Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/dd089fcd-67aa-3a79-bb07-aade80f42a7f.roa
File:                     dd089fcd-67aa-3a79-bb07-aade80f42a7f.roa (raw, json)
Hash identifier:          GehWoxE5M/lFAPJyKwBC8HMP1Zod4WVGem6P3IygcIg=
Subject key identifier:   BC:E7:20:EA:D3:C5:0C:8D:EA:21:69:DF:6D:95:08:5F:DB:FD:F8:1E
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EA11E0A9EFC79F6A625963600
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/dd089fcd-67aa-3a79-bb07-aade80f42a7f.roa
Signing time:             Sun 26 Jul 2026 17:54:11 +0000
ROA not before:           Sun 26 Jul 2026 17:54:11 +0000
ROA not after:            Sat 24 Oct 2026 17:54:11 +0000
asID:                     401293
IP address blocks:        45.43.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:1e:0a:9e:fc:79:f6:a6:25:96:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Jul 26 17:54:11 2026 GMT
            Not After : Oct 24 17:54:11 2026 GMT
        Subject: CN=3e813e91-8929-4e0f-92ad-31ba9dc27ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:1f:c2:0f:02:fb:80:1b:1d:29:05:8b:31:
                    e1:be:55:fc:9b:9e:4a:37:70:33:4b:c6:07:bf:30:
                    57:db:e3:5a:ec:3a:29:e6:75:9e:83:fa:8b:c2:be:
                    c3:2d:5b:87:b1:0d:e3:3c:f6:eb:50:bd:ba:08:c8:
                    96:03:b2:fd:5c:8b:ba:79:f8:3a:08:eb:98:0c:1a:
                    3a:5b:f4:3b:67:d8:0c:63:b8:d6:c7:10:dd:96:94:
                    91:87:ef:3a:21:2a:ae:07:8d:b0:21:2e:8b:df:f0:
                    79:3a:f8:03:97:2c:06:89:52:d2:b1:47:b8:ea:a4:
                    56:8f:65:45:52:2e:a8:d7:12:4b:97:3d:21:d8:c1:
                    0a:75:06:c5:03:75:6e:bb:27:82:28:e3:8a:7b:75:
                    99:e5:32:6d:c5:ae:39:09:e9:9a:3b:f0:93:8e:1b:
                    64:de:50:b7:93:e0:ba:46:86:28:9d:c8:5c:09:0f:
                    84:13:3c:4f:97:02:56:54:23:61:af:81:2e:fc:d1:
                    1c:4b:1c:6e:bb:f6:b9:40:17:e1:81:ad:bb:a1:5e:
                    48:1d:97:e2:43:6d:2c:b4:c1:c9:8c:a9:61:d0:a5:
                    7c:97:78:f7:99:7e:bb:ca:72:8f:cd:8f:fc:2c:01:
                    71:ed:41:b7:f9:ab:73:b9:51:e5:06:95:c1:83:87:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:20:EA:D3:C5:0C:8D:EA:21:69:DF:6D:95:08:5F:DB:FD:F8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/dd089fcd-67aa-3a79-bb07-aade80f42a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:84:8b:6d:c3:dc:4b:3c:61:28:46:00:7f:cc:3b:89:12:51:
         51:ae:94:3d:4e:ca:62:a5:3f:41:74:f8:9a:2e:dd:d8:7b:c6:
         e1:5d:ec:77:21:3e:f0:a1:85:2c:a3:2f:49:97:21:94:e1:81:
         7e:79:c4:22:1a:21:d8:f0:39:dd:ac:b8:e9:aa:6c:4d:b1:a6:
         c4:f1:b9:f1:a9:ee:5d:54:55:a1:66:7d:cb:9a:a5:44:99:36:
         e2:4e:dc:68:ab:c2:da:e3:25:db:c7:c2:1d:c4:79:e2:22:4b:
         a8:b2:83:c5:93:79:5c:08:43:87:1f:5a:97:29:74:d8:d4:6a:
         98:8b:16:0c:96:89:6a:02:a0:2c:93:96:5f:c9:e1:29:02:a5:
         f4:3a:d0:5b:34:7d:a0:31:c5:8c:2a:56:d5:17:89:ff:30:1f:
         ab:67:9c:f4:b4:19:7a:fa:5e:1b:b6:ea:b7:42:d5:87:60:d7:
         be:58:27:41:7d:ea:66:95:a7:74:04:bc:4e:4b:19:b3:b9:b0:
         ec:ea:f8:25:0e:79:5e:d9:2b:9a:6b:84:6a:36:e5:cd:24:ea:
         4d:24:9b:db:9e:6b:fa:08:11:f0:78:56:99:80:26:93:e0:2b:
         a5:8e:ed:48:14:f2:bd:f6:76:80:5d:09:33:02:88:f7:9f:80:
         16:94:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:12 2026 by rpki-client