Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/845c0e7a-e092-3ac9-8c3e-331467525f92.roa
File:                     845c0e7a-e092-3ac9-8c3e-331467525f92.roa (raw, json)
Hash identifier:          O0F0JLCxak6xEQupOrtd7aHTu1Gx8RGBi3iSkg+epTU=
Subject key identifier:   D1:69:6A:60:F2:2F:51:D5:B8:5F:80:33:F5:48:19:C0:09:CE:55:B8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF498DBC4FA253C0828914180
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/845c0e7a-e092-3ac9-8c3e-331467525f92.roa
Signing time:             Tue 25 Aug 2026 15:33:44 +0000
ROA not before:           Tue 25 Aug 2026 15:33:44 +0000
ROA not after:            Mon 23 Nov 2026 16:33:44 +0000
asID:                     31898
IP address blocks:        147.5.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:98:db:c4:fa:25:3c:08:28:91:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 15:33:44 2026 GMT
            Not After : Nov 23 16:33:44 2026 GMT
        Subject: CN=e8e5474e-44f1-44c1-a8ec-5213ea656b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:4a:80:d4:69:a6:c3:5d:6c:c2:08:ff:aa:
                    f6:4b:3d:25:d9:38:bb:4e:56:69:11:d6:9a:04:73:
                    fd:27:78:40:fb:f2:5e:95:09:2f:a1:52:87:4a:e6:
                    44:a8:cc:38:eb:18:3d:49:4b:2e:63:ef:53:ee:ff:
                    72:f4:80:8c:39:20:d1:d0:a2:f6:c2:d5:4d:e9:33:
                    43:a6:a3:63:03:d4:b0:2d:2b:6d:0a:19:94:61:02:
                    51:80:8b:48:cb:e4:e5:5a:e4:99:26:6b:35:dc:f8:
                    89:d0:13:1c:13:ec:a5:4e:de:e8:d4:2b:4e:42:0f:
                    be:c1:98:6b:69:bb:16:df:29:41:f7:4a:67:71:65:
                    72:23:18:10:45:2b:bb:d8:7c:0d:19:a4:e1:52:4f:
                    2b:b8:b3:7a:b9:19:f3:1e:4a:b6:d9:53:74:da:8d:
                    2b:09:5d:a0:73:33:ae:09:fb:4a:4f:c5:f0:8c:f3:
                    c7:79:e5:4c:9c:aa:f8:dd:6e:5d:41:68:30:57:7e:
                    61:39:e5:16:ef:cc:51:04:3f:85:d6:ac:18:19:ef:
                    69:d4:51:20:8c:b6:97:a0:c6:56:ec:ff:36:39:0a:
                    31:d2:ab:ba:ce:d2:f7:2a:de:18:e1:4e:64:5e:61:
                    d2:53:3d:6a:1e:33:52:83:84:f7:c7:6b:d9:c8:45:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:6A:60:F2:2F:51:D5:B8:5F:80:33:F5:48:19:C0:09:CE:55:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/845c0e7a-e092-3ac9-8c3e-331467525f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.5.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:c9:b7:8b:a2:92:bd:8d:ed:54:ea:b7:47:ff:8f:44:05:
         35:6d:84:5d:f3:3e:59:34:a0:12:86:b3:ae:fe:ba:52:c1:f4:
         cc:45:f7:18:70:fb:28:c4:7a:cc:94:d1:88:36:06:56:49:d2:
         aa:fc:3d:cd:8a:4e:d5:f5:a2:a8:ca:84:c3:a7:97:04:22:d1:
         b6:59:fe:12:b2:e8:53:11:22:48:45:c9:b9:00:bc:94:5b:55:
         34:85:58:1f:57:1c:f9:00:aa:b3:71:49:59:a5:16:07:9a:32:
         5f:df:46:25:90:bc:c6:8f:5a:bb:55:b9:94:a8:28:90:46:94:
         d1:ac:21:2a:d3:cf:64:54:99:cb:d1:49:83:af:9f:e3:58:cd:
         bf:6b:75:82:61:dc:d8:ed:1d:d4:8d:b1:5f:bb:8b:50:f3:57:
         b2:4f:e6:23:49:57:53:ce:9a:3d:c9:e3:c5:49:a1:f3:e5:5a:
         92:e8:25:a1:06:d6:a8:a5:f3:ab:70:a1:fa:1f:95:36:fd:d2:
         05:1b:95:ab:fb:ec:d1:d1:8d:e0:31:e0:12:db:5d:20:14:b5:
         59:ac:26:e0:61:b3:3b:e8:7a:b3:cc:b2:28:62:e6:05:e8:48:
         50:eb:71:23:13:56:06:2e:6c:f5:69:94:1e:cb:72:4e:ba:69:
         9d:e0:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:54:38 2026 by rpki-client