Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa
File:                     768e78e5-c604-3310-be60-7daa7a1eafb4.roa (raw, json)
Hash identifier:          +msLN6/Uu6/j2Z2BKFxI/LTxZ1hThUIEd2maC8vNeKs=
Subject key identifier:   47:91:B7:1E:CD:B4:DE:72:62:C3:20:EA:10:E7:42:30:B2:95:75:6B
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584F2C2259BA5CDAAF2ABDC2A680
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        208.89.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:59:ba:5c:da:af:2a:bd:c2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=53c038b6-f6a5-4727-809e-2730f2a9cfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:c7:b5:a0:29:d9:bd:4f:ad:54:5b:5d:af:
                    06:9a:04:2c:0e:7c:59:8b:6f:6b:3c:c0:ac:2b:dd:
                    11:d4:36:dc:b7:84:9d:4d:cd:fb:ef:cd:70:e4:25:
                    e0:2b:7e:37:fe:bb:b3:db:34:11:33:04:c7:75:98:
                    5b:bf:7d:fd:e9:91:cf:0b:7a:c5:90:a2:50:96:1d:
                    2c:e3:65:34:73:f1:08:c4:7d:0a:89:de:43:bd:48:
                    0a:35:78:2c:75:f7:5b:ef:be:35:83:ec:14:c6:e0:
                    5e:ed:55:56:fa:34:43:28:e4:df:86:6e:2b:d7:a4:
                    d0:60:ad:33:5d:39:5b:c1:a3:57:b5:6c:8d:df:ba:
                    18:fc:6e:c0:8f:b6:bd:94:a9:e6:b8:6f:09:b4:72:
                    88:9e:34:f4:c2:8b:d7:ba:25:c8:dd:1c:b3:53:84:
                    3e:15:5b:00:2a:dc:e4:7b:38:1c:5c:66:b2:56:87:
                    fa:b9:45:26:5d:67:66:dd:f0:75:b9:63:0a:8d:95:
                    29:d2:4f:4f:cf:23:38:2f:0b:ec:70:54:56:97:d5:
                    73:82:82:4d:30:91:19:4d:41:8a:ce:24:fc:c5:b8:
                    57:47:e9:34:19:e9:4b:5b:ff:42:cf:dc:ad:e7:d7:
                    3d:6c:5a:2d:37:6f:bf:45:b6:17:11:00:7a:1e:16:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:B7:1E:CD:B4:DE:72:62:C3:20:EA:10:E7:42:30:B2:95:75:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:8f:be:04:db:55:7b:5c:4f:0d:19:53:db:b2:40:d1:22:
         5a:9e:88:96:e5:1c:02:58:d2:53:03:16:9c:9a:f1:98:19:86:
         8c:95:e4:4c:18:a1:87:df:f1:9b:d0:c5:e3:2e:e7:0f:ed:fa:
         58:df:48:00:bc:82:0e:46:8d:c8:1e:d4:bf:0f:57:67:f8:b6:
         8d:12:14:e8:a5:44:7a:09:87:7a:11:68:69:07:28:ba:5c:85:
         df:43:da:62:d8:53:dd:4f:8f:cc:7b:f5:0d:54:d8:b4:95:fc:
         99:9d:c7:76:d6:06:8b:1f:4f:cb:99:c0:b6:55:1c:b1:b8:e6:
         20:b4:ed:e4:77:d1:e3:e3:bb:0e:e5:57:d3:ce:d2:7a:aa:55:
         1c:df:fa:66:a8:7a:91:65:49:b5:cb:d2:aa:ce:39:57:76:07:
         e9:4f:6e:25:50:fc:09:5e:b1:d9:e2:4d:fb:83:f9:0e:53:34:
         23:20:67:05:48:f0:ad:f2:61:13:48:71:09:a3:81:b6:79:03:
         f6:9b:57:18:59:6a:91:cc:98:12:09:d3:da:ed:a1:cf:2f:a5:
         ab:8a:5e:20:ab:84:72:84:55:0a:d4:98:b5:ee:bb:f4:ad:31:
         30:63:fc:fe:f5:ab:37:9d:f2:ac:c0:d6:b4:4d:b3:5e:cf:5f:
         81:8b:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:04 2026 by rpki-client