Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa
File:                     c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa (raw, json)
Hash identifier:          oCYYaNGaYU6LEM85HMbk8s88XEg7Ngn9c4EkPMQ/uOg=
Subject key identifier:   E3:97:83:04:07:A4:45:23:4C:EA:7C:EC:5C:EB:60:68:F2:74:2D:59
Certificate issuer:       /CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928
Certificate serial:       010D0C9F4328584EC106F07CE76F44B39BC68800
Authority key identifier: A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa
Signing time:             Fri 07 Aug 2026 04:13:30 +0000
ROA not before:           Fri 07 Aug 2026 04:13:30 +0000
ROA not after:            Thu 05 Nov 2026 05:13:30 +0000
asID:                     394177
IP address blocks:        45.45.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c1:06:f0:7c:e7:6f:44:b3:9b:c6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928
        Validity
            Not Before: Aug  7 04:13:30 2026 GMT
            Not After : Nov  5 05:13:30 2026 GMT
        Subject: CN=bc40b269-b985-46b0-a0b7-22fec25be6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:c4:12:80:42:b4:08:4f:a3:d9:ce:3d:e2:
                    52:b6:ee:5c:0d:e6:8e:c3:c7:ef:ca:1d:89:32:68:
                    51:7d:fd:ee:a5:e3:71:a1:26:3f:3b:dd:2a:f1:18:
                    86:d9:fb:2a:9e:7a:16:b7:b1:14:1e:2c:5f:ff:4e:
                    73:97:bc:86:7c:63:74:b6:e3:d1:b7:e1:fa:25:c5:
                    73:6d:c9:c0:c6:27:78:90:35:5e:4c:4d:ab:f7:4c:
                    50:a4:7b:7c:35:9b:9b:cd:b4:6f:2e:d1:e8:c4:21:
                    a8:4f:31:5d:94:0f:bd:26:a0:2a:17:ed:b4:cf:2a:
                    24:f8:e8:0a:8a:a4:50:4f:08:55:c0:ab:16:da:2e:
                    e3:cb:f1:b5:38:f8:8f:f0:5b:c1:47:a0:62:89:24:
                    ce:c6:6c:94:47:59:93:37:39:ea:c8:a7:57:18:2b:
                    82:61:19:99:39:ab:f0:10:2a:85:c3:7a:09:55:1d:
                    66:00:33:87:e6:0a:25:bb:14:38:01:b6:59:94:39:
                    84:b5:aa:cb:fb:7e:93:4b:2e:fb:c0:d8:16:a5:d7:
                    85:cf:b9:24:e1:8b:3e:2e:19:0a:df:17:21:88:58:
                    b4:7d:fb:71:bd:44:2a:95:55:b6:6a:b7:b9:02:70:
                    49:d6:c4:06:3d:d2:83:fa:86:1e:3d:c7:5a:12:91:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:97:83:04:07:A4:45:23:4C:EA:7C:EC:5C:EB:60:68:F2:74:2D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/c3d0bea2-c0f3-30e9-b3bf-5c5d0d02c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl

            X509v3 Authority Key Identifier:
                keyid:A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:26:69:9a:37:fe:b8:c0:01:97:30:37:fe:b8:7c:8b:b0:
         33:97:53:fd:1f:00:07:59:a4:eb:42:e4:83:8c:16:5d:10:73:
         16:0e:b7:2d:9f:f1:3d:52:bc:cb:45:3b:8d:42:c6:e4:cd:08:
         a9:8f:cd:b4:04:eb:48:aa:a4:f9:2f:34:49:22:87:fb:bf:d4:
         e3:1c:ed:4e:15:5f:95:30:92:01:ef:72:24:7c:ab:a8:b3:94:
         92:60:af:31:65:2f:e7:fb:b2:ae:ae:cc:dc:48:cd:44:98:bb:
         20:03:24:1d:11:7d:30:c7:36:fb:cd:a2:8a:db:d0:4a:bc:50:
         2c:3f:d6:90:a7:e8:e0:56:9a:c0:09:47:2a:e7:69:9d:3c:d3:
         9c:87:f6:59:08:85:3c:8b:ae:d6:ec:fb:1e:7b:89:f8:38:13:
         5c:ec:ce:e5:98:4e:01:04:80:36:49:a2:22:b9:01:f1:e9:24:
         d9:92:32:af:c7:66:21:5a:ce:5f:51:d1:8b:6a:9f:47:69:23:
         dd:d4:c5:a8:97:5e:e5:c4:a3:11:ab:44:59:96:54:69:03:06:
         c8:46:cc:85:5c:c3:27:af:13:d0:f3:ad:89:43:c8:f2:95:29:
         8c:de:35:b2:b1:28:0b:b7:ad:36:e6:51:ee:93:ef:d0:97:06:
         24:59:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 11:44:41 2026 by rpki-client