Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
File:                     45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa (raw, json)
Hash identifier:          /Dzr/302rCiLWY/r4JFPk1rit2+HITZQvOelWVTe57M=
Subject key identifier:   23:F3:F4:75:DA:28:F8:56:DB:8C:BE:55:4E:5F:B8:D6:EF:64:36:FC
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584EA79EC01F61B775E724DA9E80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        209.107.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:c0:1f:61:b7:75:e7:24:da:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=32b2ee3b-9578-4658-b432-6a8ca936fd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:15:4e:3b:87:77:53:05:cd:6e:1f:a6:23:
                    4f:78:d1:42:dc:9b:b7:84:8c:12:65:3f:50:4f:7d:
                    76:82:2f:50:5e:18:ab:28:a8:2b:36:12:8e:7f:e8:
                    52:8d:85:a3:d4:9d:f9:e1:75:8d:76:08:64:eb:18:
                    60:5e:e1:5f:39:4a:c8:5b:87:c0:b4:ce:8d:6a:7d:
                    39:b2:a4:2c:f5:d1:e5:5f:1d:f4:fc:4b:d6:8a:b4:
                    6c:55:82:a4:39:94:a5:d5:74:17:79:57:f7:93:9a:
                    4c:df:bd:62:2d:9e:cb:8b:2e:b4:71:ec:5c:96:d1:
                    10:02:00:cb:74:3d:60:39:22:fb:31:19:5d:57:52:
                    f8:11:25:c4:3a:8b:32:11:e1:c2:e7:e8:9e:a0:3a:
                    aa:4b:64:3e:4b:d9:c8:5a:77:1a:f9:26:71:49:81:
                    6a:0f:aa:bf:89:e6:c6:19:1f:43:ea:6e:4b:f3:d8:
                    4a:7a:4e:d5:58:de:21:f4:d5:c0:3c:e6:8d:59:d0:
                    cb:77:5a:b3:41:5c:71:2f:7d:88:65:16:b5:68:4f:
                    90:dd:89:f7:e6:9a:67:33:e3:1b:39:84:fd:c5:77:
                    6a:f5:da:54:f2:c7:5e:08:94:b7:a2:7d:73:39:aa:
                    1f:1e:47:6f:41:53:b5:9f:6a:66:13:cb:59:40:c2:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:F4:75:DA:28:F8:56:DB:8C:BE:55:4E:5F:B8:D6:EF:64:36:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:58:07:5b:1a:33:27:7d:f4:aa:f5:53:c3:b2:de:90:73:d5:
         8d:39:24:cc:4b:97:21:0b:a4:0e:76:ca:08:cd:b7:b5:4f:2f:
         59:d0:c5:71:1a:19:4c:cb:f9:93:6f:7d:57:6a:10:2c:12:ef:
         43:9c:4d:d7:da:54:9d:99:24:c6:7d:40:55:96:09:bb:51:6c:
         21:12:52:1d:f2:06:9c:b3:ee:a4:e0:65:b8:5b:d6:d3:b1:3b:
         d7:dc:54:c4:7f:45:e6:a2:0e:32:8e:8d:70:bc:21:f1:db:0f:
         44:cb:63:97:7c:be:55:87:32:cc:2d:ae:97:2d:da:8a:e0:ea:
         80:22:e7:cc:f2:6a:16:17:84:8e:23:5c:09:d8:1d:39:fc:5f:
         92:fe:50:e0:98:63:b8:67:17:b3:d4:e1:06:66:44:90:af:dc:
         3f:68:9e:73:9e:51:50:fa:f5:c3:b5:09:6c:35:88:67:79:08:
         ab:62:3c:81:28:d6:0f:a1:51:ea:c7:24:54:f1:a8:1d:61:0f:
         fd:98:97:99:f1:45:94:7e:62:78:d4:50:41:72:91:32:8d:f9:
         40:c5:4b:b5:e6:33:95:82:53:de:95:6d:25:f9:43:30:cb:90:
         e2:e0:94:29:46:a6:61:d9:21:98:55:96:0f:f0:74:79:fb:db:
         97:2a:29:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:29:49 2026 by rpki-client