Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/bf13d909-2125-3c02-8519-b02a366c0462.roa
File:                     bf13d909-2125-3c02-8519-b02a366c0462.roa (raw, json)
Hash identifier:          D48to+M48XgvvqUmPzqBPGM0fXguK8eY6o3rcVoLxYQ=
Subject key identifier:   B2:3B:11:BC:D5:0A:89:40:58:38:07:B5:C7:A2:04:2D:EE:E7:03:73
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584DB4A5AF64880E6DF684251700
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/bf13d909-2125-3c02-8519-b02a366c0462.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     209594
IP address blocks:        45.58.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:af:64:88:0e:6d:f6:84:25:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=bc8c5ad1-5308-4ea2-a02d-a2724a940cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:e0:6e:39:20:da:35:30:f2:01:33:0a:7e:
                    54:42:0e:87:c9:d5:be:65:0d:01:92:36:c1:10:45:
                    a7:6b:2a:f9:bf:ce:6a:c7:ec:d5:e4:1c:78:39:c7:
                    1d:0f:88:2a:86:a9:7f:78:f0:06:22:fd:3b:47:e9:
                    b0:71:7e:be:37:b0:76:1a:f7:6b:30:13:ae:63:b8:
                    30:f3:df:ac:77:f6:f5:39:48:09:3a:1b:ea:f3:7e:
                    45:81:ab:ef:b0:f5:6f:8e:3a:e8:58:d9:a4:c3:e9:
                    5a:d3:7d:2a:a2:ad:88:c3:39:a6:34:db:22:f0:61:
                    3c:a9:eb:86:27:0c:37:04:e0:12:c8:e0:66:e3:d8:
                    91:7a:c9:be:67:a0:92:cc:01:f2:16:af:dc:eb:35:
                    54:80:0b:a0:fa:45:e4:85:01:ee:3a:77:7f:e3:be:
                    ff:b7:f2:f0:76:3a:28:41:a8:a3:01:5f:20:a1:7b:
                    d7:82:f9:b8:23:0d:0b:19:62:b1:ff:b1:7f:24:93:
                    fa:2f:0c:2d:c3:0c:88:bb:43:c1:72:f4:1d:4b:39:
                    19:43:dd:5d:2c:48:84:d4:0c:b4:56:b0:97:07:d9:
                    12:6e:23:1d:45:ba:26:3b:68:3d:05:f4:b9:22:19:
                    2a:b3:0f:e4:c6:d2:41:e7:c6:5e:33:68:0b:e2:63:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:11:BC:D5:0A:89:40:58:38:07:B5:C7:A2:04:2D:EE:E7:03:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/bf13d909-2125-3c02-8519-b02a366c0462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:3a:13:4e:1b:bd:0b:04:46:f6:b9:d8:e8:0e:fc:41:1f:
         c5:1f:7b:6e:5d:86:38:ef:56:2f:01:9f:4d:2c:c2:dc:19:93:
         af:ae:a5:6e:51:2a:11:28:4c:42:1d:b2:a8:31:55:82:89:10:
         dc:1b:03:ba:a3:53:16:52:99:c5:97:bb:d7:ab:8e:69:78:51:
         aa:87:ed:14:f6:28:0d:a2:b1:41:9b:e6:df:f4:e9:69:84:81:
         01:2c:c2:4e:40:ed:ce:83:da:93:c1:c4:8a:41:4c:7e:aa:39:
         29:dd:55:4a:0e:de:99:52:c9:03:c7:62:de:d3:b2:33:dd:2f:
         e0:3c:b5:b0:28:2e:dd:6b:9d:74:7a:2e:05:be:f8:d0:2c:54:
         e9:ab:64:67:d8:3c:f2:22:d1:04:5f:d2:77:25:ec:96:31:d2:
         2e:63:3c:7b:41:4d:8a:02:ad:ef:da:ae:5a:7a:7d:ba:09:34:
         24:14:bb:1f:c6:9b:2a:a8:14:63:97:a7:73:4c:91:89:62:32:
         c5:8b:14:ca:de:8e:14:55:32:df:12:18:c3:86:fd:ee:05:e9:
         78:4f:88:3d:e5:5c:db:9a:74:ab:98:2a:43:c5:67:7f:ea:52:
         b9:18:3d:f3:b6:6c:58:ab:c2:10:dd:02:bc:92:83:6b:37:00:
         f5:26:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:55 2026 by rpki-client