Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
File:                     95727abb-f8cd-392c-9fda-6a003409ad50.roa (raw, json)
Hash identifier:          nNYm+XOECfDPk/hoI/oRLcPMdKjxhpLpGcpmzDqVH5o=
Subject key identifier:   CF:70:D1:FC:C8:3D:C9:58:37:07:B5:12:05:FC:5B:BD:43:0F:4E:41
Certificate issuer:       /CN=09729117-c725-49ca-9a64-f10a055403c3
Certificate serial:       010D0C9F4328584E48248CED2040A332B8D13860
Authority key identifier: 22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     60354
IP address blocks:        45.41.234.0/24 maxlen: 32
                          2602:80b:b000::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8c:ed:20:40:a3:32:b8:d1:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09729117-c725-49ca-9a64-f10a055403c3
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=d7c8b85f-6f37-41c7-80f6-f1ba24f8e9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:3b:20:0e:5f:c9:00:a1:54:48:b8:64:a1:
                    35:92:7d:ad:01:9f:c3:43:97:47:d6:e6:35:26:fb:
                    8c:59:64:63:f3:2e:48:8d:26:65:64:8e:3b:09:a1:
                    fc:0a:0b:0e:d7:ae:3f:f4:dd:c8:d3:62:34:5f:5c:
                    12:0d:c4:33:87:65:dc:ed:22:40:f9:bb:21:f0:0b:
                    b1:c2:ef:45:34:3e:4c:22:bf:53:a0:c2:5f:3f:bc:
                    f7:e5:0f:f6:4f:04:17:84:5d:32:cc:83:59:ce:1d:
                    af:84:0e:83:d7:e2:0f:40:20:23:d9:71:d5:60:ef:
                    60:65:a4:15:94:ef:ca:3d:a2:98:16:f3:09:10:4e:
                    0c:85:c1:3d:4d:85:c9:82:d7:d0:b7:d5:c7:27:ed:
                    2e:38:5d:21:63:67:ad:0a:10:65:62:f4:c6:43:37:
                    88:68:78:08:6a:9f:55:b7:6a:09:44:9e:ea:f8:44:
                    73:a1:60:3a:15:ed:71:16:5d:f9:78:27:b3:df:26:
                    49:78:8e:73:c5:85:f9:4f:56:24:a5:98:5e:e3:99:
                    48:5d:57:33:4e:b9:31:05:de:58:cb:b8:23:c0:fc:
                    0a:2e:76:c3:0f:5c:42:aa:fe:3b:53:d3:ef:a6:a8:
                    8a:b6:12:52:af:78:e1:d5:c8:82:c2:1a:96:dc:33:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:D1:FC:C8:3D:C9:58:37:07:B5:12:05:FC:5B:BD:43:0F:4E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/95727abb-f8cd-392c-9fda-6a003409ad50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3/09729117-c725-49ca-9a64-f10a055403c3.crl

            X509v3 Authority Key Identifier:
                keyid:22:1B:19:CA:BD:F7:88:3C:50:D8:13:F3:B2:F8:AF:7A:A9:8A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/09729117-c725-49ca-9a64-f10a055403c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.234.0/24
                IPv6:
                  2602:80b:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:17:5b:a5:5e:94:76:fc:55:7d:2a:b3:68:a5:18:66:e5:98:
         ce:ad:67:bc:7c:e7:97:5c:c8:3f:f3:4c:d0:13:fc:04:dc:be:
         18:0f:f4:31:b2:4c:fd:a1:2a:70:e1:62:c4:b2:7c:42:4d:c9:
         92:3c:8b:d1:10:38:d2:bb:00:10:7d:17:72:d3:ac:83:07:9c:
         2e:a8:90:bf:ca:b3:ca:0b:db:c3:02:47:9c:b1:e6:be:7b:eb:
         b5:90:31:1b:e6:b6:37:8f:0b:d6:65:38:80:f5:0d:88:f3:44:
         89:0e:8e:7a:1c:fd:b6:85:ac:7e:af:3c:d4:50:5c:32:55:64:
         5a:52:c0:11:85:fc:37:19:a5:ea:03:3b:e8:f3:3b:71:f2:ae:
         14:1d:b5:f0:bd:57:ae:86:be:63:e8:c9:e4:26:34:e4:3d:c1:
         ff:35:da:f7:bd:d9:84:b2:fa:33:0b:cd:02:6e:12:84:8a:7b:
         f0:19:fa:58:2b:8c:f8:e7:29:7f:77:7a:65:3b:8b:24:19:29:
         b9:4c:f7:21:2d:c8:fd:8f:43:ad:b0:b4:37:6d:47:94:b6:49:
         03:12:57:f4:c5:fe:96:8a:62:3b:5c:b1:be:67:06:f0:aa:dc:
         60:13:9c:a0:77:69:a4:7a:24:55:9f:62:98:8f:21:81:29:4d:
         8a:8e:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:52:36 2026 by rpki-client