Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa
File:                     45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa (raw, json)
Hash identifier:          CPwRlH0IBOinIcwdQxAmcLtC4dQ7oFdDmIHoYAvZMVA=
Subject key identifier:   1C:DB:77:B3:06:C6:F1:15:42:1A:53:4E:41:22:16:8D:DE:32:C2:EB
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584D300A57D5AE33ABA124867F00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     13692
IP address blocks:        209.237.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:57:d5:ae:33:ab:a1:24:86:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=ffaf83b3-a469-4824-b729-b8223d43ec1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:c8:5d:4b:4f:c8:71:38:82:47:73:93:29:
                    7b:69:26:cf:b9:70:72:7d:e6:42:75:75:2d:64:ed:
                    f3:75:39:0a:3d:b0:ed:bd:0c:31:36:eb:26:fe:b6:
                    bb:83:41:b8:02:dc:b2:ee:97:b5:c1:ea:d9:ea:7e:
                    1f:47:db:b1:cd:a7:76:eb:f4:e2:3b:58:82:15:7a:
                    85:c2:e0:ba:90:39:25:a3:8a:f0:98:f1:71:ed:64:
                    15:06:d2:ad:27:e4:5b:d9:59:af:bf:9a:7e:fc:90:
                    5c:6a:92:3f:8a:43:09:6b:1f:87:a0:24:47:a4:40:
                    ad:8f:8a:95:55:cb:e0:54:8b:81:2d:0a:c7:1f:85:
                    0c:26:e3:f2:3d:2c:e2:de:4d:b5:42:93:93:94:49:
                    70:44:c3:f3:1c:89:9c:89:d1:eb:96:e5:7d:f1:3d:
                    3f:e3:0f:b8:bb:e3:41:01:bf:09:50:48:73:56:40:
                    d2:f0:6e:97:f0:c4:15:b6:d9:a2:45:a2:d6:c0:8a:
                    2d:d0:0e:09:16:06:c6:58:b9:cc:b5:fd:70:d1:0e:
                    9b:b2:1c:9d:7a:9d:79:e3:32:db:e9:40:d5:f8:6f:
                    7c:76:45:60:c8:ea:c9:b3:aa:15:cc:69:cc:9a:e8:
                    00:fb:39:ad:5e:32:e0:7a:d6:86:ce:9d:22:7d:36:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DB:77:B3:06:C6:F1:15:42:1A:53:4E:41:22:16:8D:DE:32:C2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/45f97fe6-7abf-3e12-b4e5-215c491a44d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:9d:ef:b7:5b:99:73:d6:9d:ec:16:d6:26:4b:06:bf:59:
         35:cb:cd:c3:50:e3:39:cc:b9:d6:bb:a1:52:6e:68:c2:60:d0:
         d5:3f:32:e8:52:fa:ed:57:64:0e:b4:2d:8e:6d:5f:78:9b:52:
         10:bb:ab:56:a7:99:ff:1e:0d:91:67:48:c3:c4:15:1c:c1:23:
         af:0a:f5:cc:36:8a:66:ca:ab:1b:72:e7:34:4a:fa:47:16:79:
         d6:2a:51:28:48:a0:4a:66:28:f2:45:b8:d7:83:46:df:5e:a1:
         35:a7:84:d6:dd:42:f2:d1:5c:9f:db:d9:c3:2b:a2:ca:61:01:
         fd:00:df:1a:2d:c2:36:63:d3:c6:0b:02:a5:e2:01:e6:3b:3f:
         39:ef:70:8b:57:37:c0:a2:f6:0e:8b:ed:b1:79:27:0f:f9:85:
         cb:83:79:4d:4b:fc:52:a0:18:5e:f1:1a:fd:20:3f:1a:84:4e:
         aa:6a:3b:6d:8b:52:d2:37:7f:3c:43:c1:fe:7c:15:47:9f:6d:
         d8:d2:5b:23:b1:e2:d3:16:73:d7:e6:d5:6d:2b:b4:99:f9:98:
         3f:b6:7d:ab:0f:06:fe:39:79:19:65:dd:53:97:aa:38:ab:b4:
         0b:e9:85:77:fd:1b:4a:96:3f:a9:07:1e:a9:ac:84:b3:f6:26:
         7a:d3:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:36 2026 by rpki-client