Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/45590aa0-0ef7-3fce-b16f-e04bb001d4c5.roa
File:                     45590aa0-0ef7-3fce-b16f-e04bb001d4c5.roa (raw, json)
Hash identifier:          xB9f99ZL2hHZ2sLIWQFcgJoLq4DBJ1ip/U8up8aZZik=
Subject key identifier:   6D:65:B6:E0:E4:28:6D:86:AD:7C:F6:ED:ED:19:67:2E:01:92:BC:A9
Certificate issuer:       /CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2
Certificate serial:       010D0C9F4328584C9F9725191B31EFA34C953FC0
Authority key identifier: 4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/45590aa0-0ef7-3fce-b16f-e04bb001d4c5.roa
Signing time:             Sun 18 Jan 2026 14:00:39 +0000
ROA not before:           Sun 18 Jan 2026 14:00:39 +0000
ROA not after:            Sat 18 Apr 2026 13:00:39 +0000
asID:                     20115
IP address blocks:        96.47.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9f:97:25:19:1b:31:ef:a3:4c:95:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f22aba24-e2d9-4f58-ac80-6b95236d64e2
        Validity
            Not Before: Jan 18 14:00:39 2026 GMT
            Not After : Apr 18 13:00:39 2026 GMT
        Subject: CN=7a093d2d-de28-4d69-945d-5d65e2d96dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:25:af:df:74:14:47:87:13:7f:c4:ee:22:8d:
                    9b:00:92:08:fe:05:c5:49:fc:7f:39:a2:41:4e:29:
                    5b:d4:c3:74:75:d2:8b:85:44:ee:99:25:0f:2e:80:
                    24:78:9f:aa:87:5c:49:e1:35:97:9c:1d:52:88:5a:
                    e0:e2:27:c1:78:10:33:26:f3:30:12:ad:94:8f:0c:
                    1f:7e:8c:f2:73:b3:59:27:64:f0:8d:3a:b1:0c:8c:
                    dd:83:c7:1f:31:9c:60:3d:ca:95:95:c2:9c:0c:ea:
                    6c:6c:14:dc:fb:6e:4b:98:4b:62:1e:70:1f:78:5f:
                    6e:2b:98:61:9a:c3:4e:0d:38:24:bf:ad:68:4b:f8:
                    48:b9:76:80:6b:2d:4a:35:9b:47:d3:2e:db:29:ea:
                    e0:62:5a:a5:42:7e:ff:fc:15:77:96:bd:1d:8b:c8:
                    6c:56:5f:56:58:03:e8:ab:f2:87:14:23:ce:20:fc:
                    ac:35:2f:1d:28:12:de:70:3f:8f:95:9f:33:21:4c:
                    df:d2:8c:1e:cd:e5:06:6d:c4:4a:cf:45:70:7f:cd:
                    8b:b1:85:41:8b:84:eb:46:da:1a:e1:91:11:52:eb:
                    69:11:6b:95:45:b0:81:e4:e7:61:4b:c6:60:36:89:
                    fc:62:ee:ab:99:ce:fc:19:9d:ca:5f:53:18:04:d2:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:65:B6:E0:E4:28:6D:86:AD:7C:F6:ED:ED:19:67:2E:01:92:BC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/45590aa0-0ef7-3fce-b16f-e04bb001d4c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2/f22aba24-e2d9-4f58-ac80-6b95236d64e2.crl

            X509v3 Authority Key Identifier:
                keyid:4D:EF:F5:1A:48:3C:08:40:8C:59:E4:16:6B:15:5E:2F:10:D9:55:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f22aba24-e2d9-4f58-ac80-6b95236d64e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:71:5c:5c:ce:a2:9a:85:d3:71:01:e5:9d:e5:fb:75:1f:d7:
         37:a3:db:9e:1c:e1:58:51:c5:f5:6f:3f:40:58:c4:5b:5a:e5:
         4f:a6:a0:66:b5:43:4d:be:5c:28:6e:12:eb:f4:aa:29:02:b1:
         fd:e3:2d:0f:39:e1:38:7a:b8:ab:b5:75:fc:75:10:d1:de:52:
         50:2e:47:5d:a6:8a:ba:e5:1a:5f:dd:37:df:fe:f4:2a:1e:2e:
         77:8d:94:1e:53:8e:df:6c:2a:c5:3b:5c:2d:1b:ef:06:80:2a:
         c5:4c:04:88:61:21:a2:26:cd:e8:05:77:48:ac:f3:dd:d2:af:
         3a:02:85:85:f0:58:18:a2:de:f6:0d:9a:c8:ca:f2:ce:39:82:
         0b:7f:03:e2:77:29:b2:f9:98:72:e2:c3:33:a0:18:d5:c0:4b:
         3d:73:c3:12:99:4f:37:27:0a:d7:5a:42:1d:b0:53:ff:ac:4e:
         b1:bf:07:fa:6f:5c:ed:bb:d4:d6:aa:cd:ff:f7:eb:ec:28:e9:
         26:e6:fc:b1:5f:9c:46:2e:1e:b3:5f:3e:e3:8d:be:e0:7e:3d:
         f0:36:5a:ab:44:f8:6a:4a:b0:9c:a9:4d:29:f5:1f:20:0b:a8:
         0b:06:1f:79:02:21:57:73:02:f0:12:54:6a:81:a3:f8:45:e4:
         76:75:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:18 2026 by rpki-client