Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa
File:                     20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa (raw, json)
Hash identifier:          ijxllN30sC3k6xVYPiyMdleekzbHNZPgj0ngmYzys84=
Subject key identifier:   C0:07:64:02:ED:DA:13:81:D0:92:A5:56:C4:6E:26:CB:AE:63:FF:F4
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F0566816FB36A220F3C1DB480
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa
Signing time:             Mon 31 Aug 2026 16:01:02 +0000
ROA not before:           Mon 31 Aug 2026 16:01:02 +0000
ROA not after:            Sat 24 Oct 2026 17:54:15 +0000
asID:                     219427
IP address blocks:        45.43.218.0/24 maxlen: 24
                          104.166.77.0/24 maxlen: 24
                          104.166.90.0/24 maxlen: 24
                          104.166.94.0/24 maxlen: 24
                          104.247.211.0/24 maxlen: 24
                          160.202.110.0/24 maxlen: 24
                          162.248.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:66:81:6f:b3:6a:22:0f:3c:1d:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Aug 31 16:01:02 2026 GMT
            Not After : Oct 24 17:54:15 2026 GMT
        Subject: CN=62f5212a-72d7-4f13-ab45-ac202abb0157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:af:ae:c8:f5:f8:51:33:84:16:df:5b:ca:
                    3e:41:0c:35:a1:fb:3d:ac:20:88:40:67:ba:84:32:
                    ce:37:23:e4:6b:29:9d:c0:af:8c:a7:99:6e:96:91:
                    1e:4f:8a:10:eb:93:cc:08:e1:4f:4d:dc:cf:f2:59:
                    b8:c4:60:09:30:ee:37:dd:8c:c6:a9:58:c8:7c:b5:
                    f8:16:63:47:1b:21:1d:2f:a4:da:05:9e:c9:38:6b:
                    04:06:7c:9d:33:10:b5:d6:9b:55:70:54:68:15:9f:
                    37:f4:ed:eb:fd:4d:4e:28:fb:4b:fe:58:49:1a:5f:
                    50:22:13:ec:bc:85:45:66:db:9b:85:8b:be:8d:af:
                    13:a3:9c:57:a3:e7:a4:a8:61:fc:c0:1d:f1:31:69:
                    13:5a:da:ab:bc:89:ee:63:38:f1:d0:98:78:47:dc:
                    dc:c5:ab:68:69:a9:b0:ae:ba:ed:ee:97:96:6b:40:
                    08:63:e0:35:5f:65:9d:f5:18:7a:e4:f2:d5:f6:2e:
                    01:bb:b8:7b:b1:02:35:30:eb:0e:ea:c9:a6:7f:2d:
                    16:2c:1c:c3:15:1e:23:a9:47:27:2c:d0:90:1a:ec:
                    39:74:c3:61:32:6e:65:3d:ca:8b:47:68:d3:a4:f7:
                    9f:46:cd:36:10:84:c8:3c:94:4a:90:af:2a:0e:c7:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:07:64:02:ED:DA:13:81:D0:92:A5:56:C4:6E:26:CB:AE:63:FF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.218.0/24
                  104.166.77.0/24
                  104.166.90.0/24
                  104.166.94.0/24
                  104.247.211.0/24
                  160.202.110.0/24
                  162.248.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:cf:bc:1d:34:9f:cf:07:44:b1:0c:ff:3a:89:32:e7:95:
         89:7f:c7:bc:47:6c:97:af:d8:87:bd:02:eb:4d:6b:26:cd:07:
         a6:84:02:ff:29:c7:9d:20:a1:7a:93:46:32:a9:66:61:05:40:
         a0:12:66:e5:48:0a:ea:4e:91:60:1e:05:5d:18:53:de:27:45:
         b8:f7:9d:57:14:fe:d5:b1:d6:4f:37:16:cc:1a:08:2e:df:80:
         30:b3:20:b3:fd:ae:b1:19:93:69:f2:fd:b9:b5:0c:04:9c:bf:
         ae:e1:39:95:1e:2c:f1:1b:c3:74:9e:1b:00:46:f2:88:89:b7:
         74:c6:d9:3b:b5:ac:f0:2f:72:8e:a2:a2:da:39:4d:d4:16:8a:
         89:4c:ce:00:2f:13:0a:59:9f:b3:56:5d:89:cb:3e:85:c7:e7:
         94:06:86:4e:f7:25:dc:32:4c:6c:7a:31:f1:ef:c0:78:ca:af:
         f6:0b:15:ef:1c:30:06:87:cc:c9:41:4c:0a:1f:0b:a5:7e:0d:
         1f:92:31:00:40:90:e0:56:dd:7c:1d:06:c8:3d:f7:9d:c5:61:
         b9:2a:2e:7f:e1:1c:63:65:b1:0c:75:7a:08:ca:8e:2f:0d:b3:
         70:b4:f5:a3:5e:4c:80:12:6c:1a:34:69:82:e8:b8:ea:f8:ef:
         8c:e0:09:f1
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE8FZoFvs2oiDzwdtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDgzMTE2MDEwMloXDTI2MTAyNDE3NTQxNVowLzEtMCsGA1UEAxMk
NjJmNTIxMmEtNzJkNy00ZjEzLWFiNDUtYWMyMDJhYmIwMTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjImvrsj1+FEzhBbfW8o+QQw1ofs9rCCIQGe6
hDLONyPkaymdwK+Mp5lulpEeT4oQ65PMCOFPTdzP8lm4xGAJMO433YzGqVjIfLX4
FmNHGyEdL6TaBZ7JOGsEBnydMxC11ptVcFRoFZ839O3r/U1OKPtL/lhJGl9QIhPs
vIVFZtubhYu+ja8To5xXo+ekqGH8wB3xMWkTWtqrvInuYzjx0Jh4R9zcxatoaamw
rrrt7peWa0AIY+A1X2Wd9Rh65PLV9i4Bu7h7sQI1MOsO6smmfy0WLBzDFR4jqUcn
LNCQGuw5dMNhMm5lPcqLR2jTpPefRs02EITIPJRKkK8qDsewZQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFMAHZALt2hOB0JKlVsRuJsuuY//0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvMjBkNzhhM2UtMDY5NS0z
NWQyLTkyMzctMGQ4YzhlYWI1OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALSvaAwQA
aKZNAwQAaKZaAwQAaKZeAwQAaPfTAwQAoMpuAwQAovjWMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGijz7wd
NJ/PB0SxDP86iTLnlYl/x7xHbJev2Ie9AutNaybNB6aEAv8px50goXqTRjKpZmEF
QKASZuVICupOkWAeBV0YU94nRbj3nVcU/tWx1k83FswaCC7fgDCzILP9rrEZk2ny
/bm1DAScv67hOZUeLPEbw3SeGwBG8oiJt3TG2Tu1rPAvco6ioto5TdQWiolMzgAv
EwpZn7NWXYnLPoXH55QGhk73JdwyTGx6MfHvwHjKr/YLFe8cMAaHzMlBTAofC6V+
DR+SMQBAkOBW3XwdBsg9953FYbkqLn/hHGNlsQx1egjKji8Ns3C09aNeTIASbBo0
aYLouOr474zgCfE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:47:50 2026 by rpki-client