Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa
File:                     789a0372-176b-3537-a073-6987814c95fa.roa (raw, json)
Hash identifier:          ZWecUdR8uEPlR+T0HUSweMbuoZdlggQpfxA0XxqKisQ=
Subject key identifier:   01:7D:49:2A:FB:D5:47:DF:A4:F6:69:3F:E6:8D:34:0E:8A:C1:5E:C8
Certificate issuer:       /CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5
Certificate serial:       010D0C9F4328584C93D1917A675C461CF6455600
Authority key identifier: BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa
Signing time:             Mon 19 Jan 2026 14:00:38 +0000
ROA not before:           Mon 19 Jan 2026 14:00:38 +0000
ROA not after:            Sun 19 Apr 2026 13:00:38 +0000
asID:                     399760
IP address blocks:        45.45.148.0/24 maxlen: 24
                          2602:fc62::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:93:d1:91:7a:67:5c:46:1c:f6:45:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f24a760-0a44-48c2-ad3f-8326d01b1ac5
        Validity
            Not Before: Jan 19 14:00:38 2026 GMT
            Not After : Apr 19 13:00:38 2026 GMT
        Subject: CN=3e63355a-ffba-4cb9-8005-7fa26dc30dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:34:04:c8:a1:dd:92:60:23:15:c3:ad:14:
                    2d:34:1c:df:31:60:9d:98:27:93:b1:3c:17:93:1d:
                    ef:85:76:a5:d2:e5:10:ad:6d:00:50:c4:f2:60:0c:
                    f0:c7:1e:ab:c4:97:34:8f:57:8b:f2:4c:4d:0d:57:
                    bd:c8:95:c2:ad:64:30:dd:81:eb:75:55:30:b4:01:
                    1b:5a:0b:09:91:02:7c:4a:a3:00:d4:f3:dc:67:6e:
                    d0:44:68:c5:24:96:3a:88:7d:18:e2:31:48:68:38:
                    d8:95:12:56:50:a3:f8:0f:81:5c:01:79:fa:95:f2:
                    7d:08:79:ca:97:9e:7e:95:fd:70:62:c6:4a:08:8f:
                    db:a0:76:ad:f1:08:a4:27:2d:f1:a4:03:6b:a0:5b:
                    64:5b:fc:1c:df:74:3f:aa:66:9d:f7:47:ea:69:4d:
                    05:67:90:2b:22:e3:6b:92:fc:3f:fd:64:4d:70:38:
                    c7:ff:74:a4:23:b9:5d:f1:df:08:47:f0:d4:83:f3:
                    a5:0e:e2:cf:f4:ca:f0:b8:ae:c2:71:a7:91:e8:ed:
                    91:27:4f:33:73:47:d6:1b:8f:75:35:50:92:40:94:
                    d5:6f:8d:85:14:b4:49:a6:61:9e:e0:a2:c1:3c:d0:
                    8c:a7:d4:ce:07:21:38:53:08:61:20:3e:97:d0:cb:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7D:49:2A:FB:D5:47:DF:A4:F6:69:3F:E6:8D:34:0E:8A:C1:5E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/789a0372-176b-3537-a073-6987814c95fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:9E:60:8F:1B:CB:AC:89:03:06:00:60:52:31:09:62:40:01:E8:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0f24a760-0a44-48c2-ad3f-8326d01b1ac5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.148.0/24
                IPv6:
