Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
File:                     bb942bf6-534f-3fae-99be-baac6d52181b.roa (raw, json)
Hash identifier:          MmDhkPDv+yfHHiAGUiUJDzoqUXwvEbsDQZle9chrVvw=
Subject key identifier:   B9:FF:EA:DA:7B:7E:2C:03:A7:BE:14:1C:44:B2:69:0F:DB:D3:F6:F1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CF42229D025A8D36AF846E6C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     5650
IP address blocks:        45.40.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:29:d0:25:a8:d3:6a:f8:46:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=bdbfda21-6959-4855-a258-a382dc0f59d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:35:02:80:b8:5a:05:0a:3c:a5:0a:da:8c:
                    a8:e5:f1:5c:37:a4:e2:5e:60:5e:c7:68:97:8a:7d:
                    0e:fe:0c:7a:e5:33:59:8f:c9:18:be:fb:28:b2:9f:
                    bf:b6:78:e3:c2:29:fe:88:4f:b8:1b:75:85:c3:f9:
                    2c:f9:7b:eb:58:c1:4a:39:cc:f5:2a:ce:04:94:33:
                    5b:7a:ef:ad:44:52:2e:af:ca:6d:25:ec:50:a8:4b:
                    78:5d:cd:ed:13:43:54:7a:53:28:a2:25:30:d7:8a:
                    54:fc:b4:2a:00:82:6a:b3:d1:24:99:44:0e:65:58:
                    bd:90:0c:0d:36:0d:d1:6c:ea:ce:89:bb:bf:6a:6b:
                    83:32:f8:99:c5:a7:0d:f0:53:cd:d4:c1:6a:3f:bb:
                    8e:92:92:c5:41:96:7d:33:d5:0b:cb:17:ef:46:ee:
                    45:88:06:4f:ed:96:19:38:56:60:46:e7:94:74:bd:
                    8e:ad:a5:02:09:cd:fa:10:59:df:05:d2:4b:e4:4b:
                    33:b0:48:ed:db:b4:ae:02:cb:cc:a4:18:b0:23:12:
                    fb:43:fd:e9:95:55:6b:8f:03:a8:70:75:75:88:59:
                    c0:78:16:9c:4a:e8:bb:bb:b7:91:69:e0:de:27:55:
                    a0:f2:16:91:83:a4:df:b5:98:67:df:1d:b4:97:b9:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:EA:DA:7B:7E:2C:03:A7:BE:14:1C:44:B2:69:0F:DB:D3:F6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:8d:95:1a:bc:d2:7a:2b:05:09:da:72:ea:68:67:6a:d3:37:
         d1:71:e5:af:b7:96:b0:44:f9:33:e8:f5:fb:e7:d0:97:1b:cd:
         f7:a4:7e:c0:71:61:1a:2f:0b:89:4e:6a:61:26:7e:1c:ca:42:
         66:a8:42:6a:2e:04:1c:b2:9e:03:5c:a4:eb:19:c9:ca:79:91:
         a5:39:c6:84:ec:e8:2d:2d:c2:b3:7c:3d:7e:d4:02:82:c7:eb:
         61:c5:72:98:25:75:70:a0:b2:84:93:28:f3:d6:9e:59:a7:b0:
         68:fa:5e:c2:e3:a7:b1:67:21:0c:66:7c:0d:90:00:5f:e5:82:
         18:2a:f8:1a:0c:23:d8:3b:01:94:75:57:c3:43:2b:27:17:fb:
         36:2f:59:ce:98:70:6d:b0:47:8d:f5:2c:82:9b:cc:2b:cb:c3:
         fd:40:bc:1b:21:61:73:5b:34:2d:d9:31:eb:2c:67:69:bb:84:
         fe:4c:71:f5:d6:f5:a9:87:7f:df:12:b2:84:5f:b9:88:3e:c6:
         f0:36:b3:81:11:d7:c1:49:4d:1b:3b:a5:0e:a7:3a:d3:5b:c6:
         13:dc:83:42:b0:18:a5:ad:94:6f:77:d3:1a:db:8d:33:93:00:
         6e:ee:8c:df:7a:ef:78:c8:0c:7d:92:e4:88:28:79:95:dd:90:
         23:d1:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:10 2026 by rpki-client