Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1379eaa7-c7d3-32d6-b1b0-44b04715e630.roa
File:                     1379eaa7-c7d3-32d6-b1b0-44b04715e630.roa (raw, json)
Hash identifier:          NXBZ9MWjfGaiRdAz9bns3f2trAwj5MUcq6Dc3EtSawE=
Subject key identifier:   E9:FB:63:DF:53:1A:AC:1D:A8:11:9D:7A:E0:DE:00:46:DA:D4:58:8D
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B891784518678CA4FB087A380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1379eaa7-c7d3-32d6-b1b0-44b04715e630.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     62610
IP address blocks:        45.43.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:84:51:86:78:ca:4f:b0:87:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=e04b82be-b6d9-4962-b572-54f7560435f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:bd:91:df:60:b7:bc:db:5d:e8:3a:df:3e:
                    cf:43:65:74:cb:ae:79:05:be:b8:ce:83:17:47:46:
                    3f:7e:ed:4c:1e:c7:6d:06:20:f8:b9:f5:c7:9c:50:
                    d2:f3:a4:18:61:57:f6:6c:ed:91:62:5d:86:e5:84:
                    06:0e:5a:3d:93:1b:a5:13:f9:e5:ad:0e:39:9f:1e:
                    51:76:ad:fd:9a:0b:8e:05:62:00:c3:66:f5:d8:8a:
                    23:50:87:99:00:31:66:6b:b4:1f:b4:d4:e7:dc:52:
                    20:37:4d:94:d8:84:bd:74:af:e9:d2:eb:9d:ed:ff:
                    ae:9c:55:bb:b7:98:f8:d9:0f:99:74:7e:c2:95:07:
                    b5:4d:e5:c2:f4:44:78:95:68:3c:a6:de:17:4e:65:
                    92:a3:0b:5e:9b:a3:a2:e2:a7:4f:30:c4:66:eb:d9:
                    5e:a2:a7:bc:c8:bb:2c:3f:9d:12:aa:ac:76:d5:d7:
                    8b:75:8d:43:db:14:9d:67:83:41:65:16:ff:85:fa:
                    3f:f1:c4:fb:58:f4:e3:59:3b:af:13:b9:83:1d:53:
                    22:88:52:e6:04:bb:1c:73:62:20:60:25:52:4f:d0:
                    45:5e:51:07:1b:09:da:a1:ad:c0:40:1c:9a:71:b1:
                    a6:4c:b8:f4:5d:bb:b1:29:b6:13:8e:2e:14:98:2b:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FB:63:DF:53:1A:AC:1D:A8:11:9D:7A:E0:DE:00:46:DA:D4:58:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1379eaa7-c7d3-32d6-b1b0-44b04715e630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:42:1f:93:95:a1:bf:b0:ce:66:19:95:0a:3d:ad:12:36:a3:
         60:ee:86:c7:db:97:e1:c8:b9:5c:3e:fa:3a:0f:c1:df:c3:25:
         ea:b3:66:6a:5e:2f:0c:19:79:35:7f:8d:08:e2:9d:55:02:49:
         6a:cd:6d:85:53:c5:a4:78:c2:b4:80:a8:5e:16:d4:f7:aa:7d:
         67:9d:b6:68:81:d6:fc:b5:b2:b7:2c:3b:6b:08:2c:68:dd:50:
         82:dd:8a:84:d6:d6:fb:4e:1f:42:25:53:ee:33:f3:08:db:2f:
         cb:bd:81:91:f0:f7:28:d6:22:f7:e4:5d:55:a0:75:57:15:5e:
         97:44:09:da:04:a7:40:ed:bb:e5:0f:a9:0b:5b:32:6f:a0:4b:
         c4:5c:78:7f:70:8d:97:be:98:1d:d6:26:b2:11:ee:f5:72:10:
         ba:1b:31:4a:4b:57:2d:84:09:e8:2c:4e:33:f8:b2:b5:d1:54:
         02:63:34:a1:22:68:d8:77:a0:42:22:09:96:cb:19:c8:90:41:
         0d:0e:ba:62:80:dc:2d:ff:4b:91:9f:a3:23:73:26:10:e0:66:
         c4:39:0d:8a:78:a5:1a:22:f4:e5:36:be:33:e8:55:c4:58:06:
         db:d7:db:2e:ec:6b:0d:b5:c7:df:37:f9:c4:35:4b:26:96:2b:
         71:76:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:00:04 2025 by rpki-client