Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
File:                     089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa (raw, json)
Hash identifier:          IV4rUhiSTIMy2s4Kf0OEKXXndhGibutNAuizmr7CUOM=
Subject key identifier:   53:FE:E6:F1:63:C2:0D:45:47:04:D0:9E:AE:F0:8A:B8:F8:92:F8:48
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584DA6B01561B7174704D63B4240
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     46261
IP address blocks:        45.59.22.0/24 maxlen: 24
                          45.59.29.0/24 maxlen: 24
                          172.102.207.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:15:61:b7:17:47:04:d6:3b:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=550796c1-acbe-4255-b7ea-616393b66c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:2e:ac:bf:99:1d:d7:7c:95:85:93:69:22:
                    fa:6a:1e:12:f5:02:d2:8a:93:ec:1b:84:47:74:02:
                    82:59:72:c2:6f:98:6e:18:9a:fa:00:66:e8:f8:32:
                    01:b8:09:d1:91:5f:59:d5:0a:0a:b0:a5:c0:b0:0c:
                    c0:f1:6f:70:83:3a:78:33:a5:50:a6:dc:55:66:ad:
                    36:e0:f4:35:4b:28:36:90:06:3c:3b:9e:a0:91:ca:
                    e5:d1:b8:e7:f5:d1:2b:b5:2e:51:99:16:df:1e:d4:
                    18:44:db:48:1a:93:8a:0b:d5:c3:c4:bb:fe:b8:c6:
                    26:dc:38:59:6d:85:4c:b8:88:fc:ad:cb:91:19:27:
                    86:75:48:d7:18:60:66:be:35:23:4b:2f:83:b5:71:
                    ac:9d:6f:a6:5e:22:f3:eb:04:b9:af:f9:a2:7a:54:
                    18:b5:e7:85:0b:53:e1:8d:97:e7:e9:79:63:65:9d:
                    fa:df:b1:9d:33:8a:c5:34:fc:37:40:6f:0a:7b:b5:
                    9c:33:53:59:a0:fc:4b:90:10:bf:1e:1e:f4:2c:db:
                    96:ae:0a:48:42:8f:c9:76:52:3b:d7:91:1b:35:a7:
                    a5:2e:e0:c7:79:94:d8:c9:7a:56:5a:2e:41:47:d9:
                    59:33:41:c4:57:15:e7:c1:60:14:83:66:25:0b:9e:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FE:E6:F1:63:C2:0D:45:47:04:D0:9E:AE:F0:8A:B8:F8:92:F8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/089e7d82-00e7-37f7-ac93-9c4ab4c1ff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.22.0/24
                  45.59.29.0/24
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:a7:32:8f:0b:fa:43:e8:28:44:a8:79:0b:26:8b:9a:b4:
         57:e2:cc:6c:75:0f:83:bd:15:5e:3d:9a:f2:04:c4:29:8c:76:
         bc:bc:6d:69:46:05:07:80:91:2b:c9:00:6a:08:e8:8f:64:71:
         41:f9:ff:17:1b:b4:a3:a6:6e:d8:3b:73:09:02:57:c3:37:34:
         61:7e:94:1c:a7:20:74:4b:91:bb:3d:d0:df:07:10:4f:fc:87:
         80:90:a6:15:f9:43:9d:a0:a5:36:0c:b1:10:06:59:91:a7:e7:
         a7:d9:12:cd:47:9f:29:74:9e:47:cd:17:ac:d9:6c:af:b8:eb:
         7a:91:21:96:a2:92:aa:02:c6:a5:2c:67:0a:8f:d3:2d:8c:e7:
         85:b8:4d:d3:df:7d:d9:b9:41:21:9d:42:1f:a1:e6:72:41:87:
         72:c6:4c:8c:be:2c:02:ff:be:b6:05:54:fa:e7:84:c5:de:1f:
         6f:7a:3e:b7:84:57:b0:9f:8f:52:8f:73:f1:8c:d8:bd:73:24:
         35:f6:2d:83:a5:9a:49:ad:2b:23:ff:5f:62:d0:d5:b2:03:26:
         c1:a1:55:9d:64:7b:52:0f:38:87:3b:20:cb:53:ba:70:f3:02:
         9d:f2:5f:c2:9b:40:6d:39:2a:77:70:a2:ff:bc:d9:0a:af:5f:
         d2:a9:66:61
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE2msBVhtxdHBNY7QkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
NTUwNzk2YzEtYWNiZS00MjU1LWI3ZWEtNjE2MzkzYjY2YzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhewurL+ZHdd8lYWTaSL6ah4S9QLSipPsG4RH
dAKCWXLCb5huGJr6AGbo+DIBuAnRkV9Z1QoKsKXAsAzA8W9wgzp4M6VQptxVZq02
4PQ1Syg2kAY8O56gkcrl0bjn9dErtS5RmRbfHtQYRNtIGpOKC9XDxLv+uMYm3DhZ
bYVMuIj8rcuRGSeGdUjXGGBmvjUjSy+DtXGsnW+mXiLz6wS5r/mielQYteeFC1Ph
jZfn6XljZZ3637GdM4rFNPw3QG8Ke7WcM1NZoPxLkBC/Hh70LNuWrgpIQo/JdlI7
15EbNaelLuDHeZTYyXpWWi5BR9lZM0HEVxXnwWAUg2YlC55fLQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFFP+5vFjwg1FRwTQnq7wirj4kvhIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMDg5ZTdkODItMDBlNy0z
N2Y3LWFjOTMtOWM0YWI0YzFmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALTsWAwQA
LTsdAwQArGbPAwQArGbbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADpLpzKPC/pD6ChEqHkLJouatFfizGx1
D4O9FV49mvIExCmMdry8bWlGBQeAkSvJAGoI6I9kcUH5/xcbtKOmbtg7cwkCV8M3
NGF+lBynIHRLkbs90N8HEE/8h4CQphX5Q52gpTYMsRAGWZGn56fZEs1Hnyl0nkfN
F6zZbK+463qRIZaikqoCxqUsZwqP0y2M54W4TdPffdm5QSGdQh+h5nJBh3LGTIy+
LAL/vrYFVPrnhMXeH296PreEV7Cfj1KPc/GM2L1zJDX2LYOlmkmtKyP/X2LQ1bID
JsGhVZ1ke1IPOIc7IMtTunDzAp3yX8KbQG05Kndwov+82QqvX9KpZmE=
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:34 2026 by rpki-client