Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
File:                     1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa (raw, json)
Hash identifier:          BxSFlP+oNHbsAyNcSXVgE9H5fs1dGjIprmlhsfIqQPY=
Subject key identifier:   B9:F1:50:46:E7:8A:78:6F:6F:02:16:1B:54:F1:CD:6E:30:D8:64:25
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584F3E47EDA51183CB564741C8A0
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ed:a5:11:83:cb:56:47:41:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=e1cad00d-6fae-4a1f-ba20-9d107ee5e681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:de:b6:2e:88:ce:e9:15:bb:be:c6:0f:d6:
                    10:0e:c6:e6:ba:7a:58:83:cd:6c:a4:bb:7e:33:78:
                    8a:fa:4e:f8:53:d4:6b:fc:74:a7:19:ff:d0:12:96:
                    32:02:01:c0:1c:27:79:0f:7e:3e:90:b5:05:00:2e:
                    3c:68:7d:28:c6:e7:f0:e7:10:10:9e:48:c3:0d:f1:
                    bb:7c:db:25:47:e3:57:8c:21:4a:1a:b2:a2:e8:7f:
                    ae:3e:02:ab:04:71:78:d2:70:a2:cd:1b:ed:93:a5:
                    10:9c:24:b1:58:11:8e:e9:ad:28:04:17:e9:8d:53:
                    85:ae:fe:1e:b6:7a:cb:c5:2f:c0:63:5d:58:9b:55:
                    48:e8:d3:ad:d0:7b:15:29:a0:f8:c9:e2:ee:31:a1:
                    49:97:1a:e1:8f:ee:34:01:30:ec:7b:8d:a8:80:b9:
                    e4:db:44:0b:36:f7:4e:e6:d0:80:27:2e:33:9e:47:
                    ad:2f:12:72:c3:70:df:4b:74:8f:78:28:6b:b7:52:
                    5a:71:dd:bd:c5:b2:6d:cb:ce:ea:76:bf:6a:d5:0e:
                    88:22:f2:6d:ff:ee:b0:0b:e9:c0:9b:a2:59:06:cf:
                    af:cf:18:c2:a8:91:f1:14:dc:f7:23:07:43:e9:88:
                    d9:3a:a1:b2:11:14:4c:46:4c:35:49:95:af:a8:ca:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F1:50:46:E7:8A:78:6F:6F:02:16:1B:54:F1:CD:6E:30:D8:64:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:bd:f0:20:b5:b6:bf:5b:6f:54:09:de:60:9f:0c:95:4d:
         06:8e:07:31:10:f2:ac:1e:ac:2c:fc:18:ce:ff:cd:61:fa:5a:
         19:b7:76:7d:18:ca:d5:dd:9d:28:9d:f6:6c:37:8d:ca:04:ea:
         d4:45:d8:f7:71:ff:7f:f2:05:25:ba:1c:32:0b:17:8c:20:fb:
         15:ae:80:32:4a:19:9e:39:9d:9a:ef:d1:8f:8e:34:c6:20:2e:
         10:62:fb:1f:2d:78:25:3e:9d:cb:e3:94:81:12:ed:81:f1:b0:
         b7:9a:c8:f8:e2:5f:c2:10:6d:91:fe:de:5d:2e:78:a0:71:89:
         14:07:1e:e2:a5:64:91:9f:d8:a4:87:2b:cf:10:70:17:23:fc:
         3e:85:9a:50:e0:45:20:11:1e:e4:5e:4b:c5:ce:82:9a:36:fe:
         48:9d:29:6c:32:c8:83:08:e8:1e:6f:7d:bf:cb:c7:b1:ba:ed:
         26:a7:b8:8e:7c:5b:1d:a7:38:4c:b2:0a:49:99:41:a7:1d:42:
         6f:af:db:e2:e4:82:a3:e6:8c:7e:85:46:45:13:8e:bf:21:85:
         f9:49:d5:70:8d:fe:18:2c:59:9f:d1:51:16:0e:da:d1:61:d5:
         49:0e:ef:d0:ec:de:65:31:9f:24:b5:c3:6b:f1:d4:6f:85:5f:
         69:16:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:38:55 2026 by rpki-client