Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa
File:                     6c716255-bac3-3d6c-b84f-2b19383054e3.roa (raw, json)
Hash identifier:          LwrGKW9kl3u7gUL1yPgMNQlgfOeEYfWb4778Jz8ai28=
Subject key identifier:   65:7E:28:08:03:9A:8E:6D:B4:A6:0D:4F:93:D0:F0:2E:F1:7E:38:F0
Certificate issuer:       /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial:       010D0C9F4328584EEEB74F7771F033AAA5CF8600
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     36168
IP address blocks:        45.42.172.0/23 maxlen: 24
                          45.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:4f:77:71:f0:33:aa:a5:cf:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=fc26e452-e4ab-4ff6-8257-daa0c0f277bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:2d:95:ac:93:6c:a4:bf:51:98:ee:f5:03:
                    87:0f:19:d2:7b:d3:91:4b:fd:45:e0:02:16:10:f1:
                    b0:35:cc:62:30:b3:ec:b5:47:de:eb:41:f8:f9:b0:
                    f9:3f:16:23:88:ad:f5:db:5d:ec:7c:3a:84:dd:f7:
                    fa:65:29:65:74:1c:a3:e4:47:c6:ad:00:09:0c:1a:
                    58:f0:11:c8:dd:c0:f5:f3:7f:49:86:19:0e:08:00:
                    12:8b:d6:0d:06:9c:58:89:1a:e3:b0:f8:52:f2:61:
                    0f:05:ff:a3:bf:5d:ce:f9:61:02:45:0a:73:a1:98:
                    ed:ae:61:45:0d:38:bd:b7:07:a3:ad:e1:71:2f:da:
                    a7:96:45:d9:22:eb:1a:7b:44:0a:b9:95:c7:d6:56:
                    1e:73:f3:d4:ab:85:c8:03:d7:cd:58:09:33:60:7d:
                    f9:0c:ed:ba:ee:2b:7e:ac:a3:b8:d3:b7:8b:7f:e6:
                    bc:58:20:a6:05:8b:fc:b1:be:d7:b5:2b:94:f4:95:
                    aa:bb:a7:d2:d8:7e:fb:da:d8:a4:a6:13:0e:b5:8e:
                    5b:14:7f:c9:5a:76:c8:82:99:70:c3:81:d8:9c:a7:
                    da:5b:9c:47:03:8a:a4:b3:29:47:e9:f3:8a:3b:df:
                    b9:1d:74:11:38:2e:d1:9b:f5:16:ad:c2:a9:18:a3:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7E:28:08:03:9A:8E:6D:B4:A6:0D:4F:93:D0:F0:2E:F1:7E:38:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/6c716255-bac3-3d6c-b84f-2b19383054e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl

            X509v3 Authority Key Identifier:
                keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.172.0-45.42.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:92:aa:70:f3:ee:52:a2:88:ca:11:71:d2:46:c3:d9:29:23:
         d8:9e:69:e9:9e:53:6b:bb:aa:1c:44:9f:39:98:63:1e:c4:e3:
         8b:48:e7:7b:bd:3a:9b:99:6a:92:dc:ca:b1:0d:3b:ef:80:b5:
         f3:40:94:21:2e:f1:02:b9:e0:0c:94:b8:25:f2:f2:6a:95:3c:
         23:dc:53:56:12:7d:35:77:a1:d8:2b:c7:34:73:ba:e2:57:01:
         99:ad:8f:ad:43:9d:6d:b1:a4:50:b7:7e:1b:4a:45:a2:ec:06:
         ae:d6:e7:a0:47:54:c7:7e:55:ba:db:50:79:a4:7e:da:c1:6d:
         53:b9:b1:af:89:ff:0c:55:1e:4d:ee:bf:f3:ea:8e:2f:f5:54:
         27:1b:e6:5a:91:e2:98:6e:a3:f3:9d:ba:35:53:f3:da:41:ea:
         01:37:b8:dc:1f:b9:77:5d:4f:36:19:38:fb:21:cf:f2:fe:22:
         b9:fe:09:ef:17:fa:bd:90:a5:05:2e:c9:42:6c:34:47:23:69:
         ab:f6:f7:c9:a5:da:52:b3:e4:82:90:9c:e6:cb:0c:56:21:13:
         41:4b:d6:48:57:42:4e:2c:a1:7e:ed:3f:ff:ba:0a:b6:fa:a2:
         af:03:4c:f7:31:f3:26:1e:5b:d3:6b:23:64:55:98:d4:2b:45:
         7f:ec:b6:66
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7ut093cfAzqqXPhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3
N2VjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZmMyNmU0NTItZTRhYi00ZmY2LTgyNTctZGFhMGMwZjI3N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWAtlayTbKS/UZju9QOHDxnSe9ORS/1F4AIW
EPGwNcxiMLPstUfe60H4+bD5PxYjiK31213sfDqE3ff6ZSlldByj5EfGrQAJDBpY
8BHI3cD1839JhhkOCAASi9YNBpxYiRrjsPhS8mEPBf+jv13O+WECRQpzoZjtrmFF
DTi9twejreFxL9qnlkXZIusae0QKuZXH1lYec/PUq4XIA9fNWAkzYH35DO267it+
rKO407eLf+a8WCCmBYv8sb7XtSuU9JWqu6fS2H772tikphMOtY5bFH/JWnbIgplw
w4HYnKfaW5xHA4qksylH6fOKO9+5HXQROC7Rm/UWrcKpGKMgSwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFGV+KAgDmo5ttKYNT5PQ8C7xfjjwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3
MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvNmM3MTYyNTUtYmFjMy0z
ZDZjLWI4NGYtMmIxOTM4MzA1NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl
ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3
NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx
YTdmNzc3ZWMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItKqwD
BAAtKq4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAIpKqcPPuUqKIyhFx0kbD2Skj2J5p6Z5Ta7uqHESfOZhj
HsTji0jne706m5lqktzKsQ0774C180CUIS7xArngDJS4JfLyapU8I9xTVhJ9NXeh
2CvHNHO64lcBma2PrUOdbbGkULd+G0pFouwGrtbnoEdUx35VuttQeaR+2sFtU7mx
r4n/DFUeTe6/8+qOL/VUJxvmWpHimG6j8526NVPz2kHqATe43B+5d11PNhk4+yHP
8v4iuf4J7xf6vZClBS7JQmw0RyNpq/b3yaXaUrPkgpCc5ssMViETQUvWSFdCTiyh
fu0//7oKtvqirwNM9zHzJh5b02sjZFWY1CtFf+y2Zg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:13:11 2026 by rpki-client