Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa
File:                     3e773635-ea2e-3bfb-af22-c2a783f95357.roa (raw, json)
Hash identifier:          UesrAG8qppqJc1NGGO/wuKmAjatFC+XqeUGOjJwcsxQ=
Subject key identifier:   CA:FD:01:7E:8E:B5:00:DF:88:37:15:91:38:F6:14:EC:65:B5:FF:10
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F15CCEBFAE5E033BEA1499550
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        45.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:eb:fa:e5:e0:33:be:a1:49:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=2a9a4ae4-554a-4270-8255-0f055a4bcc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:f2:8b:19:30:7e:51:50:44:a6:a8:02:da:
                    c7:6b:41:83:cf:6d:f1:13:75:91:61:54:6e:a6:53:
                    bb:76:01:38:4d:c4:7b:55:66:fb:c1:62:53:fd:a7:
                    76:ee:86:9c:1f:df:14:ea:21:44:0a:dc:20:fe:6c:
                    d4:e8:15:eb:00:e1:d4:2c:73:2a:5e:e8:26:00:24:
                    ea:f7:2f:7a:65:cb:6f:48:30:42:db:4c:0f:a4:45:
                    c1:26:bb:15:6f:a1:41:65:d8:e1:78:be:be:e7:96:
                    5c:38:81:04:82:63:33:d1:16:17:64:59:b2:5f:c6:
                    5c:39:7a:85:ab:ba:49:9d:0c:c2:f6:b5:fb:4d:43:
                    8a:a4:af:df:af:42:25:7b:4d:c2:28:86:1b:02:5e:
                    97:53:9a:bc:c0:68:d3:bf:1c:6d:97:86:00:61:f0:
                    21:51:b8:dc:3e:1c:4f:cc:34:6e:bf:2b:e9:12:0c:
                    cd:4e:aa:2c:0b:d2:6e:da:90:b5:e0:32:88:88:08:
                    76:c9:1a:48:21:60:31:7d:f9:98:66:6a:03:3c:89:
                    fc:4b:78:0e:bc:f5:b5:84:21:ce:59:14:a0:cc:0f:
                    1c:f8:e1:ec:e8:f8:17:28:76:cc:39:ba:ee:44:dc:
                    a1:00:c4:cd:90:fb:69:8c:4c:21:23:ec:11:e7:9b:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:01:7E:8E:B5:00:DF:88:37:15:91:38:F6:14:EC:65:B5:FF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e773635-ea2e-3bfb-af22-c2a783f95357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:68:ac:93:71:5b:91:ed:e0:e8:f5:eb:f2:fd:88:48:e6:
         1c:b0:41:67:64:b1:ae:ab:5b:87:03:0d:01:b3:d9:d4:61:91:
         77:51:e8:ee:89:fc:10:6a:32:d8:a6:dd:32:ea:8b:be:92:c4:
         dd:db:1e:ef:51:af:80:46:67:47:4c:3b:3a:b5:c5:2a:f4:64:
         0a:09:81:01:a1:eb:77:89:cb:7f:21:fe:e8:3e:b3:e4:ed:ab:
         b9:08:a5:7a:a4:05:b6:e0:5e:26:19:75:00:09:b2:37:fc:35:
         66:1a:a4:6d:a8:65:1a:5d:24:22:ef:41:06:e7:33:1d:0e:29:
         6e:05:b3:89:2a:60:33:f5:6f:4c:d5:20:e4:9d:b0:72:da:38:
         bf:e7:fb:54:c1:d4:05:29:8e:73:98:f3:50:83:95:40:eb:92:
         74:84:30:9e:e4:97:f4:11:96:2d:b9:5f:c3:09:7d:a6:ef:8e:
         ee:59:11:5f:e9:f7:bc:f4:ed:86:03:07:cc:0b:dc:81:68:1a:
         32:0f:3a:44:5f:c7:b5:dd:71:db:ae:f9:01:68:35:22:6f:af:
         c3:f5:d7:71:44:60:3e:e1:a9:5a:81:59:e6:b8:7a:0b:bc:74:
         b9:45:72:d7:de:3a:7e:b5:38:d6:17:ba:8c:5e:c4:75:40:ac:
         96:0d:66:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:19 2026 by rpki-client