Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa
File:                     83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa (raw, json)
Hash identifier:          9f7qLLAhbdMbGYmR95j3k8k9hXBEL3Y3c1RJWyB2TQY=
Subject key identifier:   EF:A1:7D:35:55:12:F6:9D:C7:D1:1D:F2:6F:A2:FD:76:08:FA:E1:A3
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F4328584EED520FAEA76EF0D35A9829A0
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     399888
IP address blocks:        45.45.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:0f:ae:a7:6e:f0:d3:5a:98:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f8e9c51e-e3e2-482d-9600-446c1d2ecf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:26:8e:2b:55:88:79:0e:07:af:8b:34:c1:
                    3f:32:07:2e:31:1a:68:66:3f:fa:e7:db:a7:37:64:
                    9f:2c:65:1a:84:3a:0d:29:50:10:e2:a3:e9:09:e1:
                    9e:1c:f6:2b:80:09:f0:4d:b0:a1:6c:15:d0:ff:18:
                    72:08:36:5c:22:7a:df:fd:b6:51:d5:c4:92:64:51:
                    4e:fb:2a:b3:26:b7:e6:ef:6e:4f:25:74:45:ee:e2:
                    9d:d4:83:a0:d6:1c:13:4e:10:c0:3c:da:2f:d9:ec:
                    be:40:3d:a6:18:84:7d:e5:95:91:51:94:5e:f7:ca:
                    6f:2c:22:7f:82:bd:1b:3e:57:7a:82:d9:3b:e4:c1:
                    3d:c1:05:da:da:ee:3e:3f:74:1c:1f:42:3a:c8:2f:
                    a5:2c:ed:77:28:91:53:aa:49:b7:ea:84:ee:35:01:
                    36:6f:8c:40:a7:38:82:49:d9:5d:48:73:59:ae:55:
                    3c:db:b6:31:0f:e6:6c:79:87:c9:d2:9d:a4:13:21:
                    dd:b9:3b:7b:a0:e6:b7:fb:96:a4:28:0f:ea:48:a2:
                    cc:bc:f0:df:48:7f:b0:62:a8:8b:4a:f0:6e:eb:a2:
                    25:e9:9c:f0:4b:0f:a5:1d:93:d5:08:52:69:5b:e9:
                    e6:eb:4b:45:2a:56:b3:92:d6:13:ac:f3:af:6a:9f:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A1:7D:35:55:12:F6:9D:C7:D1:1D:F2:6F:A2:FD:76:08:FA:E1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/83eba3f8-32a5-3d50-aa94-ea93fe318ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:32:ac:61:34:fd:ea:d1:c3:64:33:d0:fb:64:76:5c:a1:
         27:d0:cc:c5:44:83:ea:ee:3f:f3:14:3f:79:58:d0:a6:38:97:
         dd:24:56:c8:5c:44:03:7a:c0:de:ef:f0:78:97:b4:86:79:ee:
         f7:d7:ac:3a:cc:6d:79:4e:59:21:79:20:a7:dc:71:b2:d2:2b:
         c1:14:8f:6a:5a:76:2d:0f:be:e8:99:02:b3:c1:e9:9d:b3:93:
         17:89:92:1a:94:37:c6:4f:11:d0:d4:94:9c:ad:c3:37:48:be:
         39:d0:ab:23:75:df:c0:c4:80:e5:ec:e3:b9:7b:78:69:42:05:
         5c:dd:a9:f6:41:55:fa:75:fb:31:ad:39:00:69:3f:54:fd:c5:
         33:b1:cc:46:f7:95:01:64:4a:58:6f:df:1b:66:3b:7d:05:c6:
         fd:6e:8f:55:fb:b2:37:f8:0d:ae:67:3c:79:ab:11:a1:9d:9d:
         3c:c6:ee:b9:ad:51:2b:76:d5:ad:3d:3e:e5:97:49:a4:b3:f6:
         6f:5f:b9:e1:de:77:1f:23:13:dd:86:68:05:73:8b:61:47:48:
         d3:76:02:a5:34:63:5a:df:b8:09:66:7e:c6:ea:64:6f:48:81:
         59:68:af:15:57:b9:c8:58:1f:1b:46:ef:22:53:73:8b:17:0d:
         51:5d:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:46 2026 by rpki-client