Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45ed8c5f-f27a-32ce-91c3-c2feb3813d67.roa
File:                     45ed8c5f-f27a-32ce-91c3-c2feb3813d67.roa (raw, json)
Hash identifier:          pSANphuowu74oELKjcM7T32Jlvk2g3CceLRL6dWsgAs=
Subject key identifier:   BA:3D:BC:FF:E2:1F:DA:E6:3E:6D:90:F2:2C:4D:21:10:4A:38:5E:80
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F4987F29E73DC85FE26F4FF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45ed8c5f-f27a-32ce-91c3-c2feb3813d67.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396615
IP address blocks:        198.41.0.10/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f2:9e:73:dc:85:fe:26:f4:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=33f45de1-f9e6-4edb-98f2-121d18468eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:cd:2c:63:35:7d:2f:e9:a3:97:3a:42:b5:
                    87:6f:e2:05:92:fc:fd:e7:10:c9:60:3a:86:bf:a6:
                    2a:9b:b8:db:9e:9d:37:ec:2f:ef:5c:9e:63:9d:07:
                    72:87:55:fd:a5:d9:7a:fe:85:28:e1:35:54:a0:0d:
                    32:0e:b0:d4:af:f0:a8:e4:56:b3:94:b3:ca:84:e1:
                    f1:33:af:1f:d5:f4:37:6b:03:97:b8:cc:0c:49:26:
                    42:ac:f9:3d:6a:23:13:8a:4d:06:90:a8:00:4b:d4:
                    fe:d9:78:44:2a:ac:a7:cd:ea:34:69:e5:11:87:4f:
                    41:de:a6:dd:12:05:69:fd:89:1d:b7:ad:53:5b:45:
                    2a:8d:a2:0d:54:94:df:36:4b:79:59:77:2c:7a:91:
                    20:19:c6:be:6f:41:ff:28:a9:53:45:56:2e:b3:cb:
                    b6:91:9d:cb:26:bd:31:ab:df:a2:c8:e7:b6:8f:51:
                    00:39:67:9b:4e:5b:3b:16:3a:04:80:bd:fe:fb:7b:
                    93:d3:b4:6a:b7:34:30:f4:e2:9f:a3:64:d3:d4:6a:
                    21:4f:ea:ee:c9:8f:8c:80:d4:b6:61:a3:15:5c:a4:
                    76:f7:c5:32:7c:e4:a4:f8:f9:dc:f9:4d:d3:01:e6:
                    d4:be:b2:96:21:ca:9d:ec:bc:9a:00:37:ba:8a:aa:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3D:BC:FF:E2:1F:DA:E6:3E:6D:90:F2:2C:4D:21:10:4A:38:5E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45ed8c5f-f27a-32ce-91c3-c2feb3813d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.10/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:62:65:cf:8c:0f:55:99:0b:5d:76:9c:71:04:59:c9:8b:
         12:e0:12:e0:a3:f7:b4:16:83:a1:65:30:74:3b:69:9d:e1:30:
         5c:8e:c3:4b:1e:8d:71:e6:63:51:c5:3d:da:f2:57:ed:77:62:
         fc:fd:5d:92:35:a4:cb:b1:43:32:c9:e1:02:7c:42:08:38:b1:
         41:fa:b5:be:ba:a7:67:d9:17:64:fe:83:b7:e6:9c:fa:e8:65:
         de:30:d0:ab:64:02:64:93:2a:a6:5b:5f:9d:65:1b:19:16:ea:
         d5:d9:5d:cc:68:0b:e8:01:04:52:98:eb:e4:cf:3e:8a:3a:6f:
         63:f4:f4:b8:86:08:57:eb:d6:06:fb:20:9b:18:d4:30:e4:a4:
         99:32:b6:89:9b:91:43:c1:1d:9a:20:d9:80:42:84:cd:6d:05:
         08:b3:ea:3c:f0:dd:55:62:36:40:0e:e0:f9:0d:45:e4:bd:3d:
         dc:1c:fa:b6:5a:1e:db:cd:5d:3c:a7:b8:41:a6:d4:ad:08:a1:
         89:56:f2:5c:41:c6:c4:e2:a9:e2:f3:ca:d6:72:3b:08:6c:ec:
         d7:fd:f9:db:e0:5b:af:07:73:56:03:75:79:2e:fa:90:a4:8e:
         53:4a:09:93:a9:74:cb:0a:90:4b:b9:59:0a:33:74:ca:d1:64:
         26:ad:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:12:04 2026 by rpki-client