Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
File:                     240f9d0d-a17f-35e3-8ade-de3e78530574.roa (raw, json)
Hash identifier:          jHMPzX3Ce/FN3jJV/FQ2pwFGBg1EeG7ogwsWjHUwaOE=
Subject key identifier:   9F:54:D5:4E:FF:FE:89:91:24:F2:7D:FF:14:2D:8B:6F:36:75:39:51
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584CFDE7B1B64D72E39A983E00C0
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     26658
IP address blocks:        45.43.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:b1:b6:4d:72:e3:9a:98:3e:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=419cf236-22c0-4c57-99c4-c478c2573dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:8d:2c:88:f2:d2:68:62:8f:34:48:48:d0:
                    74:81:97:bc:72:a4:66:c8:c0:7a:a0:13:a2:2c:7f:
                    77:59:56:91:7e:26:9b:c4:16:55:e1:bd:c7:b1:6d:
                    72:16:76:13:a0:59:de:77:09:a6:7b:6d:20:84:36:
                    e3:ce:0f:4e:af:74:10:50:f3:ba:26:e1:84:88:69:
                    ad:7f:ab:b7:32:37:e6:ee:23:a8:99:50:66:bc:a4:
                    a4:8d:df:35:53:48:fd:91:18:e6:4a:1f:79:2a:9a:
                    79:7b:ee:6f:06:00:19:40:d3:92:3d:99:56:65:4f:
                    a3:6d:99:52:5d:c5:cb:33:3a:f3:91:a0:30:a2:24:
                    f1:ef:68:f7:71:57:3e:dc:da:9f:e7:9a:72:d8:a3:
                    2e:9d:0f:61:74:a6:7c:e1:41:94:71:39:f3:91:5d:
                    09:fe:84:1e:fc:54:52:aa:ca:25:25:36:3b:6f:d3:
                    8e:09:ae:1f:f3:48:15:e1:25:0e:ea:a6:41:ed:81:
                    ff:a2:fc:6c:41:48:6b:e6:a8:f5:62:40:e0:22:54:
                    36:6a:1b:4b:cc:28:79:06:de:d2:3b:ba:de:cf:75:
                    81:7b:d6:fd:20:ce:4a:1e:ce:66:4d:d1:91:ca:31:
                    88:a7:ff:fe:58:49:35:45:10:bf:5f:38:49:3a:26:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:54:D5:4E:FF:FE:89:91:24:F2:7D:FF:14:2D:8B:6F:36:75:39:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:ad:4c:b2:dd:d7:fc:00:ee:3c:69:44:2a:65:66:b2:f9:
         c0:1d:17:6e:d0:24:d9:fc:0f:dc:99:64:67:c9:ec:ef:30:0b:
         78:cc:d2:49:95:56:ac:9a:e9:19:d9:e0:1c:6e:26:d5:a7:3a:
         af:9e:bd:c5:d8:2e:52:94:29:ec:77:5e:58:bd:f4:72:ef:79:
         e3:3d:b5:38:b2:2f:06:52:06:20:95:60:38:7e:56:cf:a3:0a:
         6f:9a:91:ce:40:0f:be:ee:a1:ae:ae:5d:ec:4f:0c:64:11:33:
         20:26:24:e2:6f:e8:48:98:73:44:b2:b6:77:6b:cc:0b:f1:ef:
         8f:bc:ca:82:fa:23:45:b1:50:81:c9:7b:a4:f0:ae:e0:21:41:
         da:14:6f:5e:f0:15:c7:ef:25:c0:5d:e2:f9:cd:73:df:38:d2:
         d9:c5:34:aa:91:f2:58:50:be:c2:f6:9d:a8:76:60:46:49:9e:
         e3:cf:55:ce:66:64:b6:15:8b:46:21:23:ba:7b:e5:e5:de:76:
         6a:84:8a:58:17:00:64:c9:89:e2:81:80:b4:6c:7d:9d:53:ec:
         6c:f2:ec:ab:2e:5c:13:e0:89:19:ab:d5:11:29:f0:c2:4d:1b:
         f5:52:a2:3b:fc:ea:42:d7:dc:80:9c:d2:ae:99:a7:2c:e1:b6:
         f7:33:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:33 2026 by rpki-client