Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/581959dc-fa58-3578-b3bb-9ba395c26563.roa
File:                     581959dc-fa58-3578-b3bb-9ba395c26563.roa (raw, json)
Hash identifier:          we1ub5XaH2cp3RzfLd9nBsBzzarzsX8vYGfISI3rh7A=
Subject key identifier:   2C:49:45:23:45:03:8C:D7:72:09:BE:9B:BA:2A:E6:67:7A:FD:7E:84
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F3497DA50EDFBA36CF1A36540
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/581959dc-fa58-3578-b3bb-9ba395c26563.roa
Signing time:             Thu 17 Sep 2026 13:43:27 +0000
ROA not before:           Thu 17 Sep 2026 13:43:27 +0000
ROA not after:            Wed 16 Dec 2026 14:43:27 +0000
asID:                     397630
IP address blocks:        45.43.210.0/24 maxlen: 24
                          172.82.161.0/24 maxlen: 24
                          172.82.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:97:da:50:ed:fb:a3:6c:f1:a3:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 17 13:43:27 2026 GMT
            Not After : Dec 16 14:43:27 2026 GMT
        Subject: CN=b841f6b3-c526-4049-9109-ba5c50c30e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:7f:9f:f1:95:90:52:5b:b9:30:ec:00:57:
                    8d:d5:17:d0:d5:f9:1a:e9:48:b9:c1:32:c7:7b:7e:
                    0d:fc:d6:18:0e:e6:6f:eb:f7:6f:d3:60:ad:4f:ee:
                    0c:3e:2b:8b:a1:ea:84:bd:cd:9b:c2:fe:8b:ea:9f:
                    66:39:e3:9f:8a:9b:d8:87:e5:97:3e:ff:5e:fa:6a:
                    af:95:25:3a:09:24:c7:bb:00:9e:4f:e6:73:4f:9b:
                    20:2a:19:e1:5e:a2:aa:14:64:84:40:46:ce:0c:c5:
                    0e:8b:0e:34:dc:f1:57:b1:5a:3f:7e:00:b3:52:c8:
                    41:24:25:17:6f:38:0e:82:4b:19:41:8c:c6:3c:84:
                    e7:63:4c:f4:bf:d8:fd:9d:da:ca:e6:b2:6b:ec:a7:
                    2c:55:8d:50:41:12:28:96:8e:42:77:44:45:59:88:
                    c0:8e:42:03:d8:0b:05:30:c3:7e:5f:52:86:be:ad:
                    f5:26:3f:db:c5:17:40:5f:c8:64:9a:fc:fb:1f:e0:
                    e4:fc:3d:39:fd:b1:7a:20:7b:17:48:c6:a4:53:41:
                    d9:4d:25:cb:45:29:00:7d:f3:71:a1:a7:5f:5b:2e:
                    a1:cf:04:f0:f1:51:c7:e3:01:1e:9d:94:4b:5a:4e:
                    f6:29:91:0d:f7:4f:af:da:6d:fb:32:98:93:4d:f1:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:49:45:23:45:03:8C:D7:72:09:BE:9B:BA:2A:E6:67:7A:FD:7E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/581959dc-fa58-3578-b3bb-9ba395c26563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.210.0/24
                  172.82.161.0/24
                  172.82.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:bc:30:8a:3c:56:e2:ee:fc:d3:f3:f0:be:5d:c5:72:bf:
         b0:95:0b:8e:13:e7:a1:a8:8f:78:0e:80:79:3f:f7:39:af:6b:
         7e:1e:bc:db:08:1c:bb:21:70:a3:e0:56:1a:14:5f:78:a1:1b:
         0e:6e:55:33:c2:b1:23:5d:e5:ab:2e:6b:f7:0c:7b:82:12:ad:
         58:fe:77:03:8d:91:e9:82:9b:b6:78:f1:93:a6:79:6a:3a:b1:
         42:81:b6:85:5a:9c:53:04:5a:d6:f6:6d:a6:82:e4:d4:93:f6:
         60:ef:69:0c:e8:98:de:05:7c:a8:ce:f7:b1:c8:e9:9b:11:fa:
         86:98:73:f7:df:bb:f2:49:cd:5e:6f:4f:1c:6a:10:e6:73:82:
         6a:52:2e:47:2c:e3:0b:c5:3e:97:a7:af:e4:b3:c6:f0:c9:14:
         ec:60:90:1b:77:26:f3:2d:53:7d:c4:67:6d:94:39:95:32:70:
         0d:07:d5:c6:ff:cd:a6:59:7b:f0:1b:cb:6f:89:b0:d5:82:d7:
         da:1f:9e:b5:72:85:dc:4a:2c:16:66:c6:3d:1a:1a:33:39:4f:
         b2:74:e3:ee:e3:54:bd:e5:0d:8c:f9:6f:e6:b8:54:c5:d2:c8:
         9e:dd:ce:7c:da:17:06:98:99:da:65:65:41:41:9b:e9:94:57:
         77:16:a7:bd
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE80l9pQ7fujbPGjZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDkxNzEzNDMyN1oXDTI2MTIxNjE0NDMyN1owLzEtMCsGA1UEAxMk
Yjg0MWY2YjMtYzUyNi00MDQ5LTkxMDktYmE1YzUwYzMwZTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZ/n/GVkFJbuTDsAFeN1RfQ1fka6Ui5wTLH
e34N/NYYDuZv6/dv02CtT+4MPiuLoeqEvc2bwv6L6p9mOeOfipvYh+WXPv9e+mqv
lSU6CSTHuwCeT+ZzT5sgKhnhXqKqFGSEQEbODMUOiw403PFXsVo/fgCzUshBJCUX
bzgOgksZQYzGPITnY0z0v9j9ndrK5rJr7KcsVY1QQRIolo5Cd0RFWYjAjkID2AsF
MMN+X1KGvq31Jj/bxRdAX8hkmvz7H+Dk/D05/bF6IHsXSMakU0HZTSXLRSkAffNx
oadfWy6hzwTw8VHH4wEenZRLWk72KZEN90+v2m37MpiTTfEB2wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCxJRSNFA4zXcgm+m7oq5md6/X6EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvNTgxOTU5ZGMtZmE1OC0z
NTc4LWIzYmItOWJhMzk1YzI2NTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALSvSAwQA
rFKhAwQArFK2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAD5ZvDCKPFbi7vzT8/C+XcVyv7CVC44T56Goj3gO
gHk/9zmva34evNsIHLshcKPgVhoUX3ihGw5uVTPCsSNd5asua/cMe4ISrVj+dwON
kemCm7Z48ZOmeWo6sUKBtoVanFMEWtb2baaC5NST9mDvaQzomN4FfKjO97HI6ZsR
+oaYc/ffu/JJzV5vTxxqEOZzgmpSLkcs4wvFPpenr+SzxvDJFOxgkBt3JvMtU33E
Z22UOZUycA0H1cb/zaZZe/Aby2+JsNWC19ofnrVyhdxKLBZmxj0aGjM5T7J04+7j
VL3lDYz5b+a4VMXSyJ7dznzaFwaYmdplZUFBm+mUV3cWp70=
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:10:09 2026 by rpki-client