Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa
File:                     115793bc-f645-37af-94e4-a1a201e70b3f.roa (raw, json)
Hash identifier:          vwz1hVkOBVaIgd9t99UNikEFB6yhu1+GSs1tR5SSom8=
Subject key identifier:   4D:5B:D4:B5:26:03:B1:58:3F:AA:E4:83:23:E3:51:A9:15:D2:8D:4D
Certificate issuer:       /CN=3c7a440d-8b85-4e4f-b56b-364d9e165c0b
Certificate serial:       010D0C9F4328584D300A5E79AAD503A31A00EE80
Authority key identifier: 0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397423
IP address blocks:        45.42.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5e:79:aa:d5:03:a3:1a:00:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7a440d-8b85-4e4f-b56b-364d9e165c0b
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=faecb04d-adf9-4db6-b8ba-116e571cb493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:b4:ba:75:ff:ae:d4:71:d2:e7:b5:fd:c4:
                    68:52:db:ef:e4:ee:d3:80:22:3b:68:35:da:04:1f:
                    08:ce:da:f4:04:93:f8:68:47:89:94:95:54:4a:b1:
                    3d:0a:e6:94:ac:7a:2a:ba:f7:18:c7:fe:7f:dd:c6:
                    60:28:d1:ea:4f:07:95:9a:0e:2d:56:9f:55:fa:35:
                    d4:12:45:ac:d0:01:a0:aa:40:ce:2d:97:54:92:b0:
                    00:c2:aa:af:f4:a9:01:bf:17:98:be:9a:db:e4:e6:
                    34:22:80:bf:d5:9e:bb:f6:c9:84:65:89:40:aa:47:
                    d9:ff:dc:db:2d:bc:a0:84:38:61:16:92:09:f7:9e:
                    40:77:7d:87:ea:e9:f5:7c:c3:88:f7:c8:bd:07:0b:
                    0c:9a:cd:8d:f4:bc:0b:53:d4:7c:ca:6d:e0:a6:1b:
                    cd:36:e3:8a:b5:1e:94:33:f1:be:28:3e:a0:b7:d8:
                    89:fb:26:99:2a:29:75:66:06:f3:ab:88:09:9b:9d:
                    bb:f0:45:f1:86:c6:38:73:f4:f3:d2:00:7d:1a:b2:
                    50:0d:b5:13:75:1f:0c:bf:05:f8:1c:1a:5f:a0:52:
                    89:f3:cb:4b:23:84:98:4c:93:e0:dd:75:28:8b:d3:
                    36:76:71:31:3c:8b:50:50:fa:9c:21:4e:a5:6c:1e:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:D4:B5:26:03:B1:58:3F:AA:E4:83:23:E3:51:A9:15:D2:8D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/115793bc-f645-37af-94e4-a1a201e70b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.crl

            X509v3 Authority Key Identifier:
                keyid:0B:29:75:95:EE:B5:03:C7:6B:C3:2F:0B:14:10:66:91:99:25:43:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3c7a440d-8b85-4e4f-b56b-364d9e165c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6e:5c:1c:81:dc:39:0e:4e:c7:eb:41:2d:9a:20:6f:11:45:
         31:13:ce:e8:d4:2f:5b:a7:89:68:fd:18:4d:9e:19:0e:c0:02:
         d8:9b:cd:1f:fa:66:f1:bc:38:43:09:86:60:7b:b7:f1:0c:6b:
         c0:cb:b8:6b:c4:55:51:42:e1:10:41:77:b1:d7:cb:28:24:6a:
         89:35:af:7d:be:6b:08:98:6d:61:07:d0:5d:2d:05:4a:a1:a2:
         63:a3:8d:25:19:0b:50:ef:f3:43:3b:82:c2:e1:cc:43:42:6a:
         4e:1a:e0:9a:29:d0:4a:8e:3b:72:11:fa:97:a9:c0:7a:64:5b:
         0c:4f:d5:89:ca:56:78:95:73:42:31:96:c6:83:43:85:17:53:
         82:9b:38:6d:27:8c:69:11:7f:8a:4f:ba:46:50:63:c4:a5:21:
         ea:c1:5a:6b:e6:7c:58:bc:ea:3c:38:53:e8:53:6d:2e:7e:77:
         ad:9f:8a:21:1a:54:99:1a:ba:58:ff:13:5f:89:3f:46:f8:1c:
         5d:27:3b:34:e0:d8:3e:12:73:35:94:8b:ce:7a:3b:76:72:d4:
         7f:f5:a8:94:bd:d4:16:d2:79:b4:6e:98:ef:67:61:70:8a:13:
         ec:9a:a3:c9:8a:90:83:f2:03:01:15:41:ee:f5:1d:35:06:10:
         66:70:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:20 2026 by rpki-client