Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/9dc9dd6c-046c-3174-9f6a-b9f6891cad7b.roa
File:                     9dc9dd6c-046c-3174-9f6a-b9f6891cad7b.roa (raw, json)
Hash identifier:          0Axre5umWrcU7w6ibdjlbMNad3Sa5A0l9QsIrO++47M=
Subject key identifier:   FD:37:DE:54:43:21:0D:33:C8:D2:83:F7:AC:1C:F3:C8:A9:6C:D4:BD
Certificate issuer:       /CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
Certificate serial:       010D0C9F4328584E5D14ADD30BBE54338A4E1D00
Authority key identifier: AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/9dc9dd6c-046c-3174-9f6a-b9f6891cad7b.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     398810
IP address blocks:        45.45.170.0/24 maxlen: 24
                          136.175.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ad:d3:0b:be:54:33:8a:4e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=c93e61dd-dec5-4278-a04d-708c96069588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:af:29:d1:22:2f:da:c6:a0:76:fd:5c:f8:f6:
                    3c:b7:19:39:51:c1:22:18:52:0b:81:b0:65:01:c0:
                    77:d8:58:e6:cc:24:80:4c:39:f8:55:9b:20:64:ee:
                    36:0c:fb:00:44:d7:16:48:3b:2a:a2:57:04:64:4c:
                    05:d7:e6:7e:ba:ea:c7:e8:00:a0:7a:1c:07:85:db:
                    3a:7d:e4:64:45:75:08:79:d3:e2:6e:e6:57:b1:53:
                    5c:98:e7:5e:43:35:a9:1e:88:22:ef:76:b2:bb:98:
                    25:0c:67:da:d0:49:26:77:7a:ef:32:27:a8:c7:88:
                    e6:e5:f7:bc:ca:ae:81:da:eb:d8:cc:b6:69:73:13:
                    16:c8:44:f2:45:1b:4b:e9:9f:8b:f1:0a:14:8f:d5:
                    1a:a8:a7:a9:29:b1:92:0c:ab:c2:7a:e0:ec:49:31:
                    49:af:45:fe:c2:8a:41:3a:03:a3:73:a0:09:0f:72:
                    d3:55:d6:86:14:fe:53:98:ab:86:21:3a:72:14:7c:
                    92:64:4d:22:9c:e0:fe:cd:8c:56:b4:e8:7d:ca:31:
                    2e:f0:bd:c2:70:f0:38:14:2e:d7:5f:30:11:40:54:
                    10:78:e3:25:d8:b6:0a:63:af:1f:38:33:50:b1:c6:
                    0e:34:e9:b3:49:a4:ac:b2:45:be:a1:22:8a:e6:f4:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:37:DE:54:43:21:0D:33:C8:D2:83:F7:AC:1C:F3:C8:A9:6C:D4:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/9dc9dd6c-046c-3174-9f6a-b9f6891cad7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl

            X509v3 Authority Key Identifier:
                keyid:AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.170.0/24
                  136.175.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d9:d1:64:96:c6:71:86:c7:93:a1:1e:6c:bb:ba:f3:04:9e:
         70:07:0f:b5:8a:b2:a4:ac:a5:c5:37:43:00:1c:b8:6a:14:b8:
         c3:28:69:dd:4d:fb:71:b0:ec:b6:f6:a6:99:b5:04:9c:c1:7d:
         50:59:56:32:59:b1:10:34:db:a4:4d:06:49:74:2d:18:f4:4b:
         11:6a:10:b3:5b:1e:5d:09:33:84:9c:c7:f5:8f:c6:a2:f6:fc:
         74:c9:b6:b2:88:c3:23:52:47:53:61:51:1f:3b:2b:dc:4c:df:
         7e:e1:b7:b7:b8:c0:ff:f5:17:3b:b8:57:a3:8f:33:f7:02:e7:
         f2:f5:db:04:79:f7:16:f4:fd:38:e3:ff:07:44:f8:b1:73:82:
         9a:d0:a4:be:9c:1b:9d:d1:68:7a:40:bc:1b:57:cc:fe:d4:af:
         bf:8b:56:2f:a1:37:3a:70:b0:03:c1:4d:aa:61:25:c7:07:e0:
         20:cf:f6:07:2a:99:96:f6:ca:0f:1a:29:85:c9:94:92:74:03:
         bb:7e:01:a3:91:8d:2b:8a:56:3a:f0:cc:5f:7c:a5:c4:6e:8b:
         1c:f0:10:32:4f:24:96:66:87:49:d6:cc:95:03:8d:00:da:aa:
         e0:2c:a7:e3:93:49:e1:20:b5:87:a6:e6:52:97:85:6f:86:d2:
         36:31:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:07:13 2026 by rpki-client