Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
File:                     db335f49-33b5-3fb9-b874-7f2019b787b7.roa (raw, json)
Hash identifier:          9boDSsWBdjzyUk6/ROSqXAdx57xbw6b0ylKPR2wt/A4=
Subject key identifier:   1A:0D:12:D4:73:AE:10:F4:8F:3B:26:21:D2:1A:62:C4:26:64:99:E1
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584CB121D8C20C5325C504D54A00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     202656
IP address blocks:        209.145.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d8:c2:0c:53:25:c5:04:d5:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=75964f08-608b-4323-af0d-b1315f6fc53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:ba:86:13:1e:34:b0:56:b5:92:b6:1a:4e:
                    ab:b2:a1:db:31:b3:ee:48:26:1c:75:b2:00:01:54:
                    0b:c5:f5:1a:4e:76:a7:2b:34:67:6f:2b:40:27:8c:
                    56:02:61:ee:cf:63:b8:59:77:93:76:1e:c8:a3:79:
                    09:35:95:6d:9b:0d:a5:0b:6f:4c:bb:85:e6:cd:ae:
                    fd:c0:bb:08:2e:ab:19:e5:54:11:83:2d:43:71:f7:
                    65:bb:5d:0e:21:9a:87:b3:40:3b:09:3c:9a:fd:1f:
                    c6:3d:da:84:c2:e6:4e:77:64:ef:d7:fa:b6:eb:a3:
                    b2:8c:97:7b:4f:b0:73:bb:fe:49:a0:a3:a8:25:e3:
                    7e:c1:ae:ef:7d:43:19:22:2a:83:9e:b9:12:da:5c:
                    be:4c:f8:4d:85:14:a3:6b:af:eb:e2:b4:dd:86:c8:
                    60:c2:1c:e1:e3:1b:bd:0b:5e:50:09:97:af:9f:ec:
                    9b:91:81:cd:3e:72:9a:0a:a2:5e:99:fa:92:76:12:
                    a3:91:f2:7d:29:fe:45:e9:59:79:12:68:2a:97:60:
                    74:57:0a:53:be:68:00:dc:20:b3:d9:0d:86:54:e2:
                    73:36:0a:27:cd:a9:82:7d:d5:70:e5:65:8a:09:c5:
                    5a:e0:c0:62:19:5a:b0:be:15:ab:42:4d:f1:e5:a4:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:12:D4:73:AE:10:F4:8F:3B:26:21:D2:1A:62:C4:26:64:99:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:ea:8f:d5:c2:cc:65:18:70:52:8c:db:d5:38:d4:bf:c7:
         36:d2:1d:d6:95:32:b0:99:3c:11:0c:97:9b:79:d2:e7:16:e4:
         09:3e:49:4b:92:4e:9a:5a:57:5d:ba:f3:cc:b7:c2:03:4e:aa:
         9f:5c:b6:57:62:a3:fb:1a:13:23:2f:d9:44:55:d4:9e:46:be:
         ee:ca:05:f9:17:99:f2:06:ea:de:eb:58:e0:e4:fd:52:5e:e2:
         4c:b2:87:1b:8f:0f:44:2e:6a:33:ed:81:8d:e1:60:d1:a6:03:
         b9:24:0b:cc:a0:b1:a3:8a:a9:f9:b3:0d:65:f2:fd:c2:00:9e:
         b1:3b:a6:03:97:ea:57:89:9a:86:8d:1d:0a:c0:42:60:4a:49:
         a6:54:73:d0:e1:21:f4:43:96:77:54:8c:52:f6:9c:b6:bb:42:
         5c:ae:5f:5e:be:c1:84:52:2c:26:dc:d4:9b:bf:55:70:fb:a3:
         9e:a6:36:09:03:4e:79:8a:a1:fe:20:40:72:de:70:1b:5f:0f:
         e2:4f:1a:50:f3:10:8d:18:66:57:44:15:7d:cf:fd:6e:eb:a5:
         11:56:24:fe:ef:79:2f:5c:68:61:af:fc:ee:16:52:0b:42:bb:
         7c:6a:08:36:c4:85:1a:4f:b8:08:3e:fd:ae:b2:9c:89:bf:4e:
         93:87:b5:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIdjCDFMlxQTVSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzU5NjRmMDgtNjA4Yi00MzIzLWFmMGQtYjEzMTVmNmZjNTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQG6hhMeNLBWtZK2Gk6rsqHbMbPuSCYcdbIA
AVQLxfUaTnanKzRnbytAJ4xWAmHuz2O4WXeTdh7Io3kJNZVtmw2lC29Mu4Xmza79
wLsILqsZ5VQRgy1Dcfdlu10OIZqHs0A7CTya/R/GPdqEwuZOd2Tv1/q266OyjJd7
T7Bzu/5JoKOoJeN+wa7vfUMZIiqDnrkS2ly+TPhNhRSja6/r4rTdhshgwhzh4xu9
C15QCZevn+ybkYHNPnKaCqJemfqSdhKjkfJ9Kf5F6Vl5Emgql2B0VwpTvmgA3CCz
2Q2GVOJzNgonzamCfdVw5WWKCcVa4MBiGVqwvhWrQk3x5aTVWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoNEtRzrhD0jzsmIdIaYsQmZJnhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZGIzMzVmNDktMzNiNS0z
ZmI5LWI4NzQtN2YyMDE5Yjc4N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZEtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKN6o/VwsxlGHBSjNvVONS/xzbSHdaVMrCZPBEMl5t50ucW5Ak+SUuS
TppaV12688y3wgNOqp9ctldio/saEyMv2URV1J5Gvu7KBfkXmfIG6t7rWODk/VJe
4kyyhxuPD0QuajPtgY3hYNGmA7kkC8ygsaOKqfmzDWXy/cIAnrE7pgOX6leJmoaN
HQrAQmBKSaZUc9DhIfRDlndUjFL2nLa7QlyuX16+wYRSLCbc1Ju/VXD7o56mNgkD
TnmKof4gQHLecBtfD+JPGlDzEI0YZldEFX3P/W7rpRFWJP7veS9caGGv/O4WUgtC
u3xqCDbEhRpPuAg+/a6ynIm/TpOHtWc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:57 2026 by rpki-client