Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa
File:                     20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa (raw, json)
Hash identifier:          dtDiyP71EtKhzTBjAcTqbNZ/H+oni/SEDOLt22ztkG0=
Subject key identifier:   61:31:02:7C:F4:09:BF:17:CF:C4:91:15:EB:A8:72:E0:E5:8F:9C:E9
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584EAEB3C1BCEF095C8E0D368600
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa
Signing time:             Fri 31 Jul 2026 14:41:21 +0000
ROA not before:           Fri 31 Jul 2026 14:41:21 +0000
ROA not after:            Sat 24 Oct 2026 17:54:15 +0000
asID:                     219427
IP address blocks:        45.43.206.0/24 maxlen: 24
                          45.43.218.0/24 maxlen: 24
                          64.187.226.0/24 maxlen: 24
                          137.83.79.0/24 maxlen: 24
                          160.202.95.0/24 maxlen: 24
                          160.202.110.0/24 maxlen: 24
                          162.248.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:b3:c1:bc:ef:09:5c:8e:0d:36:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Jul 31 14:41:21 2026 GMT
            Not After : Oct 24 17:54:15 2026 GMT
        Subject: CN=127e1d40-d482-4c96-ae2f-6a5009be7191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:20:b3:ae:8f:2d:c7:c6:30:ad:6d:e4:4d:
                    39:19:cb:a7:d3:e7:43:76:23:ac:1b:a0:4d:0c:c3:
                    78:d4:34:88:65:a9:b4:73:d2:0b:60:e1:51:20:1a:
                    0d:8d:ee:a5:c4:99:dd:01:e4:81:ca:5f:c6:e9:c1:
                    f4:5f:6a:70:a5:da:aa:60:5f:a7:02:dc:d5:ee:ce:
                    bf:bf:9e:86:10:ae:f5:c2:31:32:77:e6:16:9b:36:
                    e3:ee:cf:21:c6:26:ec:d6:47:3e:e5:e6:6a:eb:49:
                    37:b7:7d:54:82:ea:ed:bb:b1:31:5d:99:4c:8a:03:
                    07:8c:ed:ad:d5:f7:d7:cc:d7:25:6b:e6:aa:ed:70:
                    41:d3:7a:45:5c:c5:e3:c8:0e:d0:fa:06:7f:68:33:
                    91:d0:e0:82:a2:b0:94:1e:86:bf:a8:f9:36:f1:55:
                    5f:0b:03:7c:1e:7d:3d:7e:48:d2:04:1c:7e:16:c1:
                    d8:c5:52:19:bf:32:cf:a5:d3:50:63:8b:00:33:1e:
                    45:7f:bc:a3:cb:68:9b:35:68:48:eb:dc:25:c3:42:
                    ff:c8:e2:96:a8:72:48:87:2b:04:cc:8d:5f:ff:85:
                    2e:a0:de:0a:c9:f9:df:5f:c6:7b:47:4a:10:04:d2:
                    04:a2:83:f1:11:b2:72:50:db:99:20:07:28:ae:50:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:31:02:7C:F4:09:BF:17:CF:C4:91:15:EB:A8:72:E0:E5:8F:9C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/20d78a3e-0695-35d2-9237-0d8c8eab58ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.206.0/24
                  45.43.218.0/24
                  64.187.226.0/24
                  137.83.79.0/24
                  160.202.95.0/24
                  160.202.110.0/24
                  162.248.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:22:6d:50:22:17:29:b1:0e:ef:08:3a:fe:c2:6d:95:84:
         3b:71:05:3a:90:2c:db:03:c5:83:14:8b:0e:b9:42:d2:d9:ea:
         ec:f1:a3:c2:23:b3:11:71:42:ee:fb:f9:c4:93:61:cb:2d:4a:
         05:89:3f:fd:88:f0:46:b5:77:c3:f2:51:e8:c9:1d:1b:52:83:
         78:44:fb:d2:e2:04:4c:40:16:c5:6c:db:33:3b:49:80:b2:64:
         c2:9c:fc:51:d6:57:ac:de:cc:a7:6c:e9:c0:5a:1c:35:9a:4d:
         c8:c4:a9:03:35:4a:de:f8:91:2a:19:87:3c:fe:e5:22:42:b9:
         9d:8e:0b:68:22:cf:3c:01:3b:fe:b5:a7:fd:7c:74:91:dd:ea:
         3a:c5:1b:9f:52:7a:52:05:60:3b:c6:b2:83:71:c5:f2:45:10:
         0d:91:14:b3:11:a9:26:e5:f2:4d:f9:0c:ea:d6:c1:3a:3a:bb:
         83:45:fa:05:43:31:3a:d9:b1:7b:3b:9f:fb:9e:59:bc:92:0a:
         35:4f:62:3a:92:97:81:1b:4e:e7:d6:12:58:1c:4b:61:ab:46:
         09:ca:3a:32:25:e0:23:13:00:cf:35:60:e7:68:88:de:94:b2:
         ee:07:37:a2:ec:25:a5:ae:ce:35:7e:49:53:bf:7a:e4:ad:b9:
         f8:ef:fe:9f
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE6us8G87wlcjg02hgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI2MDczMTE0NDEyMVoXDTI2MTAyNDE3NTQxNVowLzEtMCsGA1UEAxMk
MTI3ZTFkNDAtZDQ4Mi00Yzk2LWFlMmYtNmE1MDA5YmU3MTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDIgs66PLcfGMK1t5E05Gcun0+dDdiOsG6BN
DMN41DSIZam0c9ILYOFRIBoNje6lxJndAeSByl/G6cH0X2pwpdqqYF+nAtzV7s6/
v56GEK71wjEyd+YWmzbj7s8hxibs1kc+5eZq60k3t31Ugurtu7ExXZlMigMHjO2t
1ffXzNcla+aq7XBB03pFXMXjyA7Q+gZ/aDOR0OCCorCUHoa/qPk28VVfCwN8Hn09
fkjSBBx+FsHYxVIZvzLPpdNQY4sAMx5Ff7yjy2ibNWhI69wlw0L/yOKWqHJIhysE
zI1f/4UuoN4KyfnfX8Z7R0oQBNIEooPxEbJyUNuZIAcorlBV9QIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFGExAnz0Cb8Xz8SRFeuocuDlj5zpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvMjBkNzhhM2UtMDY5NS0z
NWQyLTkyMzctMGQ4YzhlYWI1OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALSvOAwQA
LSvaAwQAQLviAwQAiVNPAwQAoMpfAwQAoMpuAwQAovjWMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHW6Im1Q
IhcpsQ7vCDr+wm2VhDtxBTqQLNsDxYMUiw65QtLZ6uzxo8IjsxFxQu77+cSTYcst
SgWJP/2I8Ea1d8PyUejJHRtSg3hE+9LiBExAFsVs2zM7SYCyZMKc/FHWV6zezKds
6cBaHDWaTcjEqQM1St74kSoZhzz+5SJCuZ2OC2gizzwBO/61p/18dJHd6jrFG59S
elIFYDvGsoNxxfJFEA2RFLMRqSbl8k35DOrWwTo6u4NF+gVDMTrZsXs7n/ueWbyS
CjVPYjqSl4EbTufWElgcS2GrRgnKOjIl4CMTAM81YOdoiN6Usu4HN6LsJaWuzjV+
SVO/euStufjv/p8=
-----END CERTIFICATE-----
Generated at Wed Aug 26 15:44:34 2026 by rpki-client