                  2602:fc62::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:de:de:58:26:a8:64:e5:3f:e3:c2:31:6d:d7:66:10:31:
         02:b7:af:fb:1f:d9:0b:40:f3:08:3a:12:52:9b:0b:b8:d2:68:
         9b:45:59:1e:16:d1:19:5b:bd:ee:7f:d4:de:4c:89:9a:4f:0f:
         8a:44:fa:41:f0:95:49:ce:e7:95:da:d7:aa:5f:bb:f7:c4:11:
         43:1a:d3:b0:ab:d2:20:2e:66:53:0d:52:44:da:d2:c0:12:b9:
         ba:5b:c3:be:0b:07:9f:d4:33:d4:e0:d1:d9:0d:8c:b8:ba:3a:
         d2:88:e2:b3:d6:54:2e:ef:81:a5:5c:da:9a:66:8c:7c:b2:7e:
         5b:1f:d8:ff:92:b9:4a:fe:9d:c7:33:f3:49:cc:90:ef:61:02:
         de:00:d4:b5:d5:38:a0:d2:16:11:e4:3b:1b:e1:d1:a8:56:73:
         83:c0:74:27:27:90:a5:cc:d2:c0:5e:38:a0:28:0e:3c:a5:cc:
         ec:db:0d:54:52:ce:23:06:b2:4e:53:ac:5c:e7:36:da:67:1c:
         58:ec:e9:14:4d:9e:15:be:5f:8f:25:9a:1b:d0:bb:f3:c1:75:
         b6:df:d7:86:fe:84:b3:2c:f2:da:86:93:06:f8:57:6e:8d:1f:
         7b:33:d4:93:bf:9b:41:50:6c:ce:ee:aa:e4:cd:d9:59:e9:b6:
         21:39:97:79
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEyT0ZF6Z1xGHPZFVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGYyNGE3NjAtMGE0NC00OGMyLWFkM2YtODMyNmQwMWIx
YWM1MB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk
M2U2MzM1NWEtZmZiYS00Y2I5LTgwMDUtN2ZhMjZkYzMwZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke40BMih3ZJgIxXDrRQtNBzfMWCdmCeTsTwX
kx3vhXal0uUQrW0AUMTyYAzwxx6rxJc0j1eL8kxNDVe9yJXCrWQw3YHrdVUwtAEb
WgsJkQJ8SqMA1PPcZ27QRGjFJJY6iH0Y4jFIaDjYlRJWUKP4D4FcAXn6lfJ9CHnK
l55+lf1wYsZKCI/boHat8QikJy3xpANroFtkW/wc33Q/qmad90fqaU0FZ5ArIuNr
kvw//WRNcDjH/3SkI7ld8d8IR/DUg/OlDuLP9MrwuK7CcaeR6O2RJ08zc0fWG491
NVCSQJTVb42FFLRJpmGe4KLBPNCMp9TOByE4UwhhID6X0Ms3lQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFAF9SSr71UffpPZpP+aNNA6KwV7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZjI0
YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2ZDAxYjFhYzUvNzg5YTAzNzItMTc2Yi0z
NTM3LWEwNzMtNjk4NzgxNGM5NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGYyNGE3NjAtMGE0NC00OGMyLWFk
M2YtODMyNmQwMWIxYWM1LzBmMjRhNzYwLTBhNDQtNDhjMi1hZDNmLTgzMjZkMDFi
MWFjNS5jcmwwHwYDVR0jBBgwFoAUvZ5gjxvLrIkDBgBgUjEJYkAB6GwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZjI0YTc2MC0wYTQ0LTQ4YzItYWQzZi04MzI2
ZDAxYjFhYzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALS2UMA4E
AgACMAgDBgAmAvxiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaet7eWCaoZOU/48IxbddmEDECt6/7H9kL
QPMIOhJSmwu40mibRVkeFtEZW73uf9TeTImaTw+KRPpB8JVJzueV2teqX7v3xBFD
GtOwq9IgLmZTDVJE2tLAErm6W8O+Cwef1DPU4NHZDYy4ujrSiOKz1lQu74GlXNqa
Zox8sn5bH9j/krlK/p3HM/NJzJDvYQLeANS11Tig0hYR5Dsb4dGoVnODwHQnJ5Cl
zNLAXjigKA48pczs2w1UUs4jBrJOU6xc5zbaZxxY7OkUTZ4Vvl+PJZob0LvzwXW2
39eG/oSzLPLahpMG+FdujR97M9STv5tBUGzO7qrkzdlZ6bYhOZd5
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:13:51 2026 by rpki-client