Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/64a3d70f-875b-36f8-830e-7a1423286ad6.roa
File:                     64a3d70f-875b-36f8-830e-7a1423286ad6.roa (raw, json)
Hash identifier:          LQf7k0c6+oFfAUnZazdFtJJ3WNo+dnOeOl6HFUi70e8=
Subject key identifier:   4C:98:93:52:48:DE:A0:75:FC:A5:23:18:85:EA:FF:AE:98:40:98:20
Certificate issuer:       /CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
Certificate serial:       010D0C9F4328584D23AD9607A5853996160F0980
Authority key identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/64a3d70f-875b-36f8-830e-7a1423286ad6.roa
Signing time:             Thu 12 Mar 2026 02:44:37 +0000
ROA not before:           Thu 12 Mar 2026 02:44:37 +0000
ROA not after:            Wed 10 Jun 2026 02:44:37 +0000
asID:                     6364
IP address blocks:        45.58.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:ad:96:07:a5:85:39:96:16:0f:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
        Validity
            Not Before: Mar 12 02:44:37 2026 GMT
            Not After : Jun 10 02:44:37 2026 GMT
        Subject: CN=1fdff763-37be-46ae-9d13-eededda3e561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:6f:52:61:e5:67:8a:1d:4a:d3:ff:f8:e8:
                    90:0a:9a:83:ce:d2:e9:e6:e5:f7:83:04:f9:63:6c:
                    0e:e0:f9:28:01:e7:95:af:ee:e3:5e:7d:ba:cf:ed:
                    0f:25:6c:0b:6a:66:58:f2:e0:04:c3:07:77:40:6b:
                    8f:98:0c:1b:c2:ab:ae:c4:51:83:ed:0e:19:37:85:
                    b8:ed:45:40:a8:2e:b7:87:7b:71:f2:3d:a5:eb:d9:
                    96:4c:d8:38:c1:e6:3d:98:f4:4f:ee:13:8b:33:76:
                    f2:6e:a8:69:56:18:cb:0a:42:ef:0f:6a:aa:4b:c4:
                    9a:c7:b9:34:46:7a:5e:70:79:67:0e:c3:1b:d7:63:
                    20:ee:9d:67:e2:9a:fa:a2:fe:86:03:f5:13:3c:76:
                    ef:92:fa:61:0a:6c:cf:e7:27:71:0b:8b:32:fe:e1:
                    8a:8b:89:87:fe:4f:e5:d9:07:a9:21:4b:5e:90:d9:
                    42:60:4e:5e:0a:93:b1:32:97:04:c6:1b:5f:52:9d:
                    c8:30:1c:a5:9d:7b:67:fb:e4:1e:32:3d:95:b9:1f:
                    44:ad:7c:0c:0a:1c:77:94:45:01:7b:30:f4:0d:cb:
                    89:90:81:59:96:84:06:31:d9:0d:34:25:f3:3c:5b:
                    c0:8a:8a:69:d0:f6:f9:4d:ab:28:55:da:5f:e2:76:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:93:52:48:DE:A0:75:FC:A5:23:18:85:EA:FF:AE:98:40:98:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/64a3d70f-875b-36f8-830e-7a1423286ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:2c:82:ed:e2:12:5b:12:a5:b9:0c:37:c8:a4:e9:4a:c1:
         ee:e9:d5:b0:7f:31:89:0e:11:16:19:50:5b:28:9a:2e:ae:64:
         3c:30:90:c2:cb:87:19:f7:79:ae:4e:94:d6:f0:cb:e9:a5:cc:
         74:e7:29:59:6c:86:f6:03:43:20:4d:f9:0f:ed:9c:2a:ff:c8:
         eb:81:c8:bf:20:ab:5e:28:95:92:46:6e:52:a2:57:82:da:cf:
         f3:ad:08:11:1f:99:a1:bd:27:e4:6d:d1:1f:0d:d2:75:c1:47:
         45:8f:86:5e:00:26:70:c5:c4:78:f9:bd:10:d1:7e:6c:38:ed:
         2b:8d:e2:f8:19:fa:85:b5:8f:17:b8:7d:9b:12:83:d0:fe:b9:
         e5:dc:d4:8c:3d:8a:3a:4c:43:af:49:3a:9c:19:d6:22:25:94:
         50:9f:25:b6:49:be:57:ee:eb:60:86:e8:5a:ca:59:fb:e4:19:
         e6:34:87:c2:59:5f:eb:f5:6e:56:31:54:c7:c6:63:5f:d9:ea:
         92:9d:5b:5c:3d:f4:2d:88:a0:61:3f:5a:a7:d3:92:20:0a:59:
         93:32:01:56:9a:d1:97:27:20:9a:24:4a:00:2f:b1:3f:10:9c:
         63:5f:cc:06:97:54:4f:33:6d:bf:01:55:37:02:ee:85:cf:04:
         08:dc:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:12 2026 by rpki-client