Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f90e97-b2f3-339f-8c64-28137f78fbb4.roa
File:                     45f90e97-b2f3-339f-8c64-28137f78fbb4.roa (raw, json)
Hash identifier:          yaI1vk7qDIE1oigqe6rhA4VqHm3XOCr09PvCxikSW1k=
Subject key identifier:   82:A8:ED:12:AB:73:91:93:03:DA:0E:AB:A9:82:7C:48:D4:03:01:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78C9B3525FA2FD24AAA6050
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f90e97-b2f3-339f-8c64-28137f78fbb4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20214
IP address blocks:        75.146.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8c:9b:35:25:fa:2f:d2:4a:aa:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e2d0e0a3-1000-46ec-8ba8-ce65972dda54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:6b:80:19:d8:fe:de:c2:ec:c6:34:e8:ce:
                    99:8d:a7:ea:a8:3c:f0:4f:a0:80:b1:dc:5a:0e:dd:
                    e7:b6:c8:fa:fd:8f:58:9c:08:eb:62:08:90:97:15:
                    78:9c:18:54:b0:3a:e7:33:c8:91:f4:e2:db:f9:c5:
                    92:bd:ac:c2:3f:0e:f5:d5:fb:f3:34:d4:d9:58:0a:
                    2a:4b:da:9e:f4:80:6c:e6:49:55:aa:ad:db:58:63:
                    16:c8:bf:08:19:26:5f:31:32:64:aa:50:8e:b4:9d:
                    e0:f0:d2:ea:6a:67:63:85:fb:51:90:b4:64:6c:92:
                    c5:0a:53:9d:db:7a:20:ca:67:8f:71:73:d3:a0:40:
                    db:5b:d3:69:9d:50:8c:57:8a:b7:86:84:81:94:03:
                    aa:52:a4:1b:49:de:20:92:59:e9:0b:9c:a0:59:2c:
                    30:78:f2:57:4d:38:5e:f3:69:9e:f2:29:a0:63:7c:
                    c6:b0:ea:dd:ce:4d:c1:cc:20:ba:0c:24:cf:20:19:
                    cf:d9:e2:27:04:54:dc:20:20:b0:1e:d0:04:c1:ac:
                    af:5e:3e:06:8c:d3:1d:2e:57:92:0f:bd:12:b4:5b:
                    79:57:fe:c4:d4:70:75:7a:50:f6:ae:b7:60:b4:78:
                    02:29:5a:07:8b:8d:4e:ef:c1:cb:90:a7:96:5a:cf:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:ED:12:AB:73:91:93:03:DA:0E:AB:A9:82:7C:48:D4:03:01:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f90e97-b2f3-339f-8c64-28137f78fbb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.146.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:ab:2f:9a:d2:41:90:68:df:57:18:69:1d:6c:3d:02:21:
         b2:6b:2c:a5:22:ca:65:f1:dd:ac:5e:d4:53:16:83:ad:7e:bd:
         b5:89:83:7c:73:45:4b:2a:c4:df:b1:cf:71:44:56:b1:2e:85:
         f1:a2:6c:fc:80:01:c6:9f:14:78:fc:59:75:e5:ec:73:58:b5:
         a9:4d:b5:59:7b:61:6e:2d:da:25:5b:8d:d9:34:80:94:39:f3:
         98:e1:1f:82:4f:14:13:96:0b:9b:3c:ea:80:fd:5a:07:20:c6:
         da:63:1d:1e:c0:73:33:d4:55:80:dc:6d:20:50:7a:72:ed:be:
         b6:42:f9:8d:fa:3f:6a:7a:ff:0b:9d:f1:39:74:e5:67:85:96:
         e6:72:f3:93:26:a1:dd:e8:f6:eb:5a:dd:0e:54:21:ae:e6:ee:
         a1:9f:1c:78:9c:ba:87:d9:ba:bd:8e:07:d7:8e:ab:4d:7a:a8:
         94:86:3d:65:4c:94:43:16:62:80:97:55:86:e9:a9:e9:42:c2:
         16:0f:a9:30:ec:37:79:52:87:7a:10:39:02:42:0e:4c:4b:ed:
         57:97:a1:ad:0b:cf:2c:56:38:9c:94:29:1c:27:69:20:05:eb:
         9f:12:03:d2:8a:ff:87:0b:09:18:ea:2b:6b:3f:20:e9:c2:45:
         78:9f:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:54:55 2026 by rpki-client