Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/da42badb-83db-3dcc-9dd7-0faef6cea972.roa
File:                     da42badb-83db-3dcc-9dd7-0faef6cea972.roa (raw, json)
Hash identifier:          V2kPCR24bca27PaShs+VJn0YwTK4riM4xM9mA4nqmXs=
Subject key identifier:   DB:4F:AD:33:21:1E:B8:38:91:36:F6:8B:0F:B5:BE:B7:92:19:AC:A3
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584DEB5BA639D261DFAF8E32C000
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/da42badb-83db-3dcc-9dd7-0faef6cea972.roa
Signing time:             Fri 22 May 2026 15:21:12 +0000
ROA not before:           Fri 22 May 2026 15:21:12 +0000
ROA not after:            Thu 20 Aug 2026 15:21:12 +0000
asID:                     401776
IP address blocks:        45.62.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:5b:a6:39:d2:61:df:af:8e:32:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: May 22 15:21:12 2026 GMT
            Not After : Aug 20 15:21:12 2026 GMT
        Subject: CN=04e895e7-9c46-494a-8d7a-71da630ec949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:31:4a:00:28:31:1e:e2:f5:7b:1d:24:fc:
                    cf:36:19:34:3c:7c:72:9f:a5:30:06:de:b1:1c:42:
                    cd:b3:2c:98:6b:1f:a9:d3:d4:b7:93:f3:18:2e:f6:
                    b6:af:90:83:9e:70:e3:d6:ac:e8:91:e3:06:5a:16:
                    df:73:10:7b:44:79:dd:84:03:5a:64:fd:98:7a:6b:
                    dc:a0:5e:10:b3:f3:0f:f9:b3:f8:99:15:56:39:0d:
                    df:2c:6f:23:06:a9:4b:7b:5f:93:25:96:a6:df:60:
                    cc:e9:08:76:4d:e0:5e:3c:9e:3b:c3:99:e1:8a:97:
                    93:96:58:09:66:ce:4d:3e:34:7e:eb:0a:20:fc:b4:
                    e6:e6:5d:02:5d:1d:50:05:b0:00:b9:87:2c:aa:61:
                    ff:33:d3:b6:e0:66:c7:ce:c5:59:cc:53:6a:89:1f:
                    ce:32:7b:df:41:14:1a:b9:27:5c:71:de:d9:66:03:
                    a7:38:45:6a:ee:67:e5:78:97:7b:9c:67:f0:c1:d0:
                    49:3f:f9:ba:d8:ac:84:18:30:c3:14:48:e9:8b:04:
                    b1:08:ac:1d:27:7b:e8:8f:95:5b:b2:f5:2b:1b:c1:
                    f6:17:b8:3d:5c:a9:dd:b8:7c:ee:e7:ad:56:3d:37:
                    a1:41:29:09:3b:33:c5:a4:1e:60:e5:ed:a5:8e:de:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4F:AD:33:21:1E:B8:38:91:36:F6:8B:0F:B5:BE:B7:92:19:AC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/da42badb-83db-3dcc-9dd7-0faef6cea972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:25:50:21:c6:3a:af:ed:82:ce:e7:55:2a:db:ec:9f:6f:
         08:a1:43:ca:0f:bc:b3:8b:40:2b:5f:ef:da:2e:2e:b2:22:d1:
         a9:e6:bd:2b:13:8c:01:3b:2e:73:b6:cb:1b:46:b6:a8:bb:5f:
         9a:d9:9a:bb:43:e8:ef:f3:3a:f8:fb:c9:09:10:a0:55:33:6c:
         be:15:6f:bd:3d:4f:4f:8a:48:9e:25:0b:69:5a:88:92:04:ca:
         8d:0d:d5:78:29:74:bf:a1:ca:7e:62:6d:e2:2a:19:3b:c1:e9:
         13:2c:4c:bc:ea:73:c7:17:3b:e1:1a:23:7e:dd:8c:22:e6:85:
         83:bb:c8:27:06:bc:90:54:ce:34:9d:04:ee:82:ac:7a:c3:b4:
         d5:a4:e5:34:20:a0:15:10:d8:5b:dc:b9:e4:6e:78:30:1c:f7:
         45:16:9d:d3:f0:55:47:04:43:8a:d1:1d:d4:e1:77:42:51:65:
         60:2c:ec:25:80:d7:0d:1c:10:ed:fb:e6:35:56:dc:f4:27:4a:
         ad:28:1f:15:e9:10:5b:a5:30:3c:1d:df:1d:a2:29:21:eb:8e:
         6f:b4:5c:cf:46:3c:4c:58:24:96:3e:3e:a6:f3:de:7f:08:3c:
         40:1e:e4:98:47:7b:ab:93:24:79:b1:67:f3:a6:a8:58:30:81:
         1f:1d:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:50 2026 by rpki-client