Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa
File:                     a46225f6-f3ab-3e62-91c2-70b856047072.roa (raw, json)
Hash identifier:          RMCrsvhGXG9OKSyD7o8iH0Db93tdLjEID6yzwJfhzoI=
Subject key identifier:   ED:83:34:01:CE:87:C9:2D:E6:4F:4A:23:EA:B0:DE:5F:1C:94:30:AB
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584F4976649130276C7FAD89B500
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399250
IP address blocks:        45.41.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:64:91:30:27:6c:7f:ad:89:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0cf7c523-7e6d-48ac-9b53-ba1b133781e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:3c:2c:94:93:de:94:63:0f:69:94:c6:83:
                    97:55:30:32:8d:ee:61:8b:4a:b6:fb:3b:de:40:7d:
                    3b:5f:ff:7b:a8:c5:0d:7f:9a:d7:11:b4:8e:2e:32:
                    b9:16:22:3a:3b:e5:2d:3c:82:2b:6c:e8:c4:25:13:
                    5d:84:02:61:86:df:83:f0:86:7e:33:84:29:5d:24:
                    35:4a:9f:92:96:9d:dd:bd:2f:8e:21:08:23:aa:52:
                    13:97:f5:60:62:83:25:d1:23:fc:b0:01:1b:60:e4:
                    73:f5:87:0f:38:8e:d3:14:79:2b:e6:b3:74:d0:95:
                    f0:2e:6e:79:66:f6:2d:64:1f:01:14:f8:5b:7c:3d:
                    8a:b1:36:45:ab:ec:69:89:c6:4e:86:13:e8:35:ea:
                    78:f6:69:63:44:64:ca:0c:ab:3b:c0:73:5f:2d:67:
                    06:2b:49:f6:e5:45:06:46:f8:5d:6a:99:d6:0e:3d:
                    3e:7b:7d:29:e3:86:c9:bd:97:f2:02:34:71:9e:3b:
                    db:01:a0:4e:64:b5:ba:dd:42:91:6c:1d:7c:c9:bd:
                    d1:05:a5:d2:04:df:7a:0b:84:28:ce:03:86:d0:8d:
                    28:a7:95:a8:0c:57:0a:ba:b0:7b:a4:4f:f1:98:75:
                    31:bd:3b:67:9d:68:21:d2:60:8b:c8:d7:e6:01:c2:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:34:01:CE:87:C9:2D:E6:4F:4A:23:EA:B0:DE:5F:1C:94:30:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/a46225f6-f3ab-3e62-91c2-70b856047072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:42:fa:3c:52:77:2a:38:08:66:57:80:9f:6a:0e:02:f4:57:
         53:44:1a:b0:f7:f7:e6:95:82:f0:d8:4d:ae:ad:f9:62:76:7f:
         d8:75:94:f9:6a:75:4c:83:c7:f4:e5:d7:b4:b1:e5:87:5e:3f:
         e1:3e:68:7a:dd:c5:d6:50:a9:b7:43:97:b8:92:9f:ca:59:00:
         64:6a:21:21:97:d6:61:5a:09:e9:f4:12:26:8d:96:a3:52:ba:
         74:cb:14:82:ce:ba:af:b1:95:08:ad:07:a0:75:80:98:c3:f2:
         09:d6:32:98:ba:13:2e:d4:43:78:36:49:1c:bd:41:65:a8:e7:
         98:68:11:30:bb:67:59:34:14:d9:c8:a5:54:01:31:42:ea:8c:
         31:97:06:9c:56:07:5e:da:7f:3d:3a:78:99:fc:b0:45:35:56:
         c5:12:39:17:e3:2a:31:09:88:f9:1e:11:f4:92:3a:1c:a4:05:
         74:4d:3d:f4:86:51:2b:90:8c:c6:59:46:b0:01:0c:49:05:71:
         d8:89:36:29:7e:47:85:b1:47:08:51:2a:42:d3:13:87:03:0e:
         9b:fb:e2:f6:19:bc:ad:22:41:56:3c:8d:e2:aa:49:74:d3:f6:
         13:7b:67:76:f0:57:9a:46:6f:62:6b:8c:0a:68:41:f3:4c:84:
         06:83:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:22:00 2026 by rpki-client