Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa
File:                     dcedc562-55ee-3cc4-bd1d-c5234b144386.roa (raw, json)
Hash identifier:          3wTRAHtPToNPefCHDsRpu9/9k3lPP97IzThIo90uCUU=
Subject key identifier:   3B:41:7F:DC:CC:0C:4B:A6:1A:09:DA:FA:21:05:16:F1:71:7D:A9:14
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584F4973F96EBFEE9708081ACF00
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394337
IP address blocks:        45.45.196.0/22 maxlen: 24
                          208.74.168.0/21 maxlen: 24
                          2607:880::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f9:6e:bf:ee:97:08:08:1a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3cad6379-3f0f-44d4-a364-92e1d9f95814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:3f:2e:37:c5:02:46:0f:86:95:e2:54:74:
                    b3:76:16:61:89:3a:b1:da:fa:c4:1b:0d:81:aa:90:
                    a3:ad:0a:ec:8d:60:06:62:47:63:25:81:0e:47:51:
                    c7:a5:01:ea:38:c0:48:c6:01:b7:aa:ef:0a:d8:8b:
                    df:e5:9b:a5:06:38:0a:3b:d5:06:97:38:2d:36:cb:
                    79:f0:f0:ab:ba:e4:a9:c4:5f:05:07:b4:1a:a9:53:
                    a4:dd:e0:a0:0f:eb:34:cb:9f:12:b6:ab:e4:39:03:
                    47:19:19:a9:8d:ec:d4:0b:8b:75:a6:a2:61:d0:8f:
                    b6:9e:ec:03:6e:b4:78:82:95:55:b0:55:80:7c:ef:
                    a2:7a:06:f7:9b:7f:2f:d7:a1:31:6c:fd:03:37:49:
                    3c:a5:70:65:2f:a8:7a:35:41:27:f6:e0:02:5f:47:
                    e2:24:d6:0b:5c:79:9e:87:c7:2b:f8:a5:ca:0d:17:
                    67:47:5e:30:ef:f6:e6:7d:99:43:2d:6a:00:ae:60:
                    24:ab:dc:e5:d3:98:2d:d3:d9:7a:18:ec:4c:54:09:
                    e1:c5:08:65:c8:fa:2c:56:8e:79:d6:33:51:c9:17:
                    ec:b2:36:4f:2c:84:40:d6:88:66:a3:1e:3c:a0:d3:
                    a6:81:d4:9f:2b:22:66:8d:10:35:fc:a6:e9:28:29:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:41:7F:DC:CC:0C:4B:A6:1A:09:DA:FA:21:05:16:F1:71:7D:A9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/dcedc562-55ee-3cc4-bd1d-c5234b144386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.196.0/22
                  208.74.168.0/21
                IPv6:
                  2607:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:a4:3c:76:ee:ca:e5:aa:c6:20:dd:83:ea:93:49:06:b1:
         99:10:6d:6b:29:ac:45:b2:43:57:c4:8d:20:cc:06:06:cd:01:
         80:e1:be:1f:58:39:33:74:d2:41:7b:e8:8e:b5:36:32:4b:40:
         53:f7:74:bc:db:8d:62:48:71:48:52:a9:43:ae:d5:d2:7b:2b:
         1a:b6:fe:00:dc:ec:e4:58:23:44:38:2a:13:06:51:4d:80:3d:
         c7:b7:2a:d3:bc:00:6d:48:85:71:53:53:7e:e8:0e:ce:91:67:
         fb:ed:22:d4:22:c5:18:4a:64:e5:0c:8c:42:dc:b2:fa:41:d7:
         6c:8e:3f:05:e0:b4:34:93:4a:af:57:91:e9:0b:8c:5e:45:db:
         b4:f0:3d:b4:a8:da:32:89:0a:7e:b1:99:d8:ac:e8:64:3a:51:
         63:6e:38:a0:ab:e7:b2:8f:24:78:35:de:1f:89:34:2d:77:c8:
         31:df:84:31:fa:de:0e:b7:fa:57:fc:93:d9:64:35:04:1b:3c:
         7d:6b:c0:7b:ee:50:d7:52:3f:1a:3a:f7:23:14:ae:98:8c:4a:
         98:7c:67:f9:9c:1d:a7:8a:88:62:e8:42:60:56:14:17:df:c9:
         15:a2:f6:04:a3:18:3c:0f:04:f1:e7:6d:36:7d:a4:b8:9d:43:
         9b:9b:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:09:54 2026 by rpki-client