Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa
File:                     a552272a-c0b4-3741-93a7-0626b78f66a8.roa (raw, json)
Hash identifier:          OFev/TkhTbxnV3XzHe/5DiJUVym9mjrCSzcS3jBNybk=
Subject key identifier:   38:A0:B7:66:D6:74:9C:4C:78:D1:7F:26:04:0F:AA:DC:02:52:8A:F3
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584E30993B245CC571C7FC803EE0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa
Signing time:             Tue 16 Jun 2026 10:36:03 +0000
ROA not before:           Tue 16 Jun 2026 10:36:03 +0000
ROA not after:            Mon 14 Sep 2026 10:36:03 +0000
asID:                     32097
IP address blocks:        45.58.50.0/24 maxlen: 24
                          45.58.63.0/24 maxlen: 24
                          162.245.222.0/24 maxlen: 24
                          216.189.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:99:3b:24:5c:c5:71:c7:fc:80:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Jun 16 10:36:03 2026 GMT
            Not After : Sep 14 10:36:03 2026 GMT
        Subject: CN=617dbf5a-5d14-46c1-9118-0f0a38f72fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:40:65:2a:00:76:44:9d:80:2f:49:d8:85:
                    7a:17:99:1b:fb:7c:f2:4c:07:4c:bb:48:d4:a6:0a:
                    06:f9:69:38:5f:a3:16:0e:3a:a8:41:a3:5e:b4:57:
                    d3:8d:ce:35:88:6a:01:5a:00:45:89:e3:cb:77:f1:
                    dc:5e:39:c6:7a:ec:4a:f9:bc:0c:95:63:e8:65:2e:
                    53:d5:9b:69:23:2d:f4:74:8e:c0:86:ef:37:93:ae:
                    eb:60:3e:b8:68:d0:ce:0b:28:8d:79:48:79:ae:3c:
                    bf:46:8a:fc:53:44:aa:87:ad:0f:c3:36:e8:a2:2a:
                    d0:ff:01:a3:29:8a:e1:3a:e7:1e:62:58:5e:3f:94:
                    9e:27:7f:e2:b7:49:09:32:21:ec:4a:e5:b7:10:1e:
                    2a:82:4c:ba:91:3f:87:a0:d4:dc:67:a2:aa:9d:ab:
                    b7:3e:81:d4:c0:31:14:09:7e:f6:7c:4a:13:e1:c0:
                    2c:60:78:88:8a:ef:76:84:15:c8:89:77:01:aa:79:
                    c2:33:cd:33:0c:41:a8:78:69:51:e2:06:bb:86:24:
                    0c:d9:a5:4d:39:06:eb:49:32:2b:2b:bd:36:a8:71:
                    21:7b:0d:94:35:bf:0c:89:91:d8:72:20:01:e6:29:
                    67:cd:99:b0:09:72:7c:c1:d8:cd:ab:83:00:8b:8e:
                    56:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A0:B7:66:D6:74:9C:4C:78:D1:7F:26:04:0F:AA:DC:02:52:8A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.50.0/24
                  45.58.63.0/24
                  162.245.222.0/24
                  216.189.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:55:98:42:18:2c:6b:99:dd:37:57:f7:78:83:52:f8:19:
         e6:35:9d:ed:f9:e5:0b:fd:49:3c:1d:cf:13:7f:cd:af:93:ac:
         9e:eb:ce:e9:e5:f0:f5:12:b7:14:44:7c:19:53:af:70:d2:91:
         74:68:47:1c:b8:74:82:d7:d5:3c:ad:de:50:04:56:e8:52:2d:
         fb:c0:a4:05:c2:39:f2:94:f3:7c:85:0e:21:f4:6f:a3:1d:87:
         91:fc:31:04:9d:18:75:d3:52:1b:c0:d3:a5:e8:48:57:be:67:
         d3:30:cb:e9:3e:f7:5a:05:3d:75:7a:0a:fa:d3:77:5b:16:99:
         27:3c:d7:e9:ec:0e:ed:a1:22:af:05:63:bf:5e:1f:6c:c7:0e:
         93:12:e8:38:ed:d6:88:ab:94:6e:60:15:da:88:4f:82:5c:eb:
         cb:da:85:c2:7e:81:13:3f:ea:ee:16:8a:06:1a:25:60:08:4f:
         5f:be:d1:af:d2:71:99:36:a4:08:69:f0:b7:58:c0:1c:a2:bb:
         30:b3:05:04:0f:e8:e9:19:36:df:f5:59:4c:2c:2c:17:0f:09:
         8c:c9:9c:7e:3d:e4:b2:29:9b:15:fc:e3:15:ed:e6:f5:c1:82:
         e8:ac:0d:97:b7:f1:9f:c5:21:5a:47:49:21:e7:ef:36:d5:ab:
         63:2e:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 17:43:19 2026 by rpki-client