Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa
File:                     020af983-027c-30cc-9e6f-0a3ae736c09b.roa (raw, json)
Hash identifier:          BY3zmyKhtx6Y7DBbhEwtzTw7iiVtd5Z3EEeibte2kgM=
Subject key identifier:   A8:1E:B9:02:30:E7:4F:EA:20:F3:B3:8D:8E:75:6F:BA:9C:53:F8:3F
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584EE7BCAEDC7FF06114E0527880
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     398395
IP address blocks:        45.43.12.0/24 maxlen: 24
                          45.43.13.0/24 maxlen: 24
                          45.43.24.0/24 maxlen: 24
                          66.11.113.0/24 maxlen: 24
                          66.11.114.0/24 maxlen: 24
                          66.11.116.0/24 maxlen: 24
                          66.11.118.0/24 maxlen: 24
                          66.11.123.0/24 maxlen: 24
                          104.255.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ae:dc:7f:f0:61:14:e0:52:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=d9848145-7e5c-400b-a1c4-0c7b6fa1ce65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:9d:79:d3:96:43:ce:74:3a:68:ee:78:54:
                    ec:af:46:19:07:b1:31:a7:fa:71:c5:07:03:4b:26:
                    00:b1:71:6b:0e:71:5b:98:20:a5:be:fb:fb:c5:e1:
                    ef:bc:36:c1:95:e7:af:2b:e5:67:97:3b:af:87:c5:
                    e5:75:26:5b:45:c8:44:b5:66:ac:c9:ec:62:5d:3a:
                    22:70:0b:3b:f5:fa:15:40:95:15:ee:26:81:90:2e:
                    66:b1:60:7b:c0:99:76:b6:4f:2b:28:46:d1:84:12:
                    57:a0:81:bf:e2:68:54:3f:9c:55:22:03:c3:7b:d9:
                    6a:e3:22:7b:6c:f8:6b:98:6f:21:b2:52:57:e5:86:
                    c5:99:2e:31:2d:14:62:f2:78:55:e8:15:32:b1:d4:
                    7e:55:4d:70:4f:20:c0:19:ae:06:9b:f9:b5:39:05:
                    21:84:e2:d5:34:db:27:b5:58:3e:4e:b2:a2:bb:b1:
                    f2:9d:77:c2:df:ef:bf:95:30:e3:78:30:22:e5:6e:
                    1e:72:27:13:b4:4f:4d:4e:1c:52:a0:27:c1:82:84:
                    50:be:43:36:4b:02:60:b4:50:bc:50:8a:fa:08:2a:
                    0a:69:ee:92:72:df:d5:41:ce:e9:08:4c:04:62:00:
                    d6:0c:41:30:23:a6:67:09:d6:f1:33:5a:a9:50:ca:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1E:B9:02:30:E7:4F:EA:20:F3:B3:8D:8E:75:6F:BA:9C:53:F8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/020af983-027c-30cc-9e6f-0a3ae736c09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.12.0/23
                  45.43.24.0/24
                  66.11.113.0-66.11.114.255
                  66.11.116.0/24
                  66.11.118.0/24
                  66.11.123.0/24
                  104.255.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:65:cb:35:76:a9:a8:6f:f6:af:62:07:49:04:ef:42:31:11:
         bf:fe:02:43:81:96:77:a5:8b:a7:72:10:df:a8:4d:50:f4:3a:
         08:45:64:64:6b:c0:56:0d:8e:ce:11:cb:a1:7f:ed:1d:05:c0:
         24:55:b9:cd:15:d3:a2:36:08:56:37:f8:e4:d9:0e:8a:04:7d:
         50:8c:f8:01:1c:c0:b7:c2:cc:f5:bc:08:e0:5a:8c:99:34:cb:
         00:28:87:aa:ac:38:48:ba:48:5d:a4:93:a5:a7:76:d9:d8:c4:
         70:f0:71:cf:81:03:42:56:a3:50:12:7a:f9:4a:f4:0f:a4:82:
         13:d1:b4:d6:aa:aa:d1:e2:a7:de:eb:34:1b:ca:a7:c7:6e:90:
         fd:91:16:82:97:50:87:5b:c2:5f:5f:ce:1c:66:64:ba:10:2b:
         17:f0:43:64:ed:76:24:5c:06:9a:29:a2:d7:d0:06:50:12:49:
         0c:09:1b:b7:36:69:60:0f:b5:51:a2:6c:7a:29:ce:61:59:8b:
         22:49:59:83:87:a7:d4:40:83:3f:51:a4:9c:a3:e4:1c:a3:dd:
         77:51:27:f8:d8:66:b6:81:8e:20:1d:0f:6e:8c:76:30:a6:4c:
         72:ef:cf:80:e4:d4:6c:76:ca:59:9d:44:e0:2d:7d:d5:2b:83:
         5d:90:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:57:54 2026 by rpki-client