Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
File:                     c830abb1-8081-3ae6-93ef-70c36f800c3c.roa (raw, json)
Hash identifier:          7Y5WLJw1KPTiTjPfV1ItcLimricX6brzbTK4UuL7OTc=
Subject key identifier:   D4:FA:20:2F:22:6D:B3:0E:B9:54:3B:39:61:38:E8:70:26:D6:D1:A6
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584EFCACC50AD97E91090D871C40
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     1299
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          161.115.16.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c5:0a:d9:7e:91:09:0d:87:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=d3aa0684-8e71-4e2a-8039-b709be8bf2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:67:37:56:6d:18:59:55:0c:da:51:b7:ec:d6:
                    d6:96:df:5c:0b:00:67:50:29:3d:fb:5d:a9:e7:f6:
                    c1:32:0a:8e:0f:1f:5a:99:4d:e8:3f:68:39:2f:c9:
                    4d:3e:3d:10:8c:84:8c:90:b5:20:46:69:e3:4e:c4:
                    7c:56:9b:37:58:47:36:db:91:d8:98:92:45:af:20:
                    fe:63:58:78:e0:35:62:71:43:b9:a8:26:a1:32:cb:
                    3f:f1:1a:6c:51:1c:ac:25:50:83:82:09:b8:15:aa:
                    08:b9:bb:ae:d0:12:12:ca:62:b0:69:2c:f1:ed:f7:
                    4b:4c:06:ce:bd:9b:08:73:5a:58:79:a1:18:31:80:
                    de:36:3f:05:0a:de:cb:12:b5:7c:e1:56:83:9d:fc:
                    13:a4:a8:0d:0a:f4:11:34:45:2e:ee:75:a5:27:89:
                    63:fc:67:48:38:57:7e:6c:1d:bb:d8:23:4c:a9:ce:
                    eb:d8:2b:a5:d2:9d:b8:ed:32:9b:8b:ff:af:91:e8:
                    7d:47:6a:28:85:d8:73:27:26:e2:8e:26:fb:4c:f0:
                    45:e6:d9:84:c1:66:aa:d8:d7:f4:70:d9:39:13:3c:
                    22:f5:7f:6d:a5:8b:6e:d0:c2:fb:88:b2:3a:94:35:
                    5b:e3:c4:9a:b0:f5:12:01:62:9d:64:f7:2e:f5:68:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:20:2F:22:6D:B3:0E:B9:54:3B:39:61:38:E8:70:26:D6:D1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  161.115.16.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:94:a2:ad:47:d7:30:44:79:7d:4d:fe:f9:58:f8:eb:e6:81:
         c6:11:7f:a6:7b:56:57:52:5b:0b:c9:70:dc:31:32:6a:52:47:
         e3:55:92:c9:68:fd:7d:c3:a6:86:8d:60:ac:40:7c:e5:8b:34:
         c6:cd:fd:42:a5:58:8a:a9:6d:bc:d3:37:93:28:e5:70:f2:9c:
         ab:1f:94:92:b4:bc:d7:72:68:f6:d5:9e:12:ff:13:b0:27:32:
         78:83:ed:ef:85:ab:46:0f:12:e0:25:a6:70:8b:55:20:c4:d3:
         c5:d7:d0:17:d8:c0:ae:3c:7c:f6:69:ad:51:35:84:19:74:c2:
         5c:f7:31:3a:87:8b:a4:a7:84:33:3b:29:52:4e:b3:12:52:c5:
         73:d2:3d:73:1b:c6:05:d9:58:a0:8c:ec:93:f7:0b:8a:84:69:
         ec:8d:24:8f:66:a9:78:b5:60:90:b6:87:8a:e7:d5:a0:f6:be:
         07:a3:3a:33:32:54:cc:a5:8e:df:f6:f0:df:1f:0f:b0:99:81:
         5c:b0:6c:59:75:fb:c2:77:0b:2c:23:a6:da:4e:db:9d:7c:05:
         de:c9:8b:b1:ff:74:0f:a1:98:81:59:b1:cc:1f:bd:0a:66:22:
         7d:a4:1a:e2:f4:bb:fe:c1:11:ba:2f:46:e3:5c:73:3e:0c:21:
         9d:ce:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:30:49 2026 by rpki-client