Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/4c14ab12-3e02-3ffd-9aed-79ed340b0fe0.roa
File:                     4c14ab12-3e02-3ffd-9aed-79ed340b0fe0.roa (raw, json)
Hash identifier:          YeSnaJ7G8xJp6kFZY8E9bfuS2p2roFevpcJPlKYqgSE=
Subject key identifier:   F3:81:2B:03:33:13:FF:EA:6D:21:DA:BA:8F:B8:6F:ED:95:92:15:DD
Certificate issuer:       /CN=51b46668-18a4-4ef4-a474-9b87fc684c8f
Certificate serial:       010D0C9F4328584D8EF9A026C0FF4416E0611900
Authority key identifier: F8:1D:F7:92:F9:97:7E:A8:B7:37:E9:C7:B3:B3:EC:3F:39:61:1B:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/4c14ab12-3e02-3ffd-9aed-79ed340b0fe0.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     8075
IP address blocks:        156.45.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:a0:26:c0:ff:44:16:e0:61:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b46668-18a4-4ef4-a474-9b87fc684c8f
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2c4a0c6c-d339-47bf-8542-e99f47a509f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:4f:88:63:d6:0e:57:3d:6a:de:54:6f:49:
                    ef:be:c8:e5:9e:b7:66:ee:da:f6:94:7e:53:99:40:
                    c8:ad:16:e6:af:10:3d:80:4e:3d:ab:d9:c4:b2:fc:
                    ac:7d:b0:5e:18:bb:80:0a:fe:b5:a0:92:ee:68:c7:
                    87:20:f2:1d:a2:b0:9a:f2:51:98:52:f8:76:8a:fc:
                    90:cb:65:ea:4c:c2:73:a7:94:9f:2f:fc:f8:80:96:
                    2d:38:5d:d3:d0:fb:e2:e1:34:24:79:d3:52:25:75:
                    6f:9b:d9:39:39:fa:bf:70:f4:7f:c1:d0:28:a5:99:
                    a7:86:62:67:7d:05:46:b3:5b:93:db:78:d0:f4:a9:
                    8a:52:81:f8:d8:1e:c8:ad:7c:e4:aa:3b:8d:71:7d:
                    c4:b2:57:8f:21:2f:bf:e1:f2:df:69:95:54:6d:1d:
                    6c:58:5c:6c:74:bb:c1:04:32:d7:0d:7c:72:d2:02:
                    25:11:20:19:14:62:b9:f4:90:6f:56:56:a2:04:7e:
                    d6:fb:9d:63:8e:d6:00:27:7a:a8:a8:26:d3:9e:ad:
                    b4:b8:83:fe:ff:ac:94:77:17:54:17:06:84:0a:b5:
                    4b:17:3a:49:bd:6c:54:66:27:27:f3:d8:ed:a2:00:
                    5e:ed:6f:02:74:79:9a:11:da:ce:6f:7d:5e:ab:74:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:81:2B:03:33:13:FF:EA:6D:21:DA:BA:8F:B8:6F:ED:95:92:15:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/4c14ab12-3e02-3ffd-9aed-79ed340b0fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f/51b46668-18a4-4ef4-a474-9b87fc684c8f.crl

            X509v3 Authority Key Identifier:
                keyid:F8:1D:F7:92:F9:97:7E:A8:B7:37:E9:C7:B3:B3:EC:3F:39:61:1B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51b46668-18a4-4ef4-a474-9b87fc684c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.45.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:ad:a2:fe:b3:7a:cd:40:f0:a5:d5:d7:46:27:bd:28:e4:
         5d:7d:06:6e:d8:b3:33:59:34:bf:03:88:46:c3:ff:c2:a7:de:
         93:bc:d6:f0:5d:94:32:e7:30:2d:32:53:07:21:4d:a0:3c:39:
         94:7c:ae:01:2b:20:6e:9c:38:5d:cb:c0:97:a8:51:c7:85:5c:
         47:03:bd:47:c0:a6:3f:59:1d:75:0d:a4:0a:94:e7:2b:0a:98:
         3d:c1:81:c7:44:44:66:ff:1a:19:40:ad:d2:0e:52:99:9c:2b:
         e2:dd:0e:2d:8c:de:6e:a4:59:79:85:ff:ce:1c:f3:e9:25:ce:
         4b:87:da:dd:19:e0:ee:da:3d:b8:b3:9a:0c:1f:93:aa:63:37:
         f6:0d:3b:89:4c:3b:7d:7c:6d:a9:f5:d7:af:2c:f1:ab:29:a1:
         fd:c6:82:43:f4:f5:1c:c3:45:86:7a:72:a5:5b:91:70:20:dd:
         3e:17:38:8d:72:85:e9:73:86:aa:b5:d2:1b:e3:6e:e0:a0:56:
         3e:e0:51:2a:79:9e:25:70:0d:ab:25:6d:e7:05:22:e8:cf:ef:
         32:1f:f3:92:5c:0f:d1:10:fb:55:66:e6:e5:92:7d:37:92:24:
         f6:bb:9c:0e:72:0a:a0:b8:81:54:85:a7:8a:ce:6a:84:28:f3:
         39:77:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:59 2026 by rpki-client