Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
File:                     bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa (raw, json)
Hash identifier:          hqp7ORuIh6H0ZdgaJ2VBc1tb1pqTBnUefF5wU1B3cDk=
Subject key identifier:   B5:8F:28:6B:F8:E3:A4:EF:A6:3E:C1:9E:F9:AA:80:16:B9:EF:B0:59
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584CD13CA1747A52B1F77EAE1F80
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     22333
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a1:74:7a:52:b1:f7:7e:ae:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=b1778656-9473-4e6d-ac83-3a9a18ce53b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:37:10:44:9b:64:f3:e9:a6:eb:7d:49:62:9d:
                    ed:8f:13:6e:86:5d:3e:11:24:b9:d1:19:fd:57:60:
                    17:0a:07:76:5c:91:b5:f7:a1:b4:27:82:68:bb:5f:
                    9d:e8:9b:bd:f8:ae:56:19:05:f1:7d:31:a2:dc:3d:
                    f1:4e:e5:cf:2c:74:f6:fb:01:cd:01:0f:e3:02:75:
                    d8:6b:99:6a:9e:24:83:5f:cd:92:bc:2c:f2:1b:06:
                    ba:7f:ca:79:99:6b:05:a2:f2:f7:cb:f7:47:cd:14:
                    a8:d1:a1:bb:0d:ee:44:93:56:32:da:aa:b7:4b:3b:
                    f3:fa:b9:ef:57:21:86:55:20:3c:2c:04:6c:7f:db:
                    8d:61:de:d0:a6:47:a3:62:d3:c8:2e:d1:99:9d:d2:
                    e8:83:b2:2a:10:49:d8:71:d5:27:77:71:5b:34:92:
                    7b:6e:e5:16:b3:af:18:9b:d0:81:ba:ac:06:ff:c4:
                    9f:56:51:4b:94:d9:b1:1a:c2:24:c3:29:c6:0d:34:
                    24:90:1a:54:0a:0c:c1:b5:55:38:ff:36:ac:bb:72:
                    a1:d1:40:08:57:b3:bb:c1:46:48:80:ec:39:3d:78:
                    d7:29:41:f9:6b:65:06:a1:0e:00:82:6e:97:22:e7:
                    97:66:7f:29:80:1f:e7:8b:ba:15:c4:b7:71:07:28:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:28:6B:F8:E3:A4:EF:A6:3E:C1:9E:F9:AA:80:16:B9:EF:B0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:eb:fc:db:e5:70:10:68:ae:c1:b0:ff:ef:3c:c1:d0:7a:1c:
         05:b1:c3:44:bc:5f:05:a2:70:3e:47:d8:d6:1a:68:a3:bb:5c:
         0d:bc:8e:8f:57:50:db:e4:26:1b:02:a1:6f:0a:bf:27:0f:5c:
         ad:4b:d3:aa:58:47:c2:c1:5e:26:3a:c4:f7:77:33:a5:e8:ee:
         9e:98:08:34:06:0a:44:c1:41:4f:f6:7e:95:8d:1e:ba:a7:e1:
         5d:7b:a8:5d:b5:0a:9f:13:5d:63:1b:98:bd:77:bb:b2:73:3a:
         00:51:3f:07:1e:97:a7:e3:f4:d3:73:39:29:67:b8:f5:10:38:
         92:22:46:ee:d7:97:c3:df:47:16:e6:13:a2:57:b2:7e:ef:3a:
         a2:5b:95:36:cb:d8:51:96:e8:ab:93:1a:71:e3:c9:95:e6:81:
         30:6b:36:65:e1:c8:36:ca:a6:3f:15:b2:b5:63:bf:fb:18:0c:
         1f:da:f8:67:20:ee:5e:db:45:ba:2d:b8:1b:ad:34:c7:d8:23:
         60:47:d1:b0:93:a2:15:0f:1d:3f:ba:15:0d:60:90:bf:8e:2e:
         44:84:dd:ae:ff:c3:8b:7b:6e:f2:b3:c4:a9:a2:5c:62:3c:0f:
         55:65:ab:58:5e:21:24:4f:3a:fd:7f:bf:df:a4:6f:2d:46:7c:
         4b:40:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:39 2026 by rpki-client