Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/c4e1bc86-027c-3a01-951c-261d23170490.roa
File:                     c4e1bc86-027c-3a01-951c-261d23170490.roa (raw, json)
Hash identifier:          NWSyV6lHpTyi/E2+7oaf1nTkwJsdMKsi100qiBo26UY=
Subject key identifier:   23:31:D0:5F:61:08:15:0C:EB:11:C5:41:AF:B8:5A:2D:37:A2:99:A8
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F4328584EF44CB3B0BB09F8D0856871C0
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/c4e1bc86-027c-3a01-951c-261d23170490.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        45.45.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:b3:b0:bb:09:f8:d0:85:68:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=176656ee-fc0b-42dc-af35-82af12ae4469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:08:14:8c:a5:ec:77:c4:e3:38:56:85:28:
                    8c:15:62:dc:7d:00:73:75:6c:c4:ca:44:b6:6c:a7:
                    52:2e:5c:ae:68:20:0a:73:41:c0:e4:7b:8b:c5:59:
                    92:fb:26:49:d4:24:07:76:de:e1:a3:e7:fd:16:c8:
                    fe:94:a8:79:c2:6a:73:53:d5:e7:db:36:17:68:57:
                    39:ec:60:98:f6:87:07:53:01:44:17:df:c9:ce:9a:
                    ce:26:c6:dc:17:1a:7a:3b:3b:e6:f6:96:e3:4a:f8:
                    35:48:51:38:64:63:e6:9b:f3:fb:4a:28:93:c5:c6:
                    68:a5:18:8c:23:09:1d:2f:d3:c4:a0:64:98:0e:a0:
                    50:11:bd:cf:8e:ea:b3:27:b4:4b:2c:03:92:01:c5:
                    af:47:4b:33:3a:d4:66:5a:ae:46:46:4f:f0:ac:33:
                    d5:d6:72:1e:08:c0:e8:fd:ac:78:48:32:84:04:54:
                    b2:c6:97:e5:9b:33:3d:5e:0b:cc:ac:d4:42:a2:60:
                    22:f4:a1:b3:88:2c:34:0c:29:8b:c5:38:d4:46:1e:
                    65:a5:01:07:bb:17:9a:1d:ce:66:08:88:b5:56:f0:
                    e4:81:75:a1:9e:3e:63:60:bb:bd:c5:14:69:c8:d0:
                    ae:f8:b2:31:a2:48:85:11:3f:16:b1:6d:3f:e1:13:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:31:D0:5F:61:08:15:0C:EB:11:C5:41:AF:B8:5A:2D:37:A2:99:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/c4e1bc86-027c-3a01-951c-261d23170490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:b8:a4:58:98:0d:33:4c:6b:8a:65:47:13:cb:5a:55:ac:
         47:6d:44:ec:bb:64:f8:cf:e0:d1:df:fb:04:dc:83:2d:ac:90:
         94:60:c8:1e:34:f5:b3:3b:b7:46:3c:49:eb:0d:25:ab:27:93:
         33:c1:43:54:4b:e0:d9:6b:0e:e3:51:ad:61:1f:cb:be:3c:e4:
         65:82:65:d6:8f:43:d0:d6:75:2a:41:3d:f2:36:58:2e:5e:1c:
         e1:32:b5:88:77:a9:3b:53:8f:5a:5d:d5:b7:ab:75:8c:11:be:
         94:c0:69:03:ec:5b:28:fb:a3:ff:bd:ec:d7:8a:03:19:1e:88:
         15:07:0d:26:6b:35:c7:6e:c6:95:7f:d5:ca:d6:42:ad:c6:2a:
         d2:23:22:ab:01:2b:e4:b4:25:da:72:77:72:59:08:a6:2c:9b:
         e1:8f:31:12:50:02:9e:5e:fa:05:67:88:bf:cf:2a:4c:08:69:
         17:4d:35:e4:61:64:08:00:0f:2c:4d:0d:3f:5d:33:23:7b:dd:
         f6:e1:f3:b9:55:3f:3c:53:2c:3a:82:c4:4d:84:d5:b4:eb:8e:
         bd:44:8b:20:61:92:6a:51:a0:3d:ca:fd:32:eb:48:0d:63:c5:
         ad:6b:d6:1c:89:c0:7d:18:8f:cc:9b:14:22:7a:11:f4:cb:99:
         a6:0f:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:29 2026 by rpki-client