Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
File:                     1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa (raw, json)
Hash identifier:          iuc56uC5XsVLMu8z0nriPANusJoTjZwyFssPNNcOj64=
Subject key identifier:   3D:78:C0:4B:82:41:64:4A:EF:59:F2:13:28:17:F8:0D:00:29:9B:17
Certificate issuer:       /CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
Certificate serial:       010D0C9F4328584EC20C6F2CB934C9649E67F980
Authority key identifier: B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1011
IP address blocks:        45.45.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6f:2c:b9:34:c9:64:9e:67:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=b20ed955-6312-4d65-97ea-fedb44349e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:96:52:3c:32:ce:8b:e9:4f:eb:7e:2a:e1:
                    6f:30:bf:73:d0:11:97:51:8f:78:53:85:1d:9f:b9:
                    5a:08:55:f7:b5:66:89:05:3f:a7:d9:42:e5:1d:f2:
                    30:c8:d2:34:3a:28:c4:90:66:0f:0c:e1:f0:ca:82:
                    28:b7:1b:b6:10:81:68:e3:7e:fb:f6:a3:16:31:1a:
                    22:aa:e9:5b:9a:20:38:60:92:0a:a2:b8:ae:cf:2f:
                    b4:92:80:0a:7b:47:75:b5:a9:1c:4e:79:51:03:b8:
                    cc:f8:9e:7a:28:95:22:5f:b6:35:ed:38:cc:0f:6b:
                    22:a1:dc:1b:d8:28:cb:58:ee:ee:14:a4:a3:92:fe:
                    ee:02:03:67:5f:58:3b:c0:5b:a9:5e:0d:a9:3f:1b:
                    f2:9a:53:00:8f:cf:df:b2:6c:c6:61:4b:a9:38:d7:
                    ad:a4:8a:65:f9:8f:b4:be:a6:d7:79:c6:e7:55:27:
                    34:3e:cc:a0:a9:7c:46:25:96:a4:5b:0d:16:e1:94:
                    59:2e:35:50:d2:e5:52:48:f5:80:18:e9:d7:34:f5:
                    df:32:92:5a:bb:cf:c4:53:d5:20:c7:28:b0:d4:b3:
                    3b:de:2d:fd:3d:d4:77:75:0e:81:1f:24:e9:55:ca:
                    30:ce:c2:6d:f1:58:67:10:93:86:b4:6c:7d:15:1b:
                    bb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:C0:4B:82:41:64:4A:EF:59:F2:13:28:17:F8:0D:00:29:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/1c87c1c9-331a-3524-9f44-1bc4e33059d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.crl

            X509v3 Authority Key Identifier:
                keyid:B2:BB:D7:45:02:8D:36:D6:C2:33:7F:4D:48:8C:43:47:21:60:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/af4bc5c3-9ef4-4da3-9fcf-4ec6dabbfbc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:19:6b:0a:92:6a:a0:88:b8:27:95:e1:32:e2:c1:29:32:
         b8:61:4d:d1:cd:72:34:d5:71:b3:0b:0e:59:93:32:85:07:e3:
         ad:65:b6:6a:0e:77:31:9c:1e:d9:8e:cb:ef:55:d8:12:ef:62:
         60:f7:dc:d0:ae:2a:54:0d:84:02:b8:49:fc:bc:d7:bb:c8:0e:
         1e:e1:ef:28:48:64:99:83:e8:cd:bd:06:47:67:2c:1e:3b:41:
         70:a9:c9:88:5b:90:5a:f2:d3:83:40:c7:e9:ad:5e:2b:8e:f2:
         36:a4:25:c2:85:2e:2e:6e:e2:48:08:89:63:26:0e:50:35:d8:
         b2:74:cc:00:e5:e6:ee:15:c9:1d:d4:4a:ba:5d:0b:fc:8c:54:
         0c:5d:5c:3e:31:33:2f:4f:28:52:91:09:7a:fe:ff:f2:ba:f0:
         7b:b7:9e:5c:5b:8f:90:14:09:26:66:b8:fb:47:08:21:35:28:
         04:f7:09:db:30:85:2f:a2:ff:6f:6c:e0:e1:67:cf:81:a7:50:
         66:d0:2c:39:5e:62:e0:0d:e4:44:c7:ef:e5:2f:91:32:5a:6e:
         1d:bb:ac:09:e1:95:0c:c0:3b:22:d3:00:e9:6e:3e:97:b5:dd:
         6b:1f:d0:75:a7:2c:d1:cf:e1:f2:60:ef:dc:cb:7e:16:79:c3:
         d6:60:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 14:37:22 2026 by rpki-client