Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
File:                     089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa (raw, json)
Hash identifier:          c0eZq77eqeCa8lIwpHjRLKFDKw4B7y89OXBK3jk2Rf8=
Subject key identifier:   07:7E:54:EB:C8:FB:4C:23:AF:2A:A4:EC:61:93:C9:F5:A9:2F:2A:DA
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584F2957B536D1C5404315F2EE80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     46261
IP address blocks:        45.59.22.0/24 maxlen: 24
                          45.59.29.0/24 maxlen: 24
                          172.102.207.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b5:36:d1:c5:40:43:15:f2:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=ff5f6e98-6ec4-454c-bc1c-276f1805f5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:fb:eb:8b:77:c9:4d:4f:67:b9:dc:54:c9:
                    ae:29:c2:dd:1a:ca:75:4c:44:dc:8e:83:27:87:b1:
                    99:82:9a:5b:55:27:c3:c8:96:99:e7:42:a7:34:01:
                    1b:96:0c:62:ce:45:c3:c8:a6:0f:4f:7a:4e:18:86:
                    d6:45:09:29:bf:8d:11:0a:0d:cc:49:0c:71:bd:53:
                    71:0a:19:9f:22:a1:d0:c9:3c:68:07:75:1c:37:3b:
                    a8:08:db:83:c4:c4:b9:79:d6:65:f8:af:60:bc:cf:
                    cb:1b:02:d3:ef:c3:57:6c:56:e3:4f:42:8c:f0:34:
                    de:ae:55:be:ac:2e:79:88:54:b5:5b:61:bc:c0:cc:
                    e7:59:0a:fc:f6:4d:e0:58:6c:cc:f1:f6:b1:ea:86:
                    85:2c:d5:f2:74:f5:f4:15:9a:09:f0:9d:1c:f4:19:
                    a3:0e:03:51:95:c5:1c:29:cf:34:5b:30:9d:ad:37:
                    23:83:fc:2f:34:8c:00:ec:d8:7c:b3:1f:ce:ad:f6:
                    28:d7:15:21:7f:84:8d:e1:66:1c:b1:65:18:c0:1a:
                    f7:a6:ea:fe:64:55:36:a2:ed:0b:ec:cb:6e:b0:56:
                    03:ae:fb:77:e3:9b:14:d1:6e:68:ca:79:01:2d:bc:
                    97:7c:54:cf:98:0a:9b:40:22:be:7a:55:19:21:41:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:54:EB:C8:FB:4C:23:AF:2A:A4:EC:61:93:C9:F5:A9:2F:2A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.22.0/24
                  45.59.29.0/24
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:22:2f:53:fa:10:72:1a:74:35:94:17:fe:28:56:bc:70:36:
         e4:35:03:3b:18:0c:a2:74:c3:96:c6:2e:3f:c8:f8:15:1c:c8:
         68:9b:1b:f0:95:36:f4:bf:57:0f:95:a2:78:2b:89:f7:1d:51:
         42:71:2a:74:30:97:2c:37:95:77:7f:40:b8:74:50:87:df:b2:
         bb:39:a1:78:cd:74:23:0d:6d:bd:5d:1f:73:9d:d4:09:e8:34:
         1a:31:a2:72:da:de:b3:74:1c:55:2b:37:4d:50:b0:d4:1e:e6:
         62:e6:92:35:53:da:71:84:8a:dd:6b:f5:00:70:59:f0:37:41:
         79:13:73:32:05:fd:bf:1a:8c:03:27:24:d6:86:4e:74:f1:1c:
         e3:91:7c:d5:c5:de:4c:36:41:4e:60:77:26:cc:c4:bf:4c:bd:
         cf:38:89:8a:56:09:bb:b7:b7:1e:82:93:17:e5:54:a3:8d:e5:
         5d:62:c0:96:c0:ea:3c:c6:9c:a2:28:1e:61:1f:2d:e0:a8:5c:
         67:fa:6e:a0:98:ce:6b:e3:34:61:0e:a2:84:f8:16:06:cd:3b:
         21:18:92:cc:5f:fd:4a:6a:b5:b5:03:33:1e:1d:ee:78:a1:69:
         6a:7b:24:48:49:aa:e8:03:0f:cf:e6:b0:d3:48:27:d1:ea:1d:
         80:5f:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:38:13 2026 by rpki-client