Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa
File:                     2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa (raw, json)
Hash identifier:          5a7Fe+2S0yqU8tJe1nJ9P3IGn9Ctc5sBwOQM18+9Jko=
Subject key identifier:   E4:8E:F8:E2:D7:35:31:C9:5F:0C:AD:0A:D2:A9:03:5C:84:15:64:0E
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584EBB11BEB23403EFDA11F0CA00
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     5645
IP address blocks:        104.222.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:be:b2:34:03:ef:da:11:f0:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=81d78816-42b2-430a-8a9c-49e13acf21d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:39:52:82:d0:64:91:0d:9c:06:c4:94:3e:
                    55:ca:55:35:1d:2f:a4:8c:a6:d2:11:ec:be:ef:5a:
                    d7:df:3e:67:aa:f6:42:a9:14:51:e5:72:f4:92:ce:
                    07:a8:c0:a7:dd:de:93:a0:47:94:80:5f:98:91:b0:
                    22:7c:b2:40:36:bd:0b:ad:c9:47:59:6d:62:fb:03:
                    cf:7c:a3:7c:b7:82:04:d3:56:ba:35:94:bb:e2:62:
                    fe:c0:e2:3e:2c:09:87:a4:b5:1f:9d:ae:2a:bf:22:
                    b3:05:86:98:d7:93:08:e6:ad:90:df:43:5f:48:2e:
                    ee:21:3c:a2:63:48:dd:ec:7f:af:a4:0c:6e:41:65:
                    2b:48:06:d0:d4:b8:a9:28:99:88:4d:c7:2b:81:9f:
                    87:e8:fc:70:07:d3:c1:c8:74:90:5d:69:8d:ce:d2:
                    47:c9:65:a7:d2:e3:1a:49:e2:36:55:3f:9d:fb:34:
                    0d:1b:d7:2f:e3:7f:c5:ac:a3:6f:77:bf:49:52:94:
                    1f:6b:5f:77:ab:a9:65:12:8b:9c:5b:a4:44:b2:66:
                    1b:d4:27:80:b2:55:95:2e:e9:90:e3:cd:f1:6f:a9:
                    ce:fb:ae:66:35:3b:18:5e:5c:39:c4:ca:50:50:62:
                    5a:2f:fa:b0:c3:4b:e9:77:5b:49:f9:1a:84:a1:83:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:F8:E2:D7:35:31:C9:5F:0C:AD:0A:D2:A9:03:5C:84:15:64:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2d1265f0-ff7e-394e-8144-1a0cc5601ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.222.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:87:a9:ee:ba:8c:04:70:fd:04:1d:a6:ef:79:20:6e:4f:
         46:39:da:d3:17:4f:28:47:38:09:6c:48:4f:ce:e9:aa:58:a5:
         c5:0b:6e:c5:89:c1:c9:47:ed:50:98:fd:23:dd:b0:da:3e:cf:
         00:4f:5c:d3:37:a2:d2:11:a8:e5:1f:38:e7:77:17:d5:0e:5f:
         82:5d:9a:44:a7:3a:41:82:d8:f7:f5:40:61:19:2f:8e:fb:95:
         b9:93:71:4c:c0:d2:28:65:69:b2:08:94:43:e8:82:a4:f8:32:
         be:76:11:06:3b:61:35:75:d3:72:26:03:02:9c:b7:71:31:dd:
         26:7a:6a:89:2d:1f:d4:d9:be:10:64:6c:0f:e3:c1:88:23:a7:
         8d:5a:bd:ce:40:31:bd:22:17:50:2f:71:34:39:75:a1:15:4e:
         cc:a0:ea:6d:45:59:a2:58:c6:96:df:06:c1:2b:99:a3:0a:c4:
         9e:83:0b:aa:50:b6:cf:26:e8:9e:92:00:7d:de:a0:d1:df:bb:
         2a:f3:d4:82:fc:6c:73:6d:75:d4:08:05:b4:03:c0:3b:ef:5b:
         21:a9:c9:4c:c1:6c:e8:10:94:22:bb:cd:71:47:5c:13:e4:e8:
         42:c0:91:45:ac:bf:be:fe:45:74:f2:ba:94:b3:50:0b:dc:a2:
         22:ab:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 17:56:37 2026 by rpki-client