Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa
File:                     7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa (raw, json)
Hash identifier:          e1ob+KHU7CWNe47XPysxnipLpg1T1YkDSk/qiB4kF5A=
Subject key identifier:   72:59:C6:17:6E:AC:9E:C7:0B:AB:28:5E:7E:AE:A5:C4:0B:75:9B:29
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584F093D0CB68327F5D576299480
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396356
IP address blocks:        45.126.36.0/24 maxlen: 24
                          45.126.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0c:b6:83:27:f5:d5:76:29:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=2aeccdea-ca06-42f9-bce9-dcfc40796bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:b4:76:44:f5:d4:b6:aa:f5:ca:26:61:d9:
                    76:e0:3d:20:0a:15:01:19:49:15:08:bc:45:cc:32:
                    ad:2c:f5:70:47:3e:b4:1f:09:91:2e:00:7c:e3:5e:
                    28:00:e2:93:2d:d7:eb:54:75:2e:8d:2e:ac:9b:d5:
                    af:da:b6:26:d2:74:b2:34:4b:7e:9b:79:a0:e3:dc:
                    8b:22:5b:d8:3d:5d:81:72:ca:b5:ea:de:d5:ca:2d:
                    5b:f2:0c:c3:33:df:60:78:91:77:21:fb:fc:81:3b:
                    46:fe:d5:cf:d1:d0:47:77:97:bd:08:47:e5:40:49:
                    e2:3d:68:2a:59:e8:e1:6a:bb:72:bf:f9:b0:82:ed:
                    7d:9e:1b:42:4d:f2:6b:9b:3e:3d:60:ec:5e:bb:cd:
                    f6:9a:d5:29:da:2c:ca:fa:f5:3f:41:4b:47:fc:5c:
                    03:15:9c:53:a4:ac:6b:ad:52:21:d1:7b:dd:07:ef:
                    b3:e4:dd:8f:4e:e3:5b:19:02:23:ef:bc:79:06:3c:
                    39:88:26:b2:0d:a0:19:08:9e:13:f5:9b:a5:4b:39:
                    0e:96:e1:98:9a:56:24:43:f7:6c:4c:ab:8f:48:39:
                    d8:a7:ad:e8:e4:ac:f9:9d:ba:18:44:a4:e8:ce:0a:
                    8f:05:a8:52:74:86:84:e9:d2:31:b8:ea:f1:2b:e4:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:C6:17:6E:AC:9E:C7:0B:AB:28:5E:7E:AE:A5:C4:0B:75:9B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.36.0/24
                  45.126.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:fe:2a:e4:df:15:76:d8:83:c1:c7:e8:44:56:08:01:70:
         b2:d1:27:a5:ed:59:2e:93:fc:a3:fa:d7:d5:c3:63:6a:b4:40:
         59:b6:c1:43:7c:5f:08:20:05:16:4d:f5:b9:78:1c:12:a7:4a:
         5f:b3:8f:fb:02:52:2d:fa:b4:14:87:13:48:b9:ce:d1:c5:f8:
         6c:74:c3:ea:f2:0e:06:7a:79:2c:ef:3f:32:b2:8a:aa:52:f2:
         f9:49:a0:62:0c:1e:78:7b:ed:f0:85:66:2e:62:ec:5e:6d:00:
         4b:25:f1:f9:9f:ae:08:8a:1f:ec:98:f8:04:72:06:79:9e:57:
         f5:fc:87:4e:ac:02:a7:24:ba:73:6d:ed:58:0d:b9:55:ff:ea:
         2f:c9:2c:d6:55:8a:9f:ab:4d:a6:0c:21:f3:a2:79:5e:52:ee:
         b1:81:bb:52:71:35:d7:b4:c8:3f:5b:68:82:ab:f6:d7:c6:dd:
         91:bb:89:8e:b8:8c:f7:e0:d5:ba:35:68:c8:a6:6a:e9:c1:54:
         dd:59:7b:af:fc:9e:9e:85:f2:fd:f4:61:77:47:8b:eb:80:1b:
         4c:1c:a0:3b:10:6a:d8:19:f1:ec:1d:ae:5c:76:d7:26:e3:0a:
         8f:f0:6e:76:fd:30:ff:93:cd:5d:fd:1e:91:79:51:63:57:3f:
         59:db:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:05 2026 by rpki-client