Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
File:                     41081f1b-d82b-37ee-bd2d-85ddb0792990.roa (raw, json)
Hash identifier:          WUx3mxXbQdgGmSEzH4LxM4y5Xpj3kgBn3wK2RwN/FXw=
Subject key identifier:   94:79:6B:39:90:ED:3C:E4:8D:DD:7C:1A:B5:9A:30:6E:FA:0F:77:8F
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584F7BB2EC2A0CD0F2A5EFE04D00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     16904
IP address blocks:        162.221.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:ec:2a:0c:d0:f2:a5:ef:e0:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=69926f5c-bc52-4504-aca6-9949d640ef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:29:2e:4a:8a:43:31:dd:0c:b3:0c:9a:b5:
                    cd:b5:75:be:09:db:f4:62:e6:16:0b:3c:30:35:b9:
                    61:d0:56:4d:37:30:de:8f:d9:56:a4:41:51:5b:fc:
                    2b:7c:f6:2d:cc:05:79:05:2c:47:90:82:c9:fe:d0:
                    81:c9:f2:3d:ef:67:93:22:13:3c:55:f9:0d:92:30:
                    59:ca:a4:de:4d:df:17:76:b0:0b:46:3b:8c:b2:12:
                    1d:be:39:8e:5c:6e:d4:02:5c:fd:f3:a9:20:09:e5:
                    56:b0:1e:c4:68:1e:51:2f:0d:a9:7f:c5:cb:0f:f6:
                    8d:dc:3c:1c:41:20:18:f1:6f:88:41:df:8d:df:30:
                    d9:2e:a8:33:c6:4b:d6:7e:28:f8:6b:41:b9:3f:63:
                    e2:67:ae:4f:ee:75:2a:22:6b:f4:65:5f:18:53:65:
                    34:49:9e:13:77:10:1f:b3:29:29:08:ea:a2:8c:4a:
                    a9:98:5d:dd:c6:0f:b9:7c:41:b2:19:fb:68:18:51:
                    58:d3:a8:5d:50:07:4c:aa:c7:19:d7:17:4a:57:2d:
                    e5:e2:cb:b2:79:f7:a2:bd:0a:0d:49:66:97:dd:63:
                    00:05:ad:3f:19:ee:d1:51:f1:53:3e:56:6f:02:e0:
                    f7:c0:29:b7:9e:9b:04:6f:5c:7b:a8:d5:81:e3:25:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:6B:39:90:ED:3C:E4:8D:DD:7C:1A:B5:9A:30:6E:FA:0F:77:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c9:d9:dd:c7:15:02:0f:37:5f:50:dd:43:0d:89:26:57:06:
         9f:76:9a:90:4f:a4:35:3c:cf:16:9d:ee:aa:25:82:d8:21:a9:
         96:07:83:f4:a7:04:f2:b9:d5:88:bb:3f:db:06:9a:1a:18:c2:
         34:37:02:1a:60:89:d3:12:c6:60:56:2d:6d:88:6b:db:5a:b5:
         22:79:4f:0b:a2:64:b2:5e:8d:ed:5c:d8:3e:64:0e:c9:cc:32:
         a5:a2:9a:fb:10:29:eb:d6:66:31:84:84:e1:b6:85:16:62:17:
         2c:4b:e7:09:8b:74:49:84:9b:76:11:e5:f9:91:47:06:89:f8:
         94:3f:c8:b4:43:1d:c8:f9:fc:f6:97:44:15:34:56:b8:42:0f:
         4f:c0:95:64:80:a4:c9:54:7d:72:18:00:ad:03:98:d5:8e:c9:
         35:d9:ab:c6:17:56:97:de:00:0a:6b:1f:c7:e2:a1:50:79:f5:
         70:e0:2f:47:4f:59:c2:30:8c:e4:0d:3c:e7:ef:81:e5:04:c0:
         ba:66:d2:ad:c4:b3:1f:00:f3:85:dc:d3:17:88:37:fe:b8:6f:
         c7:65:93:80:c2:37:e4:01:d1:30:4a:44:45:a4:5c:14:82:78:
         49:42:fc:e6:0d:41:37:83:a6:17:c0:d8:de:9f:41:1c:ea:f4:
         56:6d:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:45:05 2026 by rpki-client