Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5a298619-ea57-3b0e-8468-a5d46ba640ba.roa
File:                     5a298619-ea57-3b0e-8468-a5d46ba640ba.roa (raw, json)
Hash identifier:          Bi5oOcOHOlCGi7LXrLcgZqjERwOhMnIm7mvYBqrKiJY=
Subject key identifier:   03:B9:B3:D7:56:91:4F:DA:98:4B:25:38:03:E2:3A:DB:69:68:26:29
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584F655D7AF0830A25731C8E9D00
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5a298619-ea57-3b0e-8468-a5d46ba640ba.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     0
IP address blocks:        45.43.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:7a:f0:83:0a:25:73:1c:8e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=23dd9091-494b-4a0a-9bdb-8b9ecc65a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:e3:f4:5e:8c:b1:6d:fd:86:66:48:4f:f0:
                    39:78:f6:35:5f:49:26:03:0f:c7:6d:2a:75:cc:c8:
                    35:1a:0e:b2:ea:cc:41:ed:d0:d4:29:38:cb:25:9f:
                    f5:3e:aa:39:04:76:7c:60:57:32:91:04:f9:01:1c:
                    86:08:82:00:97:92:22:fb:1a:2b:15:41:b2:1d:c8:
                    d3:f1:f1:9f:c6:a8:dd:43:9b:89:14:75:f4:53:1b:
                    c6:3e:0d:aa:69:89:e5:ba:ff:db:c3:61:ed:d8:30:
                    d7:f2:f2:08:e0:9f:d8:09:73:c5:79:ec:76:0b:6c:
                    66:db:1f:af:4b:c0:19:b8:a7:37:3e:48:e6:fe:f0:
                    e6:50:af:ad:55:8b:ec:4a:6d:34:80:14:d7:e8:76:
                    a2:55:dd:d4:fc:02:b0:5f:2e:bc:dc:d6:6e:63:79:
                    da:8c:0c:4d:cc:b4:74:2c:18:4f:d3:77:8b:d8:73:
                    11:62:6c:93:e8:92:dc:7e:7e:9e:25:59:b2:6f:8d:
                    d9:e1:d4:fe:68:84:2d:f4:e6:30:d5:eb:7b:fd:c9:
                    55:01:e4:0f:af:dc:c7:62:6e:cd:d2:10:a5:ff:59:
                    a3:45:2f:72:a3:17:2d:fb:e5:b2:79:e4:e0:79:63:
                    b2:8a:73:f1:46:a5:71:5c:65:b7:ff:71:25:c1:cc:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:B3:D7:56:91:4F:DA:98:4B:25:38:03:E2:3A:DB:69:68:26:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5a298619-ea57-3b0e-8468-a5d46ba640ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:96:c4:bd:5a:f2:3b:69:86:09:b8:13:6d:91:e0:0f:eb:c9:
         be:a0:d0:83:e3:ec:3e:43:e0:02:db:5c:26:f4:9e:ea:fd:ce:
         1f:bf:e9:30:59:1d:e6:9f:91:8f:75:7d:71:01:2d:97:08:c8:
         b6:28:e0:6a:68:56:9d:e5:88:11:fa:36:19:a2:d1:d4:31:80:
         f5:ac:c3:1f:2a:2b:42:aa:60:b0:b9:2f:27:2d:2b:fd:61:a6:
         61:f9:f1:cd:3f:49:c3:0e:19:18:34:e3:6f:c0:18:94:4d:98:
         e1:62:6c:cc:66:2a:9c:f0:a9:7f:a8:bb:37:44:a3:82:28:d7:
         b6:65:93:c7:7a:3a:0d:6e:9c:34:02:22:b3:b1:d5:58:52:2b:
         88:13:10:93:ce:ca:73:ae:fd:60:a6:4d:3a:58:36:1a:fe:97:
         cd:f2:b4:eb:89:62:1d:98:4b:ae:c5:0b:75:c6:a0:fd:94:57:
         8b:17:4f:b1:b0:5a:5c:f9:d2:c3:13:5e:8a:07:29:5c:9c:86:
         af:c3:2d:03:7e:8e:d6:82:2c:27:38:af:a8:f3:30:36:17:e4:
         5c:3a:55:be:5f:a5:c5:5f:34:93:9e:d3:90:aa:3a:67:cf:da:
         10:c6:32:45:2c:ef:58:5a:db:0d:15:2f:95:8d:3c:2e:52:d1:
         4c:47:0a:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXrwgwolcxyOnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MjNkZDkwOTEtNDk0Yi00YTBhLTliZGItOGI5ZWNjNjVhNGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpnj9F6MsW39hmZIT/A5ePY1X0kmAw/HbSp1
zMg1Gg6y6sxB7dDUKTjLJZ/1Pqo5BHZ8YFcykQT5ARyGCIIAl5Ii+xorFUGyHcjT
8fGfxqjdQ5uJFHX0UxvGPg2qaYnluv/bw2Ht2DDX8vII4J/YCXPFeex2C2xm2x+v
S8AZuKc3Pkjm/vDmUK+tVYvsSm00gBTX6HaiVd3U/AKwXy683NZuY3najAxNzLR0
LBhP03eL2HMRYmyT6JLcfn6eJVmyb43Z4dT+aIQt9OYw1et7/clVAeQPr9zHYm7N
0hCl/1mjRS9yoxct++WyeeTgeWOyinPxRqVxXGW3/3ElwcxDCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAO5s9dWkU/amEslOAPiOttpaCYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvNWEyOTg2MTktZWE1Ny0z
YjBlLTg0NjgtYTVkNDZiYTY0MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSsbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+WxL1a8jtphgm4E22R4A/ryb6g0IPj7D5D4ALbXCb0nur9zh+/6TBZ
HeafkY91fXEBLZcIyLYo4GpoVp3liBH6Nhmi0dQxgPWswx8qK0KqYLC5LyctK/1h
pmH58c0/ScMOGRg042/AGJRNmOFibMxmKpzwqX+ouzdEo4Io17Zlk8d6Og1unDQC
IrOx1VhSK4gTEJPOynOu/WCmTTpYNhr+l83ytOuJYh2YS67FC3XGoP2UV4sXT7Gw
Wlz50sMTXooHKVychq/DLQN+jtaCLCc4r6jzMDYX5Fw6Vb5fpcVfNJOe05CqOmfP
2hDGMkUs71ha2w0VL5WNPC5S0UxHCnk=
-----END CERTIFICATE-----
Generated at Sat Oct 10 22:46:57 2026 by rpki-client