Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
File:                     40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa (raw, json)
Hash identifier:          tv/o/9NJtyEIQiDnWEnR2hMDCeRN+n6SKje5gi5IZ34=
Subject key identifier:   D7:32:F0:1A:EF:29:AF:59:7B:D1:6F:73:2E:B0:BC:DA:1D:5C:71:2D
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584CE4C76BA92F8E6D7089FD3B80
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     45102
IP address blocks:        47.52.0.0/16 maxlen: 24
                          47.56.0.0/16 maxlen: 24
                          47.57.0.0/16 maxlen: 24
                          47.74.0.0/16 maxlen: 24
                          47.75.0.0/16 maxlen: 24
                          47.76.0.0/16 maxlen: 24
                          47.77.0.0/16 maxlen: 24
                          47.78.0.0/16 maxlen: 24
                          47.79.0.0/16 maxlen: 24
                          47.80.0.0/16 maxlen: 24
                          47.81.0.0/16 maxlen: 24
                          47.82.0.0/16 maxlen: 24
                          47.83.0.0/16 maxlen: 24
                          47.84.0.0/16 maxlen: 24
                          47.85.0.0/16 maxlen: 24
                          47.86.0.0/16 maxlen: 24
                          47.87.0.0/16 maxlen: 24
                          47.88.0.0/16 maxlen: 24
                          47.89.0.0/16 maxlen: 24
                          47.90.0.0/16 maxlen: 24
                          47.91.0.0/16 maxlen: 24
                          47.235.0.0/16 maxlen: 24
                          47.236.0.0/16 maxlen: 24
                          47.237.0.0/16 maxlen: 24
                          47.238.0.0/16 maxlen: 24
                          47.239.0.0/16 maxlen: 24
                          47.240.0.0/16 maxlen: 24
                          47.241.0.0/16 maxlen: 24
                          47.242.0.0/16 maxlen: 24
                          47.243.0.0/16 maxlen: 24
                          47.244.0.0/16 maxlen: 24
                          47.245.0.0/16 maxlen: 24
                          47.246.0.0/16 maxlen: 24
                          47.250.0.0/16 maxlen: 24
                          47.251.0.0/16 maxlen: 24
                          47.252.0.0/16 maxlen: 24
                          47.253.0.0/16 maxlen: 24
                          47.254.0.0/16 maxlen: 24
                          72.254.0.0/16 maxlen: 24
                          139.95.0.0/16 maxlen: 24
                          147.139.0.0/16 maxlen: 24
                          155.102.0.0/16 maxlen: 24
                          163.181.0.0/16 maxlen: 24
                          198.11.128.0/18 maxlen: 24
                          205.204.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:6b:a9:2f:8e:6d:70:89:fd:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=ae10012f-d1f0-45aa-8a24-701b262a4f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:fe:f0:61:87:80:5e:d5:b8:b9:d4:a6:5b:
                    be:b2:b7:7a:fe:a5:13:96:5f:15:d5:1c:77:c8:25:
                    25:99:d2:7a:d9:a6:53:fd:9e:a5:dd:98:5a:07:71:
                    f9:0a:54:24:4e:ef:4d:56:17:f6:30:e4:6e:2f:ae:
                    9a:ef:26:04:2c:68:bf:d1:17:cb:0e:f2:09:90:26:
                    c7:fb:b1:cc:e1:0e:57:e3:61:5f:bd:a2:72:20:70:
                    75:fc:0f:aa:e1:ef:59:4a:fc:3c:21:b6:1d:80:01:
                    35:c7:ef:02:79:ec:c3:d6:ee:a2:a3:0a:ee:14:f6:
                    be:08:3e:72:6f:38:e1:df:9f:d8:e3:20:05:65:52:
                    8f:d8:c4:ac:59:11:da:66:b1:fa:79:e6:04:e6:2c:
                    58:c8:6c:ec:d7:f9:36:e9:7d:60:17:24:7a:3f:d3:
                    7a:6e:93:01:6f:43:01:86:92:5c:12:75:23:bd:ec:
                    f7:40:c6:64:d8:90:5a:a3:46:8e:08:f2:19:d3:1f:
                    59:bd:ce:ab:7a:75:20:04:5c:ec:c3:14:b3:7f:d7:
                    93:60:4e:2a:49:c2:e0:60:f6:c7:18:eb:c3:fe:28:
                    38:9a:2f:f6:c2:42:a8:eb:9b:c7:6c:20:28:cd:7e:
                    31:30:04:86:fe:50:2d:3b:a7:6f:2f:30:d4:cd:63:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:F0:1A:EF:29:AF:59:7B:D1:6F:73:2E:B0:BC:DA:1D:5C:71:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/40b83e77-fff2-31a5-9cfd-1aa1389fca99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.52.0.0/16
                  47.56.0.0/15
                  47.74.0.0-47.91.255.255
                  47.235.0.0-47.246.255.255
                  47.250.0.0-47.254.255.255
                  72.254.0.0/16
                  139.95.0.0/16
                  147.139.0.0/16
                  155.102.0.0/16
                  163.181.0.0/16
                  198.11.128.0/18
                  205.204.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c1:f8:8b:f1:fa:06:e3:70:71:77:25:c4:7b:d4:12:d9:73:
         4a:fb:f3:15:16:39:9e:0f:59:60:a7:59:22:3b:7e:9d:de:84:
         0c:8d:3a:26:a1:53:ee:7f:79:2e:24:e4:6d:a2:7a:3c:47:0c:
         1c:18:75:a9:36:cb:3f:03:eb:bb:fc:e2:56:15:fc:31:89:2c:
         db:a0:29:aa:7e:e3:43:27:0b:c5:e6:d6:4c:72:e9:f1:f5:e0:
         a8:ec:b6:c5:21:36:bc:7b:05:0b:a4:c2:e0:14:89:b2:6b:9f:
         fb:4d:95:a5:70:0d:78:5c:61:e8:b4:46:e7:91:99:20:e4:27:
         69:f8:2c:30:f3:d2:0e:34:aa:c6:df:11:a5:49:43:fd:d5:96:
         f9:d0:3d:cd:7e:6b:d4:78:42:88:df:69:fe:6f:12:67:fb:1a:
         0c:0d:f1:4a:a3:ff:5b:e4:87:31:f8:82:ef:7a:51:1e:dc:07:
         6a:e3:07:7d:9b:77:47:38:be:6e:bc:c5:e6:b0:0f:df:3e:7d:
         39:7f:b1:0a:f0:7e:c5:c9:12:86:8c:9d:d8:31:b3:b5:49:95:
         a0:a5:96:d7:39:6e:19:f9:b1:9d:d8:0b:a4:a1:44:9a:d2:06:
         0d:74:99:b5:aa:af:f1:83:46:68:06:12:07:0b:c5:3e:79:b3:
         ea:17:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:27 2026 by rpki-client