Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
File:                     1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa (raw, json)
Hash identifier:          To6gHenjQWmZHMQ0PL0tngD6FIDO7yeJrcBkVKpDuLU=
Subject key identifier:   18:F0:85:58:42:B0:22:2D:CE:85:BA:42:FB:98:C4:82:62:04:C6:4B
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584D6B5DA9BE83B18A948C959D20
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa
Signing time:             Mon 06 Apr 2026 19:01:47 +0000
ROA not before:           Mon 06 Apr 2026 19:01:47 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     46906
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6b:5d:a9:be:83:b1:8a:94:8c:95:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Apr  6 19:01:47 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=89d38541-b5eb-4a80-96c5-34b3d419f22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:de:1a:c2:84:56:79:f8:0f:38:23:c6:d1:a1:
                    2c:a7:c5:a9:bb:f0:69:4c:2d:84:2a:43:2d:cf:68:
                    83:ca:bd:4f:a7:51:4a:22:9b:70:6c:4b:8d:cf:c8:
                    17:a9:03:d8:a9:a4:94:88:76:e8:af:73:9f:bd:21:
                    b7:61:39:c7:0c:4c:0d:51:ee:94:eb:92:5c:c3:30:
                    c2:b3:6c:65:f4:08:79:b9:6c:58:f3:e6:f9:62:77:
                    98:28:3d:8b:0f:9d:35:84:0e:81:20:8a:d2:7e:10:
                    7a:93:64:18:5c:37:87:2a:f9:5c:4b:00:e4:ee:f4:
                    a0:4e:59:f7:1e:be:fd:39:c5:e0:5e:9e:f0:5b:18:
                    0a:ae:bb:40:ef:e6:87:73:2c:80:44:f7:d3:0c:18:
                    07:1b:76:08:49:47:18:99:df:1a:93:d2:07:63:8d:
                    76:42:b3:77:7f:90:dc:97:31:00:44:85:68:27:d2:
                    8d:5e:ba:b8:2c:60:2e:57:f2:1d:c2:9b:d0:06:d8:
                    00:23:d0:77:0f:5e:6f:a8:86:78:48:46:3b:e7:1a:
                    24:be:e2:ea:91:06:87:55:11:c3:96:58:a3:92:9b:
                    62:ac:a2:55:3a:f0:bd:49:7a:0f:fd:db:77:5f:7b:
                    df:45:c1:bb:0c:b3:ad:a1:db:76:1d:d0:ab:28:6f:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:85:58:42:B0:22:2D:CE:85:BA:42:FB:98:C4:82:62:04:C6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/1c0d804c-7f6b-34e9-a77e-f82c2e93aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:13:46:3c:91:7a:cb:8e:22:ca:2b:aa:3d:b0:77:ec:6a:e8:
         ea:da:99:d5:03:dc:8d:71:df:b1:b7:08:f6:09:c2:dd:35:a8:
         63:e7:2c:79:e1:dd:30:6b:cf:7d:fb:20:1d:92:ae:97:25:c9:
         9b:46:46:d7:71:90:9b:e0:c2:98:38:f9:0d:7b:1e:3a:40:ba:
         0a:94:74:09:07:c9:cd:a5:df:06:e7:5d:e0:16:7d:e3:2f:5f:
         83:fb:b7:2a:6f:52:35:38:b0:a1:ec:f1:65:e5:0a:a7:28:cb:
         3e:bb:a4:e7:31:df:89:5a:be:75:2f:30:40:d6:67:01:2a:b1:
         3e:c2:21:da:31:7c:30:f9:2a:02:94:70:91:70:4b:ad:1d:a5:
         67:e4:38:d1:08:7a:54:4f:e9:29:b3:e9:91:b8:8d:d5:7b:e8:
         23:4b:42:40:3e:59:ab:a8:b3:23:ad:47:b2:42:11:38:3b:d6:
         87:7f:43:b3:9a:5d:d1:17:28:60:37:c7:aa:f6:07:20:c7:c6:
         08:b6:81:4d:4d:9d:66:32:ae:02:18:88:ac:54:27:84:22:73:
         41:c8:7c:11:48:c2:19:e5:4e:b7:27:9e:22:9c:29:6a:00:7c:
         c6:2b:fd:f7:7a:02:20:00:05:98:79:26:95:25:63:ea:2b:f5:
         7a:56:e9:34
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE1rXam+g7GKlIyVnSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzNjZjN2ItOGRlNS00NjIyLTlmM2QtODliYjM2ZTU3
ZGY1MB4XDTI2MDQwNjE5MDE0N1oXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
ODlkMzg1NDEtYjVlYi00YTgwLTk2YzUtMzRiM2Q0MTlmMjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt4awoRWefgPOCPG0aEsp8Wpu/BpTC2EKkMt
z2iDyr1Pp1FKIptwbEuNz8gXqQPYqaSUiHbor3OfvSG3YTnHDEwNUe6U65JcwzDC
s2xl9Ah5uWxY8+b5YneYKD2LD501hA6BIIrSfhB6k2QYXDeHKvlcSwDk7vSgTln3
Hr79OcXgXp7wWxgKrrtA7+aHcyyARPfTDBgHG3YISUcYmd8ak9IHY412QrN3f5Dc
lzEARIVoJ9KNXrq4LGAuV/IdwpvQBtgAI9B3D15vqIZ4SEY75xokvuLqkQaHVRHD
llijkptirKJVOvC9SXoP/dt3X3vfRcG7DLOtodt2HdCrKG+qXQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFBjwhVhCsCItzoW6QvuYxIJiBMZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NTM2
NmM3Yi04ZGU1LTQ2MjItOWYzZC04OWJiMzZlNTdkZjUvMWMwZDgwNGMtN2Y2Yi0z
NGU5LWE3N2UtZjgyYzJlOTNhZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDUzNjZjN2ItOGRlNS00NjIyLTlm
M2QtODliYjM2ZTU3ZGY1LzQ1MzY2YzdiLThkZTUtNDYyMi05ZjNkLTg5YmIzNmU1
N2RmNS5jcmwwHwYDVR0jBBgwFoAUr7+F3/AUj+PGZgjiAAyCJf7vmAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NTM2NmM3Yi04ZGU1LTQ2MjItOWYzZC04OWJi
MzZlNTdkZjUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDaPX4AwQE
kkcQAwQEoE9QAwQEwB6gMA0EAgACMAcDBQAmBsRAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkTRjyResuO
Isorqj2wd+xq6OramdUD3I1x37G3CPYJwt01qGPnLHnh3TBrz337IB2SrpclyZtG
RtdxkJvgwpg4+Q17HjpAugqUdAkHyc2l3wbnXeAWfeMvX4P7typvUjU4sKHs8WXl
Cqcoyz67pOcx34lavnUvMEDWZwEqsT7CIdoxfDD5KgKUcJFwS60dpWfkONEIelRP
6Smz6ZG4jdV76CNLQkA+WauosyOtR7JCETg71od/Q7OaXdEXKGA3x6r2ByDHxgi2
gU1NnWYyrgIYiKxUJ4Qic0HIfBFIwhnlTrcnniKcKWoAfMYr/fd6AiAABZh5JpUl
Y+or9XpW6TQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:13 2026 by rpki-client