Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa
File:                     a552272a-c0b4-3741-93a7-0626b78f66a8.roa (raw, json)
Hash identifier:          FMXS0g17/I6CEk68MoPgq4qFtXT/KAVZvcqgmfC8KM8=
Subject key identifier:   53:66:95:CA:F4:83:D3:2A:05:38:91:06:CB:45:E1:57:9C:4B:2E:4F
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584ED2CC7EB20DD59136C7125EC0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     32097
IP address blocks:        45.58.50.0/24 maxlen: 24
                          45.58.63.0/24 maxlen: 24
                          162.245.222.0/24 maxlen: 24
                          216.189.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:7e:b2:0d:d5:91:36:c7:12:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=98c28eda-07df-4452-91c3-682cbd7f9c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:d1:81:77:d5:ce:d4:0c:c2:38:c4:05:1b:
                    06:18:82:a8:1f:d0:a1:e3:e7:84:b6:4d:84:d5:80:
                    17:af:c9:98:31:6d:14:ff:3b:e2:09:c8:8e:5c:34:
                    2a:65:ce:af:4e:3f:ab:6c:d0:76:94:9d:67:41:db:
                    78:a8:d3:ea:46:d5:af:21:8d:23:30:0d:31:e5:39:
                    9e:b7:ba:6a:f5:2d:d8:94:8d:e4:bd:bc:3a:b3:7f:
                    31:ec:45:10:f6:b5:9c:a3:7b:f0:b0:2e:59:45:ed:
                    c1:37:16:72:b1:32:e8:9a:07:2c:cd:fb:5f:b4:63:
                    62:a0:0f:48:04:ce:97:f6:b0:15:01:15:84:5a:d2:
                    2a:da:ea:bc:af:b8:c4:6f:f8:54:6d:b2:83:59:61:
                    89:bb:4f:a7:0a:c0:ee:02:13:d1:eb:73:3d:13:7d:
                    fc:5c:69:69:c0:60:84:f1:fa:34:90:7d:89:fe:07:
                    e3:cb:ce:de:e5:5c:b4:0a:43:8a:28:57:b6:0e:fe:
                    a3:e1:8d:00:f2:4f:a1:5e:e2:07:aa:b6:da:72:45:
                    00:5d:a5:62:16:85:cb:b0:f2:e8:23:24:a0:59:0b:
                    bb:64:0d:81:62:6a:15:e8:cd:a5:5a:3c:db:77:2b:
                    9f:c3:64:fb:f6:5c:7b:1b:e6:3c:4b:6e:8e:15:78:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:95:CA:F4:83:D3:2A:05:38:91:06:CB:45:E1:57:9C:4B:2E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/a552272a-c0b4-3741-93a7-0626b78f66a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.50.0/24
                  45.58.63.0/24
                  162.245.222.0/24
                  216.189.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:27:bd:ec:02:f2:b6:a3:34:62:42:36:e8:fc:77:4d:5a:56:
         0d:01:a0:63:c0:3f:43:9f:2b:97:92:ee:2d:1a:38:90:db:e1:
         54:6a:41:2b:53:6c:71:18:8b:44:31:18:14:63:43:c1:a5:81:
         73:cc:40:6f:c0:eb:9b:4c:59:cf:6d:4e:8a:0e:50:c2:bd:b5:
         a3:5c:e6:93:d3:88:3d:56:06:ab:f8:b0:f3:7c:5c:e2:cb:53:
         a7:3e:f2:79:1d:25:91:52:55:6d:f0:74:fe:40:c6:4b:de:a3:
         cf:e4:ce:56:66:63:62:ec:b6:da:72:0a:3f:7f:24:08:3e:92:
         2d:63:33:ea:e2:b8:d3:6d:5f:67:35:63:30:2a:91:a9:b4:7e:
         5b:14:eb:38:e2:f8:4b:65:3e:f2:0d:ef:4b:14:6d:a2:7f:07:
         95:e4:3d:23:62:81:cb:c7:9d:14:2e:2f:64:4c:c3:63:91:cc:
         15:5e:fa:fa:4c:33:ab:1c:c9:87:7c:43:f0:45:7c:a7:6a:44:
         de:6c:d1:4e:d6:52:15:54:f5:7b:6e:0a:d7:df:67:5d:42:a9:
         b0:28:44:ce:36:a4:64:94:37:59:3c:a4:6e:c6:0f:0f:51:10:
         50:af:9f:30:9b:b9:fe:af:44:5b:8f:41:41:06:38:37:89:37:
         2f:e9:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:36:13 2026 by rpki-client