Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/45150981-faff-3dec-8737-7cbd5c353479.roa
File:                     45150981-faff-3dec-8737-7cbd5c353479.roa (raw, json)
Hash identifier:          qByVTs0k63OcfQU550lNImg2q6tBguaYxukitPDIU7w=
Subject key identifier:   00:AD:5A:59:F0:52:FF:E3:FF:75:C5:13:85:39:E2:D3:4E:24:85:8D
Certificate issuer:       /CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
Certificate serial:       010D0C9F4328584F318252D79411FAFD101A9E80
Authority key identifier: 9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/45150981-faff-3dec-8737-7cbd5c353479.roa
Signing time:             Wed 16 Sep 2026 11:12:39 +0000
ROA not before:           Wed 16 Sep 2026 11:12:39 +0000
ROA not after:            Tue 15 Dec 2026 12:12:39 +0000
asID:                     4546
IP address blocks:        162.52.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:82:52:d7:94:11:fa:fd:10:1a:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608
        Validity
            Not Before: Sep 16 11:12:39 2026 GMT
            Not After : Dec 15 12:12:39 2026 GMT
        Subject: CN=0d58c3ba-3ff8-40bb-b3c5-25cdb9a995cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:a7:fc:e7:28:68:23:b6:c4:48:cb:6e:44:
                    82:0d:b6:a6:db:de:4d:91:fd:07:85:d5:30:4d:3b:
                    34:c6:21:4a:77:b2:06:d9:89:24:0f:f3:84:7e:b3:
                    0b:2a:63:59:25:24:3c:f1:32:93:f8:f6:f3:18:86:
                    07:b4:ac:06:01:f4:7d:ad:3f:e3:d3:f5:18:bd:2f:
                    4d:bd:99:b5:55:2e:08:e8:0f:23:11:1c:d7:22:29:
                    3b:0c:4d:ab:95:ee:fb:79:fd:5a:9f:86:b8:1d:57:
                    86:a1:bd:95:5d:e5:00:c6:ee:34:5f:bc:9c:53:80:
                    f3:18:aa:fb:4f:e3:ab:de:be:f5:67:a2:e3:40:53:
                    4d:77:0e:98:46:ef:c4:00:6a:b4:64:11:57:da:e1:
                    92:b9:16:58:f6:90:fc:78:e5:01:5e:ec:7e:88:64:
                    c5:90:b3:39:20:5e:1d:50:3b:e3:03:5b:4c:a7:36:
                    28:f9:20:7b:2a:72:f5:08:c0:6a:34:8b:82:46:15:
                    70:8e:3c:46:a7:c0:69:12:96:9f:a5:7c:35:64:77:
                    69:62:d5:e9:ec:0f:eb:32:e5:af:f1:dc:c9:c7:d7:
                    95:2e:55:f2:e5:93:4c:4c:c0:b2:71:6a:1b:a1:c5:
                    0f:1d:a7:6c:53:99:f9:11:ae:64:09:75:d0:7a:e1:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:5A:59:F0:52:FF:E3:FF:75:C5:13:85:39:E2:D3:4E:24:85:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/45150981-faff-3dec-8737-7cbd5c353479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl

            X509v3 Authority Key Identifier:
                keyid:9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.52.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:22:6d:07:21:c8:88:45:e1:e2:bd:95:d9:a7:97:d1:b3:d6:
         14:2d:ba:06:f1:c2:94:f7:f5:df:6e:3c:44:ab:d6:50:b4:0c:
         a6:d4:81:85:80:49:7c:7f:94:77:2b:8b:fd:6d:f8:73:54:0f:
         f1:b2:3a:ac:db:ee:18:8d:f6:29:06:78:61:5d:1b:1a:9a:df:
         95:b5:2a:67:4d:f6:ed:66:e1:71:58:8c:f6:4a:bb:ef:70:f5:
         62:5e:a6:14:79:3a:cb:43:97:fe:ca:a6:1d:60:84:ed:f8:22:
         d9:55:c2:be:f2:fc:ee:ca:33:67:f0:5a:ed:03:9c:bd:95:9d:
         cf:af:9d:42:c9:8d:c1:55:03:a9:8e:66:e2:04:e9:9e:63:29:
         59:5b:1c:d4:f5:f6:69:1c:5f:bb:c9:99:04:ed:b9:93:96:92:
         75:cf:ec:1f:60:10:4f:81:c9:fd:d7:6d:d8:c2:25:80:f6:9c:
         36:9c:a9:21:7a:4d:db:8a:6b:df:74:b7:37:19:38:62:28:98:
         88:34:02:fa:9c:72:3d:c2:cb:25:47:b4:f5:b7:09:3b:bb:18:
         44:63:e7:c9:07:fd:f0:e8:d7:2b:12:74:32:7f:d2:4d:25:2b:
         9e:7f:56:64:63:b8:d5:8a:1e:80:bc:14:73:1c:84:34:da:23:
         9c:98:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:04:46 2026 by rpki-client