Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa
File:                     7e818356-ba51-3133-bdca-e226cc58e674.roa (raw, json)
Hash identifier:          gqTIVtxz0gwEXiS+FfU1zkrtDs8QroQcPtWe/BdqpQE=
Subject key identifier:   96:EF:B1:9E:C6:E8:E9:EC:47:A8:80:ED:30:29:51:23:6A:98:05:23
Certificate issuer:       /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial:       010D0C9F4328584DB9E50186ADABA8D2472358F0
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa
Signing time:             Mon 04 May 2026 22:07:32 +0000
ROA not before:           Mon 04 May 2026 22:07:32 +0000
ROA not after:            Sun 02 Aug 2026 22:07:32 +0000
asID:                     397268
IP address blocks:        45.33.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:e5:01:86:ad:ab:a8:d2:47:23:58:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
        Validity
            Not Before: May  4 22:07:32 2026 GMT
            Not After : Aug  2 22:07:32 2026 GMT
        Subject: CN=2ff2f300-c7d7-44fb-ae5d-7a45272d2ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:b0:48:ab:7a:93:e2:a5:be:64:a0:eb:a9:
                    2e:71:7b:d9:c5:f0:8d:e6:ad:9c:b7:f5:7f:71:72:
                    8f:fb:e1:54:3b:8a:71:1f:6d:c5:b3:14:cf:9e:a9:
                    e5:46:79:c3:5b:ab:90:54:a3:db:15:2f:f0:f4:20:
                    41:46:b6:62:69:d1:ac:72:17:5b:3a:44:1d:95:00:
                    06:c7:2b:47:07:b3:a6:d2:41:3f:ab:80:26:e2:fe:
                    1a:f0:c6:47:39:35:71:00:92:38:41:9c:9e:6f:fb:
                    e1:06:7b:63:af:83:b6:87:46:0b:d0:0e:cd:66:cc:
                    a3:ca:ac:ed:5d:64:74:cd:80:61:b2:7f:98:9b:d2:
                    eb:50:49:f8:e6:a1:4c:9c:88:32:75:80:69:9d:ae:
                    a9:95:65:f8:16:4e:b2:a2:48:99:9e:01:c3:86:16:
                    ad:23:e6:7e:85:69:1a:c6:ab:1b:ba:cd:10:11:7a:
                    96:81:bc:6c:68:b6:49:47:c8:b2:db:a3:e7:97:8d:
                    e2:ff:04:3c:b5:c0:6f:40:0b:32:51:3c:de:15:c5:
                    11:0b:1b:04:47:6b:4a:67:5c:c6:4d:ac:9b:05:02:
                    ad:6a:8e:84:7e:72:f2:21:04:d8:c9:ff:95:03:3d:
                    9b:59:27:6c:5f:3d:60:e7:5d:6f:71:7e:a7:f9:31:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EF:B1:9E:C6:E8:E9:EC:47:A8:80:ED:30:29:51:23:6A:98:05:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/7e818356-ba51-3133-bdca-e226cc58e674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:62:21:c3:23:0b:45:02:bb:26:0b:3c:35:55:90:29:fd:
         15:cc:c9:1e:71:ed:57:4b:4d:c2:3c:a3:a7:42:1a:03:23:57:
         74:5f:53:1d:e7:7d:ec:7c:f5:8a:72:7b:86:19:7b:e0:bf:41:
         5e:2f:6f:db:2e:b1:b7:34:db:17:a2:1a:60:47:8d:04:2d:19:
         cd:48:ca:9f:ad:27:32:02:13:f7:f1:3f:bc:99:fa:41:6b:00:
         d9:72:b9:ac:5b:60:b1:ff:96:0d:47:b6:7b:b0:a4:9d:06:c2:
         b6:e9:e0:92:0a:3e:cb:68:6a:b5:18:5d:48:9e:d2:1f:ac:67:
         ee:68:d2:d4:bc:08:7b:44:4a:09:54:80:0f:2c:2d:27:df:34:
         21:18:e1:be:d5:9e:01:b7:fa:f0:ce:a7:f7:c3:55:ab:f0:cd:
         eb:93:e2:38:84:77:db:d8:79:b7:e5:2c:74:c9:49:d9:d4:0e:
         9b:65:d5:af:e6:0e:fa:8f:be:7d:79:04:c3:18:ff:06:4c:d3:
         1a:32:ea:2b:53:11:48:94:f8:60:f4:12:98:2d:24:81:a1:d5:
         4f:1d:11:d0:0b:8c:6b:fd:a1:4b:87:88:2d:7c:3e:13:3a:63:
         76:7a:01:78:20:9a:03:8d:ac:8f:92:8f:1a:f8:3f:b1:1f:f5:
         73:cd:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:06 2026 by rpki-client