Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7b967272-6d32-32ff-85f1-5efae1f14b07.roa
File:                     7b967272-6d32-32ff-85f1-5efae1f14b07.roa (raw, json)
Hash identifier:          osccu71aLG9LopmqKhufNaNADIabAyhcBOtaGT+SpDM=
Subject key identifier:   E8:E1:85:70:88:A8:96:D7:58:E9:B4:0C:C8:64:20:84:4E:43:96:F7
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584DBD058C444C222D5418BB4860
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7b967272-6d32-32ff-85f1-5efae1f14b07.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14061
IP address blocks:        45.55.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:8c:44:4c:22:2d:54:18:bb:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=b2f372c5-8130-4bc1-aba8-405e9898c92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:6a:bf:05:5a:12:3c:67:c9:b7:b9:3e:e0:
                    59:5c:8e:50:26:86:d4:4b:14:1d:73:e6:ea:86:d9:
                    57:d6:36:2d:88:a1:d7:61:63:5e:e6:68:c1:b6:38:
                    c5:fb:ac:fb:4c:b7:67:77:66:88:aa:5e:37:da:0a:
                    ec:a0:8c:a1:09:3a:a9:aa:96:7f:56:05:9d:5b:47:
                    fb:cc:34:05:9c:3e:65:35:0e:41:7b:3c:8b:ed:5a:
                    89:67:2a:a4:7b:d0:c9:f1:73:71:21:16:32:9c:f1:
                    f3:eb:98:c2:9b:72:f3:b1:6f:16:72:75:9f:d8:fa:
                    70:44:2a:86:84:fd:29:b4:23:89:ef:a5:6b:1e:94:
                    85:61:2f:37:ee:61:36:e4:d9:7a:68:2a:f7:35:71:
                    4e:a5:67:55:07:dc:e6:09:20:61:75:9d:7b:fa:5d:
                    d1:55:b2:22:01:f0:85:3e:eb:d4:8a:c2:38:71:68:
                    59:ea:58:00:5f:a3:d5:c9:93:2a:89:22:66:f7:55:
                    6b:de:db:cd:fd:12:70:81:64:06:23:22:9d:c0:cb:
                    3e:6a:97:46:09:ab:6a:43:a8:79:fa:8e:3e:88:6e:
                    b8:86:8f:49:5c:dc:ac:66:9d:fd:99:66:f0:8d:24:
                    59:06:05:16:41:6e:7d:2f:5e:26:30:41:f8:46:b3:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:85:70:88:A8:96:D7:58:E9:B4:0C:C8:64:20:84:4E:43:96:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7b967272-6d32-32ff-85f1-5efae1f14b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:38:fc:92:8b:76:66:f5:0b:4f:c2:fa:54:fa:e1:aa:b4:
         f1:ff:75:8a:6e:ec:a6:13:04:5b:4b:37:cd:1b:97:76:c5:a4:
         f0:19:61:3e:bb:bb:02:70:23:d9:85:a8:12:9c:61:cf:e1:f4:
         df:03:db:ed:5d:59:5f:5a:79:f5:56:36:6b:ce:b7:86:a8:79:
         6e:9c:3d:eb:7b:e5:4b:53:f3:ac:c4:a2:98:77:0a:95:1c:33:
         9f:40:e0:8e:5f:7c:2d:86:42:fb:1e:f4:0b:c3:c0:c2:c6:6b:
         58:49:c0:26:fb:98:95:8a:0a:cd:a2:24:02:9d:dd:02:c4:5d:
         20:47:03:4b:b0:52:00:68:9c:25:8b:c4:1c:9a:72:23:e2:e3:
         f0:b6:c8:fa:23:b6:44:03:5d:76:b3:48:6c:42:cd:9a:e2:62:
         7e:6f:76:7f:e9:fd:08:a7:5e:ec:5b:82:c1:ff:38:91:70:3f:
         18:31:f0:e7:8f:0a:8a:95:1f:e1:0b:6b:e8:39:1b:5a:8e:8d:
         26:04:10:de:76:48:ae:c8:ad:ad:fc:3e:07:3e:65:6c:77:25:
         d4:e7:c9:aa:58:2a:0e:ef:4f:00:13:b1:ee:81:dd:14:09:46:
         6c:a1:62:aa:a4:0a:ea:e9:51:aa:ab:e0:b9:13:c7:7a:d6:bd:
         fa:47:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:06 2026 by rpki-client