Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa
File:                     115793bc-f645-37af-94e4-a1a201e70b3f.roa (raw, json)
Hash identifier:          X7U1X201kYjQD0ROnRqdO9R2d2QaAmQOzvYVVY1RIi8=
Subject key identifier:   71:B2:82:57:68:97:95:0C:76:8F:B6:F7:9B:05:59:0A:4B:B9:8C:BD
Certificate issuer:       /CN=3c7a440d-8b85-4e4f-b56b-364d9e165c0b
Certificate serial:       010D0C9F4328584F549D6B557124F6CC40B90680
Authority key identifier: 0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     397423
IP address blocks:        45.42.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6b:55:71:24:f6:cc:40:b9:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7a440d-8b85-4e4f-b56b-364d9e165c0b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=22232720-6435-4729-a963-d903c1036ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:c6:98:dc:da:d7:27:be:9f:a1:c4:3b:13:
                    e5:a7:d4:a8:0f:b2:2a:d9:54:e1:e6:90:be:61:a1:
                    b3:19:35:a9:45:fd:35:50:f2:4d:ea:1c:f0:42:cf:
                    ed:81:9b:67:32:6d:f2:c0:3b:94:f4:5e:92:78:54:
                    ac:27:e8:32:a8:52:e5:c8:66:f7:f4:38:9e:8b:33:
                    69:cb:42:ae:4a:ec:cd:44:b8:ce:74:a8:fa:bd:81:
                    a3:12:3f:10:21:f0:e6:d0:3a:57:87:3e:3e:1a:6f:
                    ac:04:0b:1e:3d:4d:30:db:56:a5:10:9d:b0:69:e5:
                    48:3d:74:d6:bb:2e:89:5c:10:f0:ae:19:dd:12:94:
                    99:0f:ee:a5:91:1d:27:d1:31:8e:73:dd:70:b3:81:
                    60:b7:2c:b1:7c:51:be:77:ae:52:56:54:69:be:f8:
                    ce:75:25:0a:7a:cb:34:1d:c3:79:8e:97:8d:b9:c9:
                    b0:60:ce:ad:0d:64:6e:e8:63:7b:5b:ad:04:97:ff:
                    9e:b9:02:f7:0b:01:8b:76:4d:11:fb:0c:ff:ba:4f:
                    19:07:13:6b:f1:1c:72:d7:6a:52:f3:90:c3:92:61:
                    9b:09:01:a9:f5:3e:cd:d6:cf:38:9e:a3:7a:7b:1d:
                    bd:88:ef:e4:b8:d6:cf:a5:f4:9b:f8:69:64:ef:64:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B2:82:57:68:97:95:0C:76:8F:B6:F7:9B:05:59:0A:4B:B9:8C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.crl

            X509v3 Authority Key Identifier:
                keyid:0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:33:46:f3:fc:a5:00:c7:3f:e8:a0:1b:fc:64:f7:17:2a:
         6a:89:9b:ca:8e:ce:0d:54:14:19:0c:7f:91:1d:e4:db:e7:90:
         2b:bb:8e:bf:7f:9e:4d:9d:d6:05:28:0d:cc:e3:af:f0:08:d7:
         11:72:54:55:9b:3e:f1:69:ee:64:d6:7f:ff:cc:b7:7c:b8:19:
         a1:dd:2d:66:6f:9c:e6:96:84:75:18:3d:06:f6:61:26:a7:f1:
         12:a8:58:ae:71:ce:ef:3e:a0:d3:fe:61:0d:7b:bf:f2:ff:fd:
         f9:fc:cb:72:b3:2d:31:50:75:4d:c4:0d:d2:40:3c:f4:70:ca:
         67:60:3e:a9:a8:06:2c:b1:e0:bc:6b:39:32:55:d2:67:e8:85:
         11:6f:05:ef:86:14:e0:83:52:1b:93:3c:55:66:eb:4b:eb:a1:
         59:f8:1c:89:ee:65:91:7f:a3:47:9c:ec:40:c5:83:78:78:c7:
         ac:ef:ec:91:a8:d1:1a:72:d1:56:d0:64:5a:3d:cd:42:3e:40:
         0e:95:43:68:19:00:c9:c6:c3:21:43:91:33:d0:52:17:7b:66:
         de:89:41:f5:fc:f0:75:6b:e1:b3:76:c3:aa:ae:e5:f5:81:ba:
         bf:11:48:2c:be:be:6b:a4:da:16:0e:de:03:d3:14:26:17:57:
         3e:12:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:25:04 2026 by rpki-client