Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa
File:                     1542f51d-2157-31f8-91cd-a013c591d66f.roa (raw, json)
Hash identifier:          VrYNmw+gr1I5vfEA7VQqpsPLs355CHnj84o7onFCkwY=
Subject key identifier:   22:99:65:48:6F:C5:F8:B1:BA:43:52:10:C5:33:86:D6:B0:E1:9C:CC
Certificate issuer:       /CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
Certificate serial:       010D0C9F4328584F4976DC13BBAC00C3132C0700
Authority key identifier: 03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26658
IP address blocks:        45.42.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:dc:13:bb:ac:00:c3:13:2c:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a3024499-cad1-4ffb-b960-922f68d6d0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:3a:2f:2a:a2:c6:ca:4c:61:3c:e5:31:25:
                    cc:8c:62:85:1a:2a:a4:b5:0a:48:2f:0b:2e:b8:63:
                    45:b3:94:0b:55:c7:b6:ff:4a:04:7a:ff:72:16:13:
                    f0:eb:f9:85:c7:a9:e6:f2:8c:e0:58:e8:96:ce:e9:
                    a0:95:3e:95:07:db:09:65:df:d4:21:b5:31:34:76:
                    69:84:d1:05:9a:6e:d4:54:b6:49:00:af:f8:d6:70:
                    99:88:97:e4:1e:a3:e5:d0:c3:5e:33:4e:d2:44:36:
                    13:73:21:31:2d:f2:8f:5c:67:2e:11:ce:39:1b:ec:
                    9a:90:a8:23:9a:b6:99:25:3f:f8:6c:1c:c7:03:0d:
                    79:a4:d0:db:8d:2f:ea:a7:a2:c0:4f:e9:69:32:43:
                    cd:ab:9a:9a:99:c5:3d:9f:ce:10:30:cb:06:07:f7:
                    ee:f6:f1:cb:4e:8e:b3:28:e8:3b:c1:b3:24:b1:d1:
                    2e:03:b9:1a:d1:93:61:7a:22:46:32:ca:c0:32:3d:
                    35:2a:35:de:12:8c:ec:1c:d9:71:ea:c1:cb:ec:cf:
                    65:52:cb:e8:d9:27:bf:f1:bf:dd:76:44:da:4c:4a:
                    3a:d9:96:f4:42:16:a5:ed:3e:47:f8:45:d0:74:7c:
                    f1:5a:53:5c:75:9d:d9:32:3a:c1:89:b3:23:20:f9:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:65:48:6F:C5:F8:B1:BA:43:52:10:C5:33:86:D6:B0:E1:9C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/1542f51d-2157-31f8-91cd-a013c591d66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl

            X509v3 Authority Key Identifier:
                keyid:03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:34:45:95:4e:6b:89:cf:27:f2:03:9d:d2:52:6e:de:ac:ed:
         86:4b:98:81:2f:6d:34:df:ef:33:76:9f:f9:fa:83:18:24:15:
         b4:45:43:df:d0:5b:2c:f4:dc:34:7b:01:37:06:fa:29:06:55:
         5f:eb:c8:50:91:83:ed:10:39:30:ac:f7:84:bf:75:03:a4:e8:
         37:9d:20:de:e1:91:1f:65:13:6e:f8:a3:13:a6:bc:77:a6:78:
         e0:f9:09:82:f6:37:0d:23:86:d7:44:d5:e8:cc:22:b2:e4:d5:
         43:ad:42:68:e5:40:f5:c5:d4:54:f3:b8:f2:e5:1d:e0:c9:7d:
         e1:d3:8b:e5:21:5c:56:4b:ff:ca:a0:ed:de:f2:99:78:40:bc:
         d0:dc:68:81:25:0f:b7:92:b4:1e:c3:72:be:de:00:60:3f:2c:
         a2:62:f0:24:3d:98:3d:6f:b5:5d:67:40:42:f6:4f:c4:26:76:
         07:00:47:57:e2:40:49:e2:b6:ba:c1:90:04:9c:c7:43:b7:7b:
         e8:8b:e4:61:53:51:fb:e1:01:89:e9:7d:a3:47:91:03:fd:8a:
         e2:d0:05:73:f7:11:1f:50:cc:70:e2:79:ec:8b:73:7a:d1:c2:
         ce:60:cd:00:90:e4:7a:ea:71:93:04:d3:16:99:3f:96:ce:79:
         39:27:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:30:54 2026 by rpki-client