Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5a84c417-1ead-332d-b021-e88475615c16.roa
File:                     5a84c417-1ead-332d-b021-e88475615c16.roa (raw, json)
Hash identifier:          V+HTLHPg9omjwETXNl9wlDtBV+/yxxEhjW6QNqPDBoc=
Subject key identifier:   75:13:C3:60:DC:61:E1:41:C5:38:21:5A:2B:0E:BE:3A:2E:97:88:56
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584F4277F872F838F45368F98880
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5a84c417-1ead-332d-b021-e88475615c16.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     62571
IP address blocks:        45.223.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:f8:72:f8:38:f4:53:68:f9:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=03abd9fd-4901-4a8c-a3ad-3b36d0dfc2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:fd:03:6c:88:df:cd:7b:42:67:4c:37:44:
                    78:ce:d3:0d:c4:df:e6:f8:58:1a:2f:7f:6b:da:b0:
                    58:fc:3f:fc:ae:05:1e:6a:a7:e6:f7:d9:96:dc:2c:
                    99:2d:de:c8:74:74:f7:bd:e1:1f:e3:29:f0:42:5e:
                    3b:e2:53:e4:d4:72:c8:56:8f:e4:53:a0:d3:22:0b:
                    cf:04:70:41:03:15:3d:bc:a4:d6:f0:0b:f2:ba:ef:
                    e3:11:be:0b:f9:d9:16:8e:a4:e7:df:26:8d:04:9e:
                    4c:d8:3e:15:75:cd:53:e1:1c:25:f7:6b:e2:f7:95:
                    4b:4e:33:da:da:0e:81:09:16:fc:3d:17:43:01:99:
                    8e:f0:1b:00:43:96:bb:e6:6a:2f:e7:72:28:ad:5a:
                    62:45:9b:72:d8:b7:f7:16:9d:97:62:24:4e:74:8e:
                    2c:af:c6:82:f1:72:25:db:d3:95:98:5d:b1:c4:2f:
                    04:8f:4c:8a:83:54:e8:42:63:06:86:44:1d:a5:49:
                    a5:b9:8b:be:10:d7:ff:1d:7d:08:57:71:85:96:b6:
                    7d:46:2e:74:15:a1:c0:be:d0:04:61:2a:7c:51:0e:
                    16:9f:46:e1:be:67:b0:13:98:e4:fa:47:30:39:a1:
                    f3:b9:7b:e9:26:28:34:d3:a7:4c:b5:33:71:db:93:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:C3:60:DC:61:E1:41:C5:38:21:5A:2B:0E:BE:3A:2E:97:88:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/5a84c417-1ead-332d-b021-e88475615c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.223.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:90:83:ff:b7:17:49:ba:7f:56:a1:0b:61:ec:41:45:f4:a4:
         ec:67:33:85:87:de:77:0b:3a:a4:cf:a9:ae:5d:e3:d7:2c:b9:
         69:b8:18:18:8b:09:d8:7a:0c:c6:be:87:72:27:90:63:dd:80:
         c1:c7:d9:f0:ca:3d:ed:2b:92:c8:58:29:7a:8a:b6:89:78:a9:
         ad:7e:47:f6:a8:14:42:d9:86:f3:4e:a4:3b:88:b3:19:68:a6:
         dc:72:1b:55:50:4e:65:7a:6e:dc:bc:73:0e:17:4c:9f:ed:b5:
         88:e9:81:ac:e4:2b:98:8f:dd:f0:4b:66:1d:42:26:7f:0b:b2:
         dd:8c:fa:b5:7c:d3:aa:ce:45:b7:a8:32:d8:ce:3a:71:d1:c4:
         9f:50:2b:8f:1a:cf:33:00:d6:b3:59:5e:9b:9d:12:99:53:53:
         5c:69:dd:01:e5:09:9e:68:58:43:5f:bd:eb:60:8a:43:fa:4e:
         3d:e5:dd:20:9b:94:4d:3a:5e:3f:52:0e:f5:38:2e:ca:ad:a0:
         99:ed:8b:dc:56:54:09:24:e4:37:d6:c9:27:f0:57:fb:20:13:
         11:c3:3a:b9:ef:94:ea:fd:56:cf:f5:67:cc:57:08:41:80:e1:
         70:19:30:c0:4a:25:ec:d4:a3:b6:07:67:8d:bc:2f:75:46:93:
         08:fc:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:51:45 2026 by rpki-client