Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
File:                     db335f49-33b5-3fb9-b874-7f2019b787b7.roa (raw, json)
Hash identifier:          no7e9HT/Jgbbjxjj6D0OOV27AYQKbg5Hu9Xq8dCdoI0=
Subject key identifier:   B3:3C:B1:03:D7:D9:97:E4:3F:B0:66:AA:63:EF:AD:92:CA:0F:7A:6C
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584F1467A6BFE19EACECB489D300
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     202656
IP address blocks:        209.145.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a6:bf:e1:9e:ac:ec:b4:89:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=65133e28-2d6b-4e83-8a21-6763b55ba542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f2:70:56:fc:e8:f5:68:62:52:84:7b:14:01:
                    23:ea:1d:f7:02:26:59:a2:1f:34:03:58:25:56:d9:
                    78:d7:3c:9d:b3:1a:51:ac:7b:46:cf:52:ae:34:60:
                    a7:61:56:bf:ee:27:ed:92:b6:71:87:af:45:87:de:
                    df:8e:62:84:5e:36:97:8f:87:45:2f:21:6b:11:84:
                    b2:61:db:35:03:b9:c4:87:b8:6c:9e:67:56:22:21:
                    e6:ef:5a:4d:8e:28:1f:eb:3e:06:87:a3:68:bd:fe:
                    c9:27:2c:76:18:f6:30:6b:1c:79:ca:e6:c1:56:ad:
                    49:f3:57:5a:b3:60:65:02:1f:b2:09:06:12:be:70:
                    98:bf:ff:96:38:3a:76:de:77:1f:ea:18:4f:64:84:
                    f8:b6:37:01:06:f7:e1:57:a8:37:c8:d6:35:c7:0c:
                    0e:e8:d3:b2:9f:29:28:30:1b:fc:01:9c:e4:0f:a8:
                    bb:84:fd:7d:80:12:84:72:ea:4f:16:ab:10:e4:4e:
                    88:57:2e:e9:84:bc:94:65:17:71:ce:47:d9:ff:04:
                    12:d2:51:0d:45:a4:16:c6:bc:c2:8f:24:7e:31:25:
                    91:da:51:a6:47:83:4b:4c:50:b7:99:78:9f:80:6a:
                    54:e9:0c:2e:ff:53:a0:9c:d2:cc:8f:a5:f8:18:cd:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:B1:03:D7:D9:97:E4:3F:B0:66:AA:63:EF:AD:92:CA:0F:7A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:a2:9c:87:30:7c:35:47:43:d1:df:e3:21:23:93:c8:f2:
         27:69:46:31:a3:e6:20:a5:86:e3:d4:98:c7:2a:7d:46:83:de:
         51:22:f6:3f:0e:fe:d2:1c:f2:05:2f:ae:a0:30:32:af:7e:60:
         7b:eb:f4:f5:fd:4f:a4:52:3f:13:e4:3e:76:85:d0:2f:95:72:
         05:e7:f9:64:d8:d0:da:55:23:76:d5:a2:a2:6d:67:49:80:e1:
         2e:24:e4:3a:7c:54:34:8a:3b:27:26:ba:50:70:73:42:48:13:
         f3:c3:35:39:79:76:b9:0f:d7:2a:fd:9e:61:2d:ca:0c:12:37:
         98:d5:d2:09:99:4a:bd:f9:bd:25:87:96:80:16:cf:e9:89:3c:
         c3:02:d2:36:da:16:8f:94:a2:27:5f:28:ae:c4:23:25:63:a2:
         37:39:b6:0c:47:4f:6b:db:b2:b5:13:b9:39:8b:cc:98:f6:e8:
         f1:15:31:8f:34:3f:30:32:65:6a:27:12:75:4a:ec:f1:3a:a8:
         6e:48:96:55:9e:1b:5e:5f:05:ec:9e:03:76:67:68:61:84:09:
         12:69:58:5e:a2:d9:27:22:6e:c2:5f:0e:99:55:66:21:c5:36:
         b4:74:8e:a7:81:09:7a:b6:14:dd:ee:94:d4:43:91:cf:06:d7:
         f7:b1:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:18:11 2026 by rpki-client