Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa
File:                     04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa (raw, json)
Hash identifier:          c203KvjWnSxqzPOmQJ00QF2LZyMQfrNXCjlT1eUeOGQ=
Subject key identifier:   46:51:30:91:FD:B1:59:9F:07:57:81:9F:44:25:12:65:51:B1:0C:68
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584D1F4A3A22F12611F32D33A900
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     31715
IP address blocks:        209.145.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3a:22:f1:26:11:f3:2d:33:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=869ac423-86c8-4f22-9aec-3e2f92a8a77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:a9:98:93:e6:d5:d6:5b:47:fa:8f:42:5f:
                    a0:c4:1c:d2:30:1a:0c:b3:d4:58:d7:ac:59:a9:12:
                    75:23:c8:78:35:a9:2d:f0:77:03:fa:d3:c5:b9:a5:
                    9e:c4:69:18:61:b7:1a:2b:1d:2c:ac:08:bc:fc:cc:
                    c9:0b:44:cf:e3:9a:da:40:13:b6:00:fc:9e:8a:71:
                    5b:7e:5e:90:5d:7c:34:39:05:ce:2f:a2:47:f5:55:
                    50:56:92:9a:90:0a:d2:a2:02:53:8e:e2:17:f9:3d:
                    59:24:75:6d:f5:a1:d3:73:1d:c0:e5:e9:1e:88:ca:
                    4f:48:6f:ab:49:52:e2:21:a5:f4:7c:d9:77:43:b3:
                    8f:52:81:d0:5f:89:f4:4e:56:16:73:ca:33:67:e0:
                    72:d3:21:83:22:43:42:fc:c1:da:03:17:93:59:ae:
                    e5:3d:ca:f3:a1:40:9a:89:1c:20:e6:cf:c9:41:90:
                    50:3b:53:7e:e6:f3:a4:ea:b5:1c:b3:2d:e8:ce:b1:
                    2d:10:82:97:46:f7:05:26:00:42:f8:72:40:c9:a0:
                    dd:2b:b4:40:48:c3:e5:40:43:02:be:80:98:b2:a0:
                    ca:ae:10:ea:d3:6e:10:79:5b:b2:9a:75:4c:31:0e:
                    78:9b:6a:fd:24:dd:a3:62:36:7c:96:ef:f3:91:92:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:30:91:FD:B1:59:9F:07:57:81:9F:44:25:12:65:51:B1:0C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/04a38d32-5c2a-36ef-96c0-cf54abed5a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:19:5a:ef:f6:fe:be:88:0e:00:73:a2:9d:e5:54:ca:19:
         6c:86:fb:74:51:7e:86:c4:f4:3e:67:a2:c2:50:2a:13:f1:f0:
         17:4f:fd:28:51:6e:60:49:74:4f:37:7e:e6:84:40:58:8e:25:
         cb:06:e2:da:09:ed:6b:9a:6f:a9:42:c7:b6:06:0b:88:e0:20:
         99:aa:dd:0a:46:84:b2:1b:28:1f:1c:36:34:b6:1b:5b:7f:09:
         cc:e7:a2:79:17:ef:3f:7d:7b:af:2d:29:9f:2a:7a:15:d5:67:
         a2:ce:6f:05:7b:8f:4b:93:4b:fe:dd:4e:b3:86:9a:97:93:72:
         b9:4a:26:48:7b:3c:7b:3c:cc:88:b0:d2:c6:ed:fc:8c:0b:e9:
         0b:d9:56:c9:2e:34:f8:4e:03:77:04:94:7d:9e:7e:63:8f:b7:
         de:89:10:8f:4e:41:e8:c3:e7:26:53:aa:53:60:1d:33:b2:0b:
         1b:e7:b4:ea:a8:f1:56:d5:1c:d1:a6:3c:61:98:ef:09:ae:de:
         ff:55:7e:cc:78:3b:15:b3:2d:99:5c:c3:31:07:74:a8:fb:98:
         84:7f:df:4e:31:aa:15:04:6c:e5:c2:29:72:02:c3:21:4f:e0:
         a2:86:ad:25:0e:cc:2a:75:a5:67:8c:bc:4a:37:6d:36:8f:96:
         c7:b4:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:11:04 2026 by rpki-client