Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa
File:                     43cb54d4-5005-3f5a-9016-88744b8f4490.roa (raw, json)
Hash identifier:          YbWxmnsLUtH6JbuZeS2klfexVkU/RFw3M95+JWzgYi0=
Subject key identifier:   6E:FE:82:35:DF:EF:DF:71:AB:65:0D:AC:80:13:68:32:6D:FF:90:25
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584DBD0592CB124D0D03247B4680
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        45.223.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:92:cb:12:4d:0d:03:24:7b:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=a5ff2b04-8fa2-4bee-a58f-e88b5e3e4e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:61:99:e2:63:cf:79:ad:5d:91:9b:74:62:
                    8f:42:bd:b6:bf:be:16:ec:0a:90:68:62:f5:04:96:
                    1c:af:78:e7:46:87:26:2a:20:5e:f2:75:92:49:6c:
                    03:04:d6:51:74:1d:e7:ab:5f:7a:ff:e2:f4:5a:d7:
                    c8:49:33:41:27:3c:7a:30:a0:2d:24:a1:d0:2a:c3:
                    b0:fe:f3:a6:f8:0e:9a:29:6f:3e:d9:36:5b:f8:29:
                    25:70:04:fa:50:c0:49:81:81:e4:89:15:26:8b:93:
                    47:26:0b:93:a0:d7:e8:ed:2e:86:e5:80:c4:7d:84:
                    37:8b:4e:34:14:54:2a:1f:f9:ba:85:c6:87:95:42:
                    73:0d:50:a9:1a:2d:4f:fd:c7:ac:f6:a2:9f:cd:7e:
                    c9:04:0c:d0:e2:a2:55:b9:c5:a8:d9:42:1f:20:d7:
                    48:0a:a3:e8:b1:a8:5b:07:89:31:30:a0:34:4e:2b:
                    1e:41:82:f0:68:d9:27:78:16:b1:6c:97:8c:74:ac:
                    f1:25:ae:40:8f:8a:79:b9:71:8b:75:2f:99:e4:d5:
                    c4:f8:2b:b0:1e:e8:75:5a:5d:d1:a4:6b:4f:ed:51:
                    47:78:ff:b0:8b:d4:6d:79:a6:de:89:ad:dd:37:da:
                    b3:d6:b5:59:a7:62:af:d1:94:4f:ff:b6:07:28:47:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FE:82:35:DF:EF:DF:71:AB:65:0D:AC:80:13:68:32:6D:FF:90:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/43cb54d4-5005-3f5a-9016-88744b8f4490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:69:1e:f4:81:d0:24:01:9f:a7:67:f3:14:ff:f7:b5:9c:37:
         c3:da:64:0d:5b:00:37:b7:09:b1:9c:97:66:e1:b1:ea:32:b7:
         9a:a7:b1:12:45:58:6a:31:5f:30:01:2b:29:74:ac:6e:f9:d9:
         2c:50:56:fe:d3:97:30:0b:2f:29:29:16:ef:ef:ee:35:7a:b7:
         bb:d8:99:e5:ad:4d:d7:74:40:ee:9d:fc:c8:28:e0:6a:26:6e:
         fd:36:ef:63:15:0f:a5:74:25:32:b9:32:82:59:89:f4:75:b9:
         44:9b:c0:70:66:72:3d:d7:84:ee:8e:49:bd:4f:ae:2e:a8:a5:
         2b:14:6f:f3:21:45:6d:e4:09:0b:cb:76:44:6d:92:b5:90:5e:
         f0:d2:10:e6:63:df:fa:1c:ed:29:00:31:4e:c1:ec:40:3f:a4:
         84:2b:b1:42:45:25:b5:c9:41:1a:4a:f9:69:f0:58:e9:78:9d:
         ad:22:d7:cb:d0:cf:1e:9c:83:28:db:5c:1a:6d:52:dd:15:de:
         f2:e7:ab:ec:33:72:81:fb:76:03:a4:c0:03:bd:13:e2:90:1a:
         be:87:f0:b8:c9:2d:5c:a9:10:8a:10:2c:d8:52:cf:21:4f:e3:
         a0:5b:fd:3a:14:81:fb:a8:68:45:ae:a9:22:f1:3c:f1:53:49:
         6a:bd:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:49:56 2026 by rpki-client