a4:50:ea:0c:14:27:ed:70:03:bd:6e:ce:
         2a:a2:f6:d4:7b:e0:9e:eb:60:41:2a:bc:61:51:7b:7c:44:1d:
         5e:ca:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:24:39 2026 by rpki-client