Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/43a01b03-5cb7-387c-a99b-5cf90d1e0450.roa
File:                     43a01b03-5cb7-387c-a99b-5cf90d1e0450.roa (raw, json)
Hash identifier:          ZC8d0FwAdHWRuzZzoc2verPshHpLGinIjCWRg8mMbeU=
Subject key identifier:   3D:BA:E5:AD:AA:96:A0:CC:65:02:C0:ED:A2:72:C4:28:0A:AC:FF:50
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F2B00A3C89CF0D8CB9A228300
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/43a01b03-5cb7-387c-a99b-5cf90d1e0450.roa
Signing time:             Mon 14 Sep 2026 03:16:30 +0000
ROA not before:           Mon 14 Sep 2026 03:16:30 +0000
ROA not after:            Wed 11 Nov 2026 15:09:54 +0000
asID:                     142240
IP address blocks:        45.43.198.0/24 maxlen: 24
                          104.247.218.0/24 maxlen: 24
                          160.202.106.0/24 maxlen: 24
                          216.115.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2b:00:a3:c8:9c:f0:d8:cb:9a:22:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 14 03:16:30 2026 GMT
            Not After : Nov 11 15:09:54 2026 GMT
        Subject: CN=67666588-701b-4341-a37a-0172ae0a9f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:1f:a9:9b:96:de:4d:9d:f4:47:8d:62:08:
                    ef:1c:be:c0:50:77:ed:db:74:17:4b:2e:04:d9:10:
                    1c:1e:61:3c:51:77:b2:8c:91:67:ce:42:32:98:37:
                    0e:b5:0c:78:b3:ab:83:d6:13:45:2e:b4:10:d6:9e:
                    77:83:7e:7a:d4:41:e0:b3:00:7d:24:01:c4:75:0d:
                    68:fe:ac:73:80:54:59:72:cc:43:51:b7:fe:fa:c4:
                    3a:f7:bd:e3:2d:ea:43:d6:43:4c:32:7b:19:54:6a:
                    c8:38:b9:01:e0:60:09:5b:7e:2c:d4:9c:44:d9:41:
                    4f:4f:60:73:e6:2d:27:b2:44:7e:ad:b4:0b:ba:64:
                    27:5c:94:3e:0f:f7:50:47:2f:a8:4d:fd:c2:e4:f8:
                    8c:3e:00:f3:5f:3a:a3:cd:5f:d4:4d:a5:3e:6a:5b:
                    9b:18:7a:4d:ef:f2:56:47:76:90:38:f7:6a:3d:3a:
                    45:21:d3:fe:04:4b:52:69:1f:f7:2b:42:8e:24:d3:
                    c8:20:15:2e:40:cc:c6:5d:90:e9:4c:7a:d8:ca:a7:
                    81:8a:e1:1a:33:ad:7d:40:fe:07:1e:38:6e:af:2a:
                    ca:84:d6:72:af:dc:2c:c7:44:ca:24:ee:9c:57:39:
                    e5:cb:5c:71:f7:1f:3e:d2:ec:88:64:ed:59:51:ec:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:E5:AD:AA:96:A0:CC:65:02:C0:ED:A2:72:C4:28:0A:AC:FF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/43a01b03-5cb7-387c-a99b-5cf90d1e0450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.198.0/24
                  104.247.218.0/24
                  160.202.106.0/24
                  216.115.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:d0:02:2b:4a:0c:29:e3:5d:4d:95:38:32:cb:ed:3c:b6:
         e1:43:1c:fe:0b:84:81:19:b9:fb:cb:e2:94:57:b9:f0:8a:06:
         08:f8:3c:90:b0:e9:7d:c4:5d:32:dc:37:d4:4c:11:3f:2c:6a:
         ff:e5:24:cd:fb:9d:7a:5a:01:d0:2f:da:bb:25:75:25:4e:36:
         5a:b4:f8:69:13:38:40:25:66:15:23:64:3d:6e:c8:b6:16:b5:
         b3:42:e1:c2:0f:00:9f:1e:f9:97:25:1d:27:95:41:e6:50:37:
         d7:15:b1:d0:78:28:06:84:c1:18:a6:7d:a9:9f:cc:cd:ea:69:
         a3:4a:cd:0f:9d:c3:90:d6:18:60:23:0e:dd:81:a5:bc:d5:5d:
         9b:dc:43:7c:ab:3b:84:00:2d:c4:e3:26:8f:08:99:5d:11:f3:
         56:da:62:09:9c:bb:2b:9c:1f:4a:a8:72:10:31:fc:6a:d3:dd:
         ec:40:97:d8:db:f0:4c:d8:c7:eb:6b:53:12:51:06:73:82:e1:
         35:e5:09:5e:14:9f:95:3e:da:7c:82:33:7e:2e:f3:37:70:83:
         71:fa:0b:93:df:7c:85:4a:80:2a:26:a2:04:de:ec:d9:2f:c1:
         8d:66:77:3b:a9:bf:a4:bf:d4:38:26:35:5f:0d:a8:87:57:ae:
         6f:ec:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:07:47 2026 by rpki-client