Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
File:                     f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa (raw, json)
Hash identifier:          7D2wnheLO71ALl+D2k3b4lGQqoiRDIME4KRVeVQsBdM=
Subject key identifier:   09:D8:CB:2E:C3:6F:67:A4:4B:49:36:42:49:C3:B4:E5:6D:56:66:34
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328584E54B49655ED502390710CFB80
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     399871
IP address blocks:        45.45.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:96:55:ed:50:23:90:71:0c:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=97b24dd7-b234-4a4b-9c38-09a3c8ae029e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ca:54:5b:b7:91:40:a9:11:eb:77:f8:d3:0e:
                    de:be:3c:3c:ff:a8:06:20:22:72:8c:89:77:fb:16:
                    0e:d3:bb:a6:e0:1e:a9:52:ea:09:27:69:ba:3b:c4:
                    d9:0b:fa:85:bb:00:9a:9d:c5:16:a1:fc:3a:0d:41:
                    2a:7f:97:2a:5e:37:c4:b2:3b:f4:fd:c7:6a:aa:98:
                    c6:74:e1:d9:5c:22:c0:33:69:94:20:ec:58:45:f1:
                    dc:0c:1a:b5:21:ea:fe:1c:64:e2:fd:1b:07:ce:53:
                    19:d6:b6:81:a4:85:69:8b:af:c4:fc:96:24:9a:e4:
                    ac:e0:a6:81:a5:01:8e:06:05:96:09:d4:01:c9:d2:
                    46:79:da:13:22:95:f5:9b:40:23:f4:49:d9:f6:74:
                    b9:cc:fe:08:b8:cf:4c:1b:64:80:7c:2c:21:5a:f2:
                    b1:23:59:80:bd:53:cb:f1:3e:1e:59:a1:16:d5:8b:
                    64:21:09:03:d4:a4:66:03:83:e7:89:ee:85:60:eb:
                    fb:65:c2:44:37:d0:2e:89:9a:33:25:4d:b1:63:70:
                    24:f9:d4:12:cb:63:f3:3a:e7:c3:30:f5:11:f2:6c:
                    96:82:76:71:48:4a:da:c9:58:05:32:43:32:43:4f:
                    21:ed:72:a3:f0:aa:1b:e0:80:35:bc:cc:e6:00:c4:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:CB:2E:C3:6F:67:A4:4B:49:36:42:49:C3:B4:E5:6D:56:66:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:09:83:d2:db:5b:e5:7d:ce:58:2c:3e:dc:e0:46:55:83:
         9c:97:2b:de:c1:f9:22:d4:45:f7:c0:1e:de:9c:b6:e5:89:d8:
         0e:d2:97:4e:83:7c:17:29:52:18:a0:f7:2f:2f:2a:97:c4:f3:
         cd:dc:2d:60:fa:15:88:cc:ee:b3:7f:bf:9a:0f:08:e4:f7:b9:
         e4:d6:07:f8:c4:ce:65:23:d2:1c:05:bc:2a:af:c6:bb:32:e1:
         83:47:81:db:16:9e:9a:da:52:1b:f2:ba:fc:64:d9:81:13:01:
         31:d3:8d:46:b7:47:33:aa:9d:60:f4:f2:fc:19:59:3e:a2:7a:
         fa:ec:d7:b1:ae:0f:85:20:68:38:37:b8:1c:b1:44:c9:b5:5a:
         e1:fa:47:01:16:f5:1a:93:70:66:74:fa:80:6c:34:3e:a9:fb:
         c8:17:f3:d0:2a:d9:8b:04:e9:e6:68:b8:6e:78:a6:29:d7:8a:
         c1:a1:31:32:d2:c6:29:89:a6:3b:7e:9e:0b:09:cc:d4:9e:f4:
         a0:0b:ae:aa:c3:f1:ac:e5:57:cd:26:9d:86:c3:37:2d:7f:7c:
         7a:1e:ce:4d:eb:ab:e5:ca:3a:04:aa:8b:c7:4d:fa:56:f5:64:
         ae:f7:8e:bc:c5:e7:82:cd:c9:85:f6:ee:16:71:b6:16:69:0b:
         58:e2:78:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJZV7VAjkHEM+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA1ZTc2ZjgtN2UzNy00NjYzLWFlNWYtOWYwMzA1NGNm
ZTkyMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
OTdiMjRkZDctYjIzNC00YTRiLTljMzgtMDlhM2M4YWUwMjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgspUW7eRQKkR63f40w7evjw8/6gGICJyjIl3
+xYO07um4B6pUuoJJ2m6O8TZC/qFuwCancUWofw6DUEqf5cqXjfEsjv0/cdqqpjG
dOHZXCLAM2mUIOxYRfHcDBq1Ier+HGTi/RsHzlMZ1raBpIVpi6/E/JYkmuSs4KaB
pQGOBgWWCdQBydJGedoTIpX1m0Aj9EnZ9nS5zP4IuM9MG2SAfCwhWvKxI1mAvVPL
8T4eWaEW1YtkIQkD1KRmA4Pnie6FYOv7ZcJEN9AuiZozJU2xY3Ak+dQSy2PzOufD
MPUR8myWgnZxSErayVgFMkMyQ08h7XKj8Kob4IA1vMzmAMR7awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnYyy7Db2ekS0k2QknDtOVtVmY0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDVl
NzZmOC03ZTM3LTQ2NjMtYWU1Zi05ZjAzMDU0Y2ZlOTIvZjkyODgxNjEtNWEwNC0z
ZWIyLWE3ZDQtOWZkYjc4YzU4ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjA1ZTc2ZjgtN2UzNy00NjYzLWFl
NWYtOWYwMzA1NGNmZTkyL2IwNWU3NmY4LTdlMzctNDY2My1hZTVmLTlmMDMwNTRj
ZmU5Mi5jcmwwHwYDVR0jBBgwFoAUNNBy1sulm5NOli/AUHuz90qiAl0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDVlNzZmOC03ZTM3LTQ2NjMtYWU1Zi05ZjAz
MDU0Y2ZlOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzzCYPS21vlfc5YLD7c4EZVg5yXK97B+SLURffAHt6ctuWJ2A7Sl06D
fBcpUhig9y8vKpfE883cLWD6FYjM7rN/v5oPCOT3ueTWB/jEzmUj0hwFvCqvxrsy
4YNHgdsWnpraUhvyuvxk2YETATHTjUa3RzOqnWD08vwZWT6ievrs17GuD4UgaDg3
uByxRMm1WuH6RwEW9RqTcGZ0+oBsND6p+8gX89Aq2YsE6eZouG54pinXisGhMTLS
ximJpjt+ngsJzNSe9KALrqrD8azlV80mnYbDNy1/fHoezk3rq+XKOgSqi8dN+lb1
ZK73jrzF54LNyYX27hZxthZpC1jieIs=
-----END CERTIFICATE-----
Generated at Thu Jul 9 14:39:24 2026 by rpki-client