Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2020765b-0e88-3f90-aa32-049361c5be4d.roa
File:                     2020765b-0e88-3f90-aa32-049361c5be4d.roa (raw, json)
Hash identifier:          pl8wcr+gebo/JiZvjd/xWkiVW+P7jUaIMlpxJUobw5g=
Subject key identifier:   8A:03:7C:21:0C:B1:FA:27:8A:C5:B2:DB:EF:A6:5B:50:53:B5:7A:42
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584DBA3AF83799A93077A5408E80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2020765b-0e88-3f90-aa32-049361c5be4d.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     212384
IP address blocks:        45.150.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f8:37:99:a9:30:77:a5:40:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=72a1ee98-7a9f-447b-a0dd-f4d06a15a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f0:7a:56:ad:88:82:2a:c5:05:64:a7:e2:71:
                    b7:a6:a5:fd:56:b7:6a:24:5e:7a:19:2f:36:d0:23:
                    97:29:80:51:69:58:c2:08:5b:08:61:59:05:4a:38:
                    3e:16:80:12:9a:c7:12:27:8e:d3:1d:0c:4d:6d:f6:
                    1b:5f:22:e5:1b:8c:25:fa:3b:7b:e4:b5:91:e6:fd:
                    11:9c:bb:00:d8:d3:66:f9:86:80:a0:03:98:b1:1d:
                    18:e1:a5:ce:a1:45:de:04:9a:6c:b2:6a:8c:f6:37:
                    3d:6b:fc:cf:4e:63:d5:83:18:57:01:1e:43:9b:30:
                    6e:43:9d:b3:45:87:13:fb:ec:2d:18:6c:dd:b3:77:
                    d7:05:83:7e:54:46:21:42:74:7c:d8:5e:5e:29:85:
                    2b:2e:0d:6a:b0:7a:22:75:00:7b:6b:b7:06:f5:b0:
                    05:6f:9a:20:c3:ed:3d:ed:1a:d6:d6:7c:35:8d:a3:
                    7c:17:b5:12:8e:d1:f6:30:92:0a:16:d8:3b:2a:47:
                    6a:a5:6b:21:6d:c8:a7:02:55:9b:e3:83:23:94:3d:
                    27:e2:01:30:4d:ff:7c:64:7e:67:78:12:a4:5c:90:
                    28:e4:bc:cc:88:39:6d:07:11:95:6b:77:d8:70:0b:
                    be:27:a4:d1:67:92:9e:b8:4e:ef:2b:9b:21:e0:93:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:03:7C:21:0C:B1:FA:27:8A:C5:B2:DB:EF:A6:5B:50:53:B5:7A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2020765b-0e88-3f90-aa32-049361c5be4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:b6:d8:e6:74:8d:bf:ee:2d:61:62:fd:6d:ae:32:4e:39:
         71:1e:e4:08:68:a3:d1:19:31:1b:07:af:33:7b:f6:05:b1:21:
         17:0a:ab:92:55:5e:39:ba:2f:b2:81:88:c5:f6:17:f6:b1:83:
         25:0e:0c:80:18:ba:16:16:a7:b7:9b:c6:07:41:08:87:26:71:
         d2:50:98:b0:b1:49:eb:eb:89:48:5c:cc:67:e9:d9:69:96:4f:
         31:32:77:25:45:41:7c:4f:6b:03:7e:b2:33:c3:71:ec:b4:b9:
         64:c8:73:2b:42:3b:e3:5b:c4:1a:6e:d0:7c:2c:ac:e5:62:a8:
         cd:fa:66:14:dc:d7:ee:59:6f:84:88:2b:e2:99:b5:53:76:66:
         e5:7a:16:c5:e3:08:85:ca:17:8e:36:c5:2a:ff:74:54:d9:fc:
         b4:5e:22:59:1c:6a:18:10:26:33:3a:4a:77:ad:94:c7:d9:40:
         ff:aa:11:83:a9:e1:08:0c:4f:62:42:bb:96:01:e7:1f:24:41:
         e5:ab:dd:81:eb:0a:4d:01:dd:c8:ce:ab:65:38:85:b2:d1:ae:
         a3:b1:22:c4:37:3f:c0:03:0b:7d:2d:a8:23:35:08:75:6c:3f:
         27:90:f3:04:9c:1e:2c:d3:68:41:00:6c:b7:65:76:3a:fe:65:
         70:56:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:05 2026 by rpki-client