Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc12285f-dec2-3cfd-a7c8-bb60d2631d49.roa
File:                     bc12285f-dec2-3cfd-a7c8-bb60d2631d49.roa (raw, json)
Hash identifier:          X0Sv+CRsNs/gU0NnOYX4FGjhkBXHuPZnFhW5bjJrb24=
Subject key identifier:   AB:66:FF:E1:84:31:D1:4A:77:81:AD:4E:9B:80:23:7E:FC:05:CA:90
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584ED431D76418D29A464315DA40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc12285f-dec2-3cfd-a7c8-bb60d2631d49.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     47007
IP address blocks:        173.211.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d7:64:18:d2:9a:46:43:15:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=441f5bd5-6a53-4c17-9efb-30834687df01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:dd:2d:d7:62:00:c8:19:1f:b7:08:3f:c4:
                    ed:4d:29:74:47:1c:7b:5f:21:2b:13:2a:84:38:e5:
                    5a:b3:0b:c6:aa:df:01:6c:dd:03:6b:f4:c5:05:ac:
                    78:be:6d:42:8e:8c:f2:3e:b1:99:ae:65:77:8d:ff:
                    d6:bd:e7:f7:d1:cd:ff:ee:4c:28:bd:3b:d0:9d:9f:
                    31:87:df:d8:2a:06:0e:97:d0:6c:4a:5f:57:b2:83:
                    31:f9:77:c5:92:ef:16:1b:69:46:5e:3d:20:ea:08:
                    81:23:5f:0f:4d:26:a6:e6:e6:5f:7d:f3:6c:5f:ba:
                    ee:81:cc:83:2e:b6:23:5e:7f:c2:ae:c5:8b:31:f9:
                    c0:c4:00:8a:1f:70:c5:21:9c:cf:41:66:41:75:84:
                    1a:15:78:95:9d:df:8e:f9:3b:1e:1c:69:6e:67:b6:
                    9e:14:5e:fc:7c:2c:28:91:0e:77:70:23:3e:e1:7c:
                    90:df:3f:22:77:3e:da:43:9a:bc:8a:ab:af:4a:95:
                    f7:20:b0:24:f6:d3:79:16:45:70:38:1b:9a:63:94:
                    db:b3:90:a6:a9:66:9b:17:d0:b4:a4:a2:37:23:8a:
                    31:52:d3:3f:74:2f:57:fb:5a:76:52:8f:e2:f2:ed:
                    c9:5c:cc:38:c9:aa:44:3a:46:54:c1:a1:f9:ba:27:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:66:FF:E1:84:31:D1:4A:77:81:AD:4E:9B:80:23:7E:FC:05:CA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc12285f-dec2-3cfd-a7c8-bb60d2631d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:25:2b:c8:c4:e4:bc:44:20:a3:d2:67:cb:a6:f9:1a:aa:
         c1:cc:dd:d8:6c:90:c4:23:1d:a3:7d:bc:fb:4a:86:ed:79:6a:
         95:8b:25:2f:cd:b0:4f:d7:cc:83:49:6d:1b:21:61:9d:95:fd:
         a5:e3:8e:37:ee:e6:e7:22:b0:da:42:28:cd:bc:22:5d:0e:6f:
         9c:6c:b4:cb:c2:87:a7:9a:2c:46:9f:f1:40:98:e2:9d:a3:8c:
         64:51:0b:17:8f:fe:08:d8:42:b9:ca:91:cb:77:05:9b:af:6d:
         15:c0:dd:b1:14:cd:d1:3e:d3:fd:ef:c5:39:aa:79:e9:22:7a:
         3f:3c:d1:e2:10:96:4f:d4:84:fa:a0:ab:ae:54:a7:32:a3:a6:
         f1:06:5f:53:f9:aa:36:f4:1c:6e:ad:b0:0e:df:d3:77:99:5d:
         a6:84:d0:71:00:7e:8c:72:2c:11:2e:cb:29:47:b0:9b:10:62:
         66:8b:e8:cc:f6:f6:8e:95:44:a3:d9:3a:7a:b0:d7:d5:56:e9:
         59:d1:6b:3a:98:13:48:3d:17:e8:aa:94:d3:8a:3c:9c:c0:bb:
         91:f8:7e:35:70:b4:0a:46:b1:18:e6:21:7c:d2:fa:7c:57:72:
         12:2b:5e:75:20:d3:ad:f2:fa:89:6c:56:6f:6a:e3:39:bc:68:
         dd:55:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:44:34 2026 by rpki-client