Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa
File:                     9ce86c31-9590-3701-8ee2-433e109b499e.roa (raw, json)
Hash identifier:          3muR1k/fQiEshcQ057d6MDAaQZ10Dv2dmypehdgC8AY=
Subject key identifier:   87:3E:F7:D5:73:3A:6F:69:39:45:8A:4A:29:33:3F:D1:F9:3A:37:91
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584DF0AB3648FD9664516AFB6260
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     54198
IP address blocks:        45.44.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:36:48:fd:96:64:51:6a:fb:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=e61c3364-77c9-4cfe-99af-9d7707e14b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:6d:4a:20:10:1e:a1:e0:4c:7d:65:b9:2b:
                    11:f9:d6:41:70:85:76:2d:ed:e3:c1:47:35:98:b1:
                    f0:44:19:36:07:bf:f9:4e:30:03:7b:13:41:f0:0d:
                    96:29:98:25:81:ec:c7:ab:80:c0:03:bf:ce:91:66:
                    c8:7a:9b:4d:eb:08:19:78:36:d3:d9:5c:d9:6b:68:
                    de:32:1a:1f:cf:02:eb:ad:1c:6f:fd:9c:83:b5:00:
                    d4:07:ff:54:be:e6:1c:ec:2a:37:09:af:a7:00:61:
                    94:0c:fe:82:23:9f:f7:9b:8c:d6:e6:02:03:40:0f:
                    4c:5a:05:cb:c2:fc:6a:bd:8b:2c:91:e4:c4:77:5b:
                    50:d2:7d:e9:3b:3f:45:82:70:9f:a8:7c:d7:18:e3:
                    1e:1f:15:e7:5e:2e:79:70:a5:a2:0d:01:13:71:14:
                    9a:06:06:b0:ff:ad:6f:86:97:32:aa:0a:c2:7d:a8:
                    57:b1:de:40:01:65:ff:42:a4:fb:46:79:3d:b7:bc:
                    89:40:0d:1e:4a:77:9c:3f:5a:ac:f5:cb:94:63:ed:
                    d3:34:8d:05:39:3c:9a:89:e7:2f:78:75:5d:76:2f:
                    d0:64:83:69:2e:bb:c4:e5:ec:77:87:98:29:9e:6e:
                    ad:69:fe:6f:c7:ef:12:02:f9:85:35:8c:b1:4f:ff:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:F7:D5:73:3A:6F:69:39:45:8A:4A:29:33:3F:D1:F9:3A:37:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9ce86c31-9590-3701-8ee2-433e109b499e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.44.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:29:d6:0c:99:6c:80:5e:a4:57:9b:0a:c9:16:46:d2:3f:12:
         08:76:7b:76:27:db:84:49:c1:09:88:19:51:6d:6b:8c:cc:f6:
         31:80:e9:0a:23:7c:7e:ef:aa:84:c6:e4:b5:36:ea:7f:b7:93:
         b4:96:6b:cc:b1:5f:3b:ae:bc:7c:16:1a:94:a0:fc:3d:76:c3:
         df:04:21:64:a1:c2:32:43:56:55:84:fd:bd:90:64:1d:5a:5e:
         3e:c9:93:1f:e6:9e:fb:4b:44:86:6b:d8:28:8e:17:1c:92:00:
         cb:1f:58:fc:61:45:62:a2:44:10:9a:a1:2b:38:e9:57:2f:80:
         4d:95:82:2c:94:ce:37:49:03:90:60:21:13:53:c0:72:88:c3:
         2d:6c:6c:cb:42:46:d2:6c:25:27:d2:48:db:38:e2:f1:ef:60:
         04:66:a9:35:e9:c6:b0:8f:bc:5e:f2:8f:91:d8:25:21:b9:91:
         a6:bb:29:9f:c1:e2:75:88:c5:03:fc:38:6d:f9:a7:f1:80:e5:
         a2:3f:88:46:bc:a1:f6:9f:4e:72:5c:bf:c4:c7:e5:d7:7d:dd:
         d3:b1:46:49:96:e9:af:5f:4c:db:89:35:b0:80:0d:8f:d2:ca:
         44:89:1f:b6:e3:4a:3b:d0:be:2a:c4:1b:18:f8:7f:68:2b:8c:
         fa:92:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:30:31 2026 by rpki-client