Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa
File:                     49a672a2-e55d-3113-845a-f5457f4023f3.roa (raw, json)
Hash identifier:          UYYbze1pyUTtMipY+EkTSeH0UCu82V9kBZyBKLga9UY=
Subject key identifier:   43:A9:55:F7:E0:CA:A6:78:25:19:06:D9:8A:B8:80:C7:E9:AC:E2:33
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584E5A4A05D5EA46C1E5E9F20580
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     36184
IP address blocks:        45.40.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:05:d5:ea:46:c1:e5:e9:f2:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=0f060f0a-120a-4772-a3d7-3fe90f7c1ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:08:ed:8b:7e:44:b9:b0:58:1f:cc:21:b3:
                    d6:fb:87:81:47:c3:bb:d1:ab:89:63:33:90:27:96:
                    ed:4d:59:c3:45:08:02:a5:1f:17:bc:b1:b4:de:9a:
                    d4:72:a3:a9:c8:00:59:6c:aa:7e:90:ae:46:94:a6:
                    ac:5f:0b:75:da:b4:10:6d:45:9a:12:54:31:34:1f:
                    0b:43:b1:c2:37:0b:57:08:3e:ae:ed:6b:95:e0:1d:
                    ce:86:08:14:19:0b:0b:7a:11:30:fb:0b:7a:49:9b:
                    35:f5:d3:87:74:40:e5:46:8c:be:a2:c6:9d:6a:4c:
                    5c:59:8c:8e:34:10:10:be:e8:2c:b9:b2:97:e5:79:
                    62:25:9c:c1:5d:c7:13:75:9f:b5:3e:24:04:bd:5a:
                    3c:b4:a4:01:79:fb:88:9d:02:f0:bb:4b:5b:a1:8e:
                    42:62:93:2c:b5:1e:59:8b:97:37:0d:9f:9f:e5:eb:
                    13:6e:e0:49:0b:06:b9:ac:a8:7d:fa:c3:ae:22:34:
                    c1:a8:6a:92:d2:aa:9a:b6:8c:a3:6e:16:78:40:40:
                    e2:ba:0a:8c:e0:69:43:83:08:7c:43:07:f2:a3:b2:
                    fb:12:48:88:d1:9f:cd:8e:8a:4c:8c:70:88:47:80:
                    1f:b9:23:27:5b:17:74:e9:81:cc:8e:d9:ec:91:33:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:55:F7:E0:CA:A6:78:25:19:06:D9:8A:B8:80:C7:E9:AC:E2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:82:14:dd:06:c8:53:26:35:32:5e:32:e8:e3:c7:7a:0f:
         8d:d9:aa:f9:b9:9a:68:c6:38:e2:83:11:4f:e8:72:d1:76:1e:
         e4:94:ba:ad:c4:dc:78:6f:55:3f:99:fb:b9:56:bc:7e:f3:32:
         0b:ec:57:62:e9:8d:61:8a:e8:70:02:a2:46:fb:92:c5:c6:f3:
         ce:f0:cd:97:34:59:b0:4f:5d:1e:59:36:2d:3d:84:ae:93:03:
         46:5f:2e:0f:f3:ae:a2:a3:26:51:48:ff:dd:bc:ac:11:20:63:
         0e:10:4e:8e:9a:15:b8:0c:eb:1b:64:d4:b7:9d:00:1b:40:23:
         4d:5d:4f:31:fd:2e:1f:a6:16:62:6a:46:0c:ea:2b:02:43:15:
         38:2b:96:e4:1b:f9:23:5a:fe:bc:56:b0:c7:ce:22:0f:05:e5:
         e2:c4:03:47:cd:64:ce:c5:2e:76:a8:8b:06:e7:8d:f8:ab:86:
         1f:f4:cf:95:a6:18:b1:f1:54:68:b5:b6:85:79:6f:14:85:a3:
         0f:e9:3b:32:40:62:c3:fd:4a:c7:38:3b:b3:dc:d3:32:f0:92:
         11:d1:fe:b2:dd:21:6d:47:1e:9f:a0:93:38:8f:66:0a:0c:ce:
         d5:51:b5:e1:7a:cd:07:44:bc:83:01:f9:6f:d9:ee:25:c0:74:
         32:d7:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:57 2026 by rpki-client