Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
File:                     bb942bf6-534f-3fae-99be-baac6d52181b.roa (raw, json)
Hash identifier:          fqJiRI9h5z+m2oyoZAAMLGbw7z2GmwcS3KCYgnoiAQ0=
Subject key identifier:   5B:BF:A2:B8:2E:95:6A:CD:2A:3F:DF:23:60:E7:A9:E9:4C:80:C8:4C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA788281C84E44D309D40A400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        45.40.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:28:1c:84:e4:4d:30:9d:40:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94736319-5162-44f7-b96e-2d7d10b9e037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:de:e4:26:5a:b2:a8:74:81:f7:3f:1c:72:
                    a3:3c:0b:6f:d5:2c:2e:7b:04:31:c1:92:5b:1c:e4:
                    3e:36:7e:1e:e7:7e:43:46:22:5e:e4:0a:d3:cf:b3:
                    8e:2d:66:bb:cb:6e:2d:50:fb:f7:b0:6d:31:32:5f:
                    95:74:bc:dd:52:37:9d:3c:5a:8f:71:74:2b:a3:e1:
                    43:f2:fc:61:86:30:9c:a9:bd:5d:90:d5:aa:57:28:
                    00:81:0a:8d:12:46:a9:d3:e2:c7:c6:54:1f:35:2c:
                    9a:4b:1b:84:bb:a7:f9:d2:70:f5:82:ad:69:ce:c0:
                    38:0d:6b:28:b4:8e:4d:14:15:b6:2f:ad:55:8b:be:
                    8b:34:46:8f:ee:40:11:a0:70:26:1f:35:50:96:93:
                    84:c8:01:55:5e:7d:4b:e8:b1:ab:3a:a2:3f:1f:92:
                    fd:81:ab:e5:8f:aa:47:46:55:c6:24:8f:99:fa:bc:
                    24:47:84:13:50:82:70:9a:9c:8b:e2:4a:77:2f:ff:
                    b9:d1:8c:cd:ff:14:4e:b3:66:95:8a:ed:9b:f2:90:
                    80:30:e3:25:d1:99:77:38:ad:ed:b9:50:3c:d5:5f:
                    30:1f:ca:4a:8d:e0:92:2f:f4:69:53:71:e8:57:fc:
                    03:6d:ab:09:da:e2:00:36:aa:19:ed:b1:f1:05:ac:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:A2:B8:2E:95:6A:CD:2A:3F:DF:23:60:E7:A9:E9:4C:80:C8:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:97:89:a4:7e:a9:32:29:57:4a:b1:c4:3b:bb:66:f3:72:
         82:cb:c3:c6:c1:ae:8f:24:63:b6:38:73:b3:7d:35:dd:c0:c3:
         c7:a5:ba:11:71:f9:c6:1e:0f:b5:d0:d4:f3:80:f2:15:0b:f6:
         dc:c9:e8:c0:11:66:1e:17:ca:72:5d:ff:cd:fd:59:d2:95:f4:
         e9:9e:3a:ea:fb:82:d8:93:66:00:2b:75:86:ec:75:9f:e7:ad:
         e1:09:10:82:f2:1e:5d:31:38:ad:a3:4c:2b:04:d5:b7:86:e4:
         5d:f2:f2:aa:eb:5e:76:2d:cb:f4:f8:dc:df:c0:ec:64:94:5d:
         61:a5:b8:45:5d:b1:80:98:40:05:ad:54:bc:fd:bb:30:ba:69:
         12:30:ed:2d:52:d1:09:b5:3e:49:3f:3a:ae:7b:19:e5:d5:d9:
         70:64:57:22:d9:18:71:66:82:f5:58:6d:96:ae:27:f3:8a:ef:
         26:74:69:7a:0d:78:9d:c1:a1:c5:91:c4:47:e4:4c:34:88:19:
         5a:62:01:92:c4:02:5a:bb:38:8d:2e:94:e4:bd:5d:6f:02:b2:
         5e:90:a8:ed:34:29:14:04:1e:b8:61:8d:3c:4c:1e:fe:49:de:
         28:1a:af:a8:38:d6:07:ee:3c:80:8a:50:bd:26:23:df:92:2a:
         a8:2d:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 23:00:36 2026 by rpki-client