Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa
File:                     7e818356-ba51-3133-bdca-e226cc58e674.roa (raw, json)
Hash identifier:          2qBU3IsFLWb+XM6VIkh638yPWLrTdVJbd2PiaDCh1Wg=
Subject key identifier:   05:C8:CD:83:39:0D:5C:CF:C9:2B:1A:C9:D2:FB:38:BC:BE:96:13:28
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584E9A7FA850FA650299DF167400
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     397268
IP address blocks:        45.33.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:a8:50:fa:65:02:99:df:16:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=c11cee05-9f4c-4027-9d24-14d63c26931b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:cc:f7:8e:bc:3a:00:97:0c:6c:a0:1b:ce:
                    99:36:a2:51:30:33:ed:d2:2d:2d:e1:9f:85:0f:77:
                    f2:56:cc:a5:f0:c2:1c:07:4b:5a:b0:67:bf:da:6e:
                    27:28:c0:9f:7f:96:d0:0a:1e:46:db:50:ba:92:83:
                    c0:d5:16:81:a4:23:75:29:69:b9:59:bf:03:06:fa:
                    16:ee:09:86:76:05:2b:26:f5:9a:be:4f:d4:3a:d3:
                    db:85:63:a2:51:2d:76:a9:ee:92:72:3a:eb:b2:fa:
                    9e:a4:1e:89:b4:f1:da:63:3b:50:7e:59:30:66:b4:
                    75:96:e4:cf:ea:c0:4e:85:17:ba:11:87:4e:62:06:
                    4a:4c:d0:27:6c:86:37:da:42:f2:b0:2d:2f:f1:9b:
                    73:02:20:e9:57:e5:24:76:01:c8:c1:94:71:1c:72:
                    0a:14:74:06:43:97:96:fb:9e:b6:a8:fc:90:8d:f0:
                    b2:0a:cf:01:3e:57:76:63:a6:03:6f:47:92:95:8f:
                    92:cb:26:c6:04:54:8a:8e:af:15:cc:c2:de:20:5c:
                    b8:5b:36:d2:e5:bc:4f:ea:5b:f5:83:82:fb:1e:ff:
                    ff:07:31:5c:c0:82:5e:a3:74:03:d3:bf:95:db:68:
                    08:76:52:00:2b:41:ff:52:c8:e3:54:6b:06:63:1f:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C8:CD:83:39:0D:5C:CF:C9:2B:1A:C9:D2:FB:38:BC:BE:96:13:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:35:4d:db:c6:4d:17:af:fc:51:e3:d6:0a:d3:73:35:ee:2b:
         88:25:74:b0:62:e8:ef:b1:5e:06:d2:94:84:e3:47:3f:a8:77:
         a1:3f:d7:a9:ca:0f:fc:93:49:73:2a:17:f5:31:b5:fc:c0:b3:
         ce:3c:15:17:40:90:56:24:42:97:66:17:46:d0:8f:7a:58:61:
         6f:ea:60:0f:3f:3c:8f:76:12:cd:f3:27:1b:27:26:1f:97:0d:
         ad:9b:45:eb:73:0c:bc:2b:b9:b7:c6:73:6d:bb:cb:cc:18:c0:
         ac:2e:c4:37:1a:de:7f:8d:12:20:2b:47:15:fe:0d:e1:f4:82:
         5a:5b:c8:c0:45:80:cc:fe:1b:58:53:e8:55:db:e5:8d:83:0f:
         e6:ad:cf:e6:2b:19:5f:e0:02:6d:22:27:7e:c9:80:0f:28:0d:
         d5:61:79:2a:c3:8e:d3:00:6c:18:95:f4:61:fa:1e:59:97:fc:
         23:ee:f1:8c:78:34:43:30:7d:e4:de:1e:1d:6e:68:40:75:7f:
         79:63:da:84:b5:21:91:dc:97:46:25:eb:9d:fe:fc:ec:f7:5c:
         1f:ef:cf:42:a7:75:40:03:79:97:98:70:59:f2:a4:c9:71:a4:
         8f:e1:a5:3e:5e:29:c4:ec:f7:38:f8:63:00:5c:fa:5d:14:0f:
         ce:6d:fc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:56 2026 by rpki-client