Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa
File:                     09710c09-3026-3dc9-b2c1-9c603431d534.roa (raw, json)
Hash identifier:          PHsG99M7payM4E07RGY3++AYbFQCcVGUIfcVxpZwup4=
Subject key identifier:   EF:FD:9B:DD:52:A1:22:C4:4D:B6:43:4A:7E:D7:07:6D:82:5C:B2:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CD6D21364F39066B78D47F200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     262287
IP address blocks:        45.39.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:13:64:f3:90:66:b7:8d:47:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=b558036f-69cc-4853-b03e-ec35baa2f4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:18:96:80:f9:0c:f5:e9:dc:c9:05:4e:5e:7b:
                    72:57:10:fd:5e:1f:94:38:a2:cf:56:4f:16:91:39:
                    05:45:e7:6e:7f:47:0e:f6:3e:90:2f:39:0e:e2:d0:
                    bc:fe:1a:d1:b2:79:b5:16:7f:c4:d9:20:fe:d0:d5:
                    af:c4:bf:fe:2f:da:b3:55:8b:19:cf:b2:29:bd:92:
                    2d:29:51:93:08:ee:8c:97:a1:6f:f0:73:1a:5e:57:
                    92:8a:fe:eb:9b:cd:7f:75:42:d7:8c:a6:d0:17:b6:
                    f1:3c:d1:bb:74:2b:8b:f4:21:0d:f8:d7:01:73:a5:
                    4a:a9:10:f1:d4:01:b9:fb:05:5d:4b:64:aa:43:54:
                    f1:14:b7:7f:2e:e3:56:c5:04:81:bc:cb:8a:56:c0:
                    22:70:81:09:77:0c:fb:08:a7:ab:8b:3b:91:93:b1:
                    7b:c3:49:14:ca:0f:dc:75:86:6f:9e:44:ef:dc:2b:
                    38:c2:7d:97:f8:e1:5b:4a:dd:9b:2a:ae:fe:40:bf:
                    c1:ca:65:93:ce:ae:20:73:2f:f9:d4:d4:2d:10:e2:
                    8b:69:5f:60:d4:ad:5d:fd:a5:52:af:f9:b9:a8:f2:
                    25:53:1c:2a:ab:ec:88:5a:8d:2b:38:b0:9f:ca:4d:
                    3a:c5:7e:c7:5b:33:9c:7e:c6:17:71:6c:ec:44:77:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:9B:DD:52:A1:22:C4:4D:B6:43:4A:7E:D7:07:6D:82:5C:B2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09710c09-3026-3dc9-b2c1-9c603431d534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:0f:60:35:21:fc:35:30:43:19:8a:43:8e:fa:11:ac:7f:
         3c:fd:71:9f:42:d4:38:a9:ba:cb:db:fe:e0:9f:48:50:89:66:
         e4:02:6c:bd:42:fe:ed:37:0f:11:f5:64:c5:a6:5c:12:17:ea:
         63:bc:89:a4:7d:94:04:09:ba:d2:cc:4d:ca:b8:14:01:00:e5:
         8b:11:d8:7a:6c:c0:07:b6:f7:c8:41:45:e4:d7:5e:96:74:0e:
         35:fb:26:62:02:19:a8:c3:29:c1:c6:01:cb:1d:0d:32:89:9a:
         21:b5:91:13:39:ec:c7:4c:d6:f4:5f:33:50:3a:31:78:ee:bb:
         a0:c8:18:04:03:b6:01:31:c9:46:20:fb:fd:cd:48:ac:68:a3:
         81:d4:cd:af:0b:7e:05:f8:83:72:24:6b:e6:8b:e3:a3:d5:42:
         39:47:0d:66:cf:f3:82:7a:2c:4d:ae:de:8c:64:6d:31:e0:00:
         2a:91:65:f3:aa:c9:7f:11:4a:54:dd:70:9e:f9:05:84:59:21:
         a7:39:e2:41:23:42:66:95:38:d2:25:20:3e:19:9d:c5:48:67:
         30:18:82:5b:ba:df:ff:8c:00:60:5c:0c:13:c6:07:fe:db:d4:
         e9:89:a5:b2:13:d5:a2:d3:02:2a:ce:18:6d:ce:fe:1b:29:a9:
         21:1f:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:25:49 2026 by rpki-client