Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
File:                     9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa (raw, json)
Hash identifier:          MSjoRITkRrp1ap/xjsOrpMKxZNZX01oQjpyjSR+qD+A=
Subject key identifier:   C8:EA:40:94:8B:FB:02:6F:BE:3C:D0:30:4D:C3:EE:0C:47:84:EE:33
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584DB1DAC933B6432068F1EC9000
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     7029
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:c9:33:b6:43:20:68:f1:ec:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=e18f0128-4142-47a1-b228-fd2683b41764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:5c:22:75:fc:33:5d:06:f9:d5:a9:fc:ce:
                    2d:5c:a1:ef:47:28:9e:cd:89:85:bc:c4:14:3f:1c:
                    d3:d1:81:57:56:1d:a5:e7:3d:d4:de:6e:59:92:11:
                    8d:f2:1e:c6:e0:e5:28:8f:d8:f3:5a:38:08:ba:e4:
                    ea:97:b5:a6:9a:d9:2e:4e:7a:41:d1:0e:a5:17:10:
                    32:43:f9:31:a5:cd:7a:95:ca:7e:bc:e7:ac:98:16:
                    9c:1d:d7:1d:0a:17:2a:44:d7:39:a9:a6:c5:b3:a0:
                    76:e4:87:2d:b6:da:e5:98:fe:12:70:bb:88:07:fc:
                    a4:aa:0c:7e:ff:44:37:49:2c:17:6b:a2:92:44:c1:
                    d0:b8:f0:95:45:04:49:f5:89:0f:f2:a7:37:1e:ee:
                    ca:e0:c4:fc:1f:81:a5:91:70:08:b4:70:13:e7:e1:
                    ff:26:23:7b:a0:e7:2c:51:24:a1:00:84:57:c5:3c:
                    34:94:cf:32:e2:39:a7:8f:e6:19:b5:ff:2f:9f:17:
                    78:bf:67:fb:b3:35:19:be:c1:c0:57:14:f9:f8:a2:
                    6d:8e:55:23:d8:e7:71:ff:f0:84:df:1a:96:b0:b9:
                    5b:9f:25:ac:2f:ac:99:b9:dc:ca:42:fa:9e:f9:8d:
                    9e:a6:8b:37:7f:33:b6:f1:73:6c:b2:b8:a1:9f:78:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:40:94:8B:FB:02:6F:BE:3C:D0:30:4D:C3:EE:0C:47:84:EE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/9a2045a2-d1cc-36ea-ad77-cecc419b305e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:54:1a:70:de:fd:32:f6:42:81:21:42:6e:db:ea:ae:d8:
         48:cd:f3:42:1e:eb:df:c3:16:44:da:36:a3:28:06:a2:f8:86:
         7d:c4:27:15:4d:01:69:b4:43:92:ce:7c:9c:55:8e:90:15:63:
         1e:a5:22:37:56:28:c6:ac:03:c4:04:4d:86:7a:5b:40:f6:08:
         bf:59:c7:19:18:26:0a:6c:93:36:f3:c9:4f:34:29:61:8d:d9:
         ea:9f:3f:b0:cb:c3:22:14:77:71:a4:a5:cd:f4:44:5f:ab:b9:
         4e:35:87:ab:89:ef:91:0f:65:26:f6:92:c3:1e:35:e9:54:a9:
         2c:25:33:f9:7f:f2:ee:01:8e:67:8d:42:42:58:07:f7:4d:fa:
         4e:29:6b:98:fd:33:74:51:cf:61:60:06:bf:ea:1f:3e:dd:b8:
         9f:ab:2a:ca:a4:10:ff:d2:2d:78:b6:e1:9e:40:8b:23:06:2b:
         02:50:4a:7c:c2:f6:20:cf:a9:16:70:af:79:a6:42:db:64:c8:
         f2:5c:3e:db:19:b5:c3:71:1b:77:5f:64:de:a5:23:e4:f5:69:
         24:23:78:5e:24:88:e1:13:cf:3d:6b:bc:7e:ae:03:7a:b2:cd:
         b8:63:2d:0c:74:54:e3:46:60:60:5e:28:e0:c4:87:1a:44:1d:
         7a:dc:a1:1a
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE2x2skztkMgaPHskAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTE4ZjAxMjgtNDE0Mi00N2ExLWIyMjgtZmQyNjgzYjQxNzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqlcInX8M10G+dWp/M4tXKHvRyiezYmFvMQU
PxzT0YFXVh2l5z3U3m5ZkhGN8h7G4OUoj9jzWjgIuuTql7WmmtkuTnpB0Q6lFxAy
Q/kxpc16lcp+vOesmBacHdcdChcqRNc5qabFs6B25IctttrlmP4ScLuIB/ykqgx+
/0Q3SSwXa6KSRMHQuPCVRQRJ9YkP8qc3Hu7K4MT8H4GlkXAItHAT5+H/JiN7oOcs
USShAIRXxTw0lM8y4jmnj+YZtf8vnxd4v2f7szUZvsHAVxT5+KJtjlUj2Odx//CE
3xqWsLlbnyWsL6yZudzKQvqe+Y2epos3fzO28XNssrihn3gGjQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFMjqQJSL+wJvvjzQME3D7gxHhO4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvOWEyMDQ1YTItZDFjYy0z
NmVhLWFkNzctY2VjYzQxOWIzMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD
BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjj1UGnDe/TL2QoEhQm7b6q7YSM3z
Qh7r38MWRNo2oygGoviGfcQnFU0BabRDks58nFWOkBVjHqUiN1YoxqwDxARNhnpb
QPYIv1nHGRgmCmyTNvPJTzQpYY3Z6p8/sMvDIhR3caSlzfREX6u5TjWHq4nvkQ9l
JvaSwx416VSpLCUz+X/y7gGOZ41CQlgH9036TilrmP0zdFHPYWAGv+ofPt24n6sq
yqQQ/9IteLbhnkCLIwYrAlBKfML2IM+pFnCveaZC22TI8lw+2xm1w3Ebd19k3qUj
5PVpJCN4XiSI4RPPPWu8fq4DerLNuGMtDHRU40ZgYF4o4MSHGkQdetyhGg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:31:33 2026 by rpki-client