Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa
File:                     1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa (raw, json)
Hash identifier:          +ORmfCSQBQnVxEUQyRYs/sELvKpaMoKKL/cHO9PbSc8=
Subject key identifier:   6E:50:9A:48:E4:22:39:E1:38:02:6D:2B:B7:A9:61:41:63:36:82:50
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584D09125F8887808FFB51EC3C00
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     398465
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5f:88:87:80:8f:fb:51:ec:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=5452afc8-0f74-4743-ac10-5a1e394ce0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1f:4a:7b:4c:a3:e6:71:b4:6c:ab:7b:15:00:
                    53:fe:a3:f7:3c:39:0b:74:ad:25:28:c2:2c:5d:72:
                    35:7a:1b:c6:2c:19:15:d2:1a:65:c8:19:d5:6d:fd:
                    82:d3:11:89:4f:d1:1a:f4:74:f8:96:c2:36:8f:16:
                    e8:85:0c:d4:32:6b:e5:79:61:3e:1e:a0:e6:f1:c4:
                    cc:77:50:90:3e:b2:a0:b6:5f:2f:09:5f:d0:ad:ae:
                    0c:47:c4:ec:8f:af:3a:c9:df:38:42:ca:ef:b1:ab:
                    2b:d9:35:24:44:97:65:6f:af:96:6e:76:8f:db:79:
                    57:23:d4:17:3e:4a:48:b0:d5:7c:28:f7:76:9d:3b:
                    d5:7d:57:50:88:33:90:ab:d7:d1:79:9b:53:ce:ab:
                    57:66:c1:1e:93:81:2f:03:40:f8:e9:b6:c8:53:3d:
                    66:23:13:bd:9a:c1:8b:35:f0:d0:b6:5a:05:16:cd:
                    86:41:c9:d1:31:cd:07:40:c6:5f:e9:d6:44:3c:e9:
                    62:93:56:37:4e:f6:40:22:ec:3c:c8:dd:c6:32:f1:
                    f2:62:f8:f1:33:18:7b:e0:c7:6d:a2:4b:0c:3c:eb:
                    ff:8f:91:ab:26:bb:11:1b:de:8b:7b:05:01:61:5a:
                    a5:f9:c6:b9:03:ed:8a:2a:b6:0a:4e:c9:d2:6c:c3:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:50:9A:48:E4:22:39:E1:38:02:6D:2B:B7:A9:61:41:63:36:82:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/1fd29acb-8c96-325a-a813-ab420bc7ed7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:88:da:d8:6b:71:78:88:e8:a9:27:a6:f7:a9:37:4d:ff:
         e1:e5:2e:40:4a:76:64:20:8d:70:e8:1c:e2:95:53:a2:1a:fc:
         3e:c9:a9:72:57:49:2e:58:81:33:0f:4c:8d:3b:d4:f0:cf:65:
         db:2a:98:42:2c:21:a5:7b:f1:88:ea:49:db:51:c7:ba:a9:f4:
         a0:6b:f3:40:31:69:52:96:3a:66:2c:a3:60:5b:af:c6:c3:bd:
         eb:3a:9c:d0:06:b3:60:5a:dc:b0:09:8e:e6:2a:e9:b3:77:75:
         2d:a8:b0:6d:2c:b9:24:0b:2c:e8:49:91:07:ae:f7:39:8b:b8:
         f6:65:43:25:f4:0a:d4:c6:3e:e9:ce:4f:bc:de:d7:76:af:2f:
         fb:54:61:a3:a4:cd:f3:c9:a1:9e:d0:33:5b:c2:5f:b2:b1:83:
         13:20:cc:8c:9b:aa:2d:bd:74:e2:77:ea:b2:0b:83:ce:68:cd:
         23:02:77:ca:52:5b:ba:6c:6b:ff:5a:82:3d:1c:85:d6:2c:fc:
         1f:cb:8e:57:59:03:8a:12:57:23:99:0f:c6:87:74:1a:f8:93:
         1b:fe:9b:35:a6:8a:56:c1:42:c7:16:89:ed:59:67:76:34:b5:
         b0:29:23:ac:c5:b1:1b:da:57:3b:90:08:b2:64:f2:61:26:29:
         de:ff:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:00 2026 by rpki-client