Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
File:                     240f9d0d-a17f-35e3-8ade-de3e78530574.roa (raw, json)
Hash identifier:          lGLhQrLUQZXMXOrTr0sGL5gDcGAxxoBeXS00pbzpM/s=
Subject key identifier:   48:85:CF:A4:1B:0F:6B:D5:B1:6E:FF:8A:F9:ED:E0:A4:5F:7C:6A:F7
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584DDE85CBBDD672314D9E9A95C0
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     26658
IP address blocks:        45.43.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:cb:bd:d6:72:31:4d:9e:9a:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=c51ad530-a2db-4a0a-8236-52790ae43a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:dd:fa:88:92:e7:91:f2:5e:3e:1c:42:bb:
                    11:1f:92:34:a8:0e:6d:c1:41:a1:cf:b0:14:fd:8d:
                    dc:92:c9:a7:01:1b:b9:61:7d:cc:44:32:46:2e:ad:
                    f6:36:a8:bd:ba:35:7f:46:31:1f:53:d0:ea:83:bc:
                    84:15:65:d1:22:ad:7f:9a:2e:0d:a7:5c:46:ad:00:
                    8c:da:bc:2f:51:de:f2:61:df:96:55:0f:ec:e8:c4:
                    18:e1:69:cf:ca:e7:a3:e5:94:60:ec:a2:d2:7a:b4:
                    c1:71:36:b6:1c:eb:9b:43:98:c3:1b:78:30:6e:bc:
                    11:34:5b:aa:ff:dc:ab:bd:9a:9a:ee:2d:9c:d8:7d:
                    58:b8:aa:11:49:f6:4d:de:38:e0:e0:39:aa:65:75:
                    10:d1:ae:ad:91:03:58:c0:15:79:0e:bd:13:0c:92:
                    67:40:89:20:27:9f:7b:5b:34:bd:0c:f3:51:e0:51:
                    0a:dc:b7:f2:7e:06:aa:52:89:6a:0b:4e:c1:41:af:
                    46:c2:2e:d9:81:f4:4e:cc:9f:da:be:b1:a7:67:21:
                    8f:93:4d:e7:fa:fb:74:c3:f2:71:62:e9:81:6e:fa:
                    d3:54:e3:c1:21:b5:2f:33:32:08:e6:ef:78:0a:d1:
                    09:7f:ac:2d:e2:21:7d:40:e4:25:42:83:19:da:1f:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:CF:A4:1B:0F:6B:D5:B1:6E:FF:8A:F9:ED:E0:A4:5F:7C:6A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/240f9d0d-a17f-35e3-8ade-de3e78530574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4d:7c:58:26:44:9b:3e:6e:f1:bf:62:e1:d0:e7:62:a0:b5:
         d3:3a:88:ad:49:a6:e9:35:15:78:05:5a:7d:48:c6:e1:d3:d0:
         bd:66:c1:03:d3:d9:27:df:73:ca:30:fc:79:e8:54:98:4e:48:
         86:5e:d1:88:bb:81:31:a2:0d:be:d8:76:d4:a3:a7:e2:24:8e:
         19:e6:d7:ae:70:dd:58:ea:81:bf:19:b7:89:00:23:13:18:04:
         5f:9a:b9:0a:93:f9:96:40:0e:20:4a:02:be:43:f4:84:4a:96:
         69:08:35:64:fd:87:68:05:50:d3:31:40:3f:89:84:6b:59:5c:
         67:4d:3b:8e:72:a5:7f:75:ae:6a:6b:c0:5d:79:62:50:f0:f8:
         df:67:92:4a:7d:a4:41:f8:5b:8e:82:9a:2b:64:18:c7:8c:74:
         10:a5:cc:af:9f:f2:66:38:c7:6d:26:dd:ad:c3:f4:6b:bb:6a:
         c2:b9:c6:8a:cb:3b:05:8a:28:0c:5b:b5:5b:f5:11:94:1d:be:
         89:46:a6:a4:34:9a:57:fc:d8:3e:e8:1a:3c:79:c1:b3:80:dc:
         c4:26:5a:f6:c9:93:f6:79:32:bd:73:95:f1:c7:a8:28:d6:bf:
         ae:a0:4d:e6:29:a3:07:fa:f4:75:9e:19:41:d2:99:d3:f3:d7:
         b6:8d:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:46:36 2026 by rpki-client