Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4fb852f7-0e0f-329d-990f-caa30bb3200b.roa
File:                     4fb852f7-0e0f-329d-990f-caa30bb3200b.roa (raw, json)
Hash identifier:          O31d7RC4tgm1gcPk6ESAW6gfS7sNB2OlZvyCygBEmlY=
Subject key identifier:   D4:F0:81:0D:36:9D:0A:0E:CA:79:6C:DB:A4:96:FB:73:2F:2A:D6:AC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4988909DB777F1E54DC87700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4fb852f7-0e0f-329d-990f-caa30bb3200b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        45.40.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:90:9d:b7:77:f1:e5:4d:c8:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b37f42f3-fbc9-4aa8-b05e-a26bbf8aec38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:54:f8:79:e9:a0:6c:0f:9d:6e:a3:d1:68:
                    a4:8c:ce:61:ae:61:b6:66:53:84:f1:89:99:58:a2:
                    62:1b:0b:ed:e7:c1:c2:ae:e1:24:18:a5:0c:ad:3c:
                    99:4b:89:6e:3a:fd:ec:31:be:4a:52:a0:80:d4:00:
                    2d:54:38:d7:09:c1:fd:4a:33:c4:85:33:d5:93:85:
                    f0:30:4e:2f:fd:a8:c4:c7:d2:95:a1:04:d5:53:34:
                    05:c2:0c:6f:07:35:a0:33:88:39:b4:aa:a2:12:89:
                    c1:4e:2b:c1:a9:85:a6:f6:08:89:aa:5c:6d:00:80:
                    92:81:58:f8:e9:3c:0c:b6:17:0b:a8:ac:02:64:74:
                    94:ea:ee:20:f9:c6:8a:8c:db:43:e0:46:b4:8f:49:
                    e7:9e:dd:e6:57:f8:99:d2:f8:e1:2b:be:df:81:bc:
                    10:59:2d:f1:db:ba:a4:47:be:92:3e:d6:4a:c9:87:
                    76:b1:3f:c8:6a:93:d2:b2:f7:f0:4d:00:c7:21:41:
                    96:e9:5e:ea:be:c1:3d:d4:26:d6:6a:0b:5e:39:3d:
                    43:aa:41:96:21:2a:a8:eb:6b:4e:83:85:7a:01:53:
                    6a:e0:60:c1:ca:8a:cd:3d:38:f0:af:83:b5:31:7c:
                    74:69:74:64:09:58:4e:6b:2d:9f:ac:c4:0c:5b:03:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:81:0D:36:9D:0A:0E:CA:79:6C:DB:A4:96:FB:73:2F:2A:D6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4fb852f7-0e0f-329d-990f-caa30bb3200b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:d1:e9:cf:f6:cb:2d:54:60:41:0d:ac:68:4f:14:1c:7e:
         6d:6e:94:4d:3c:a6:e2:2b:2c:d6:8a:00:16:85:0b:d9:7f:43:
         d4:35:8c:dc:58:d2:0a:69:72:e6:03:b0:aa:2e:83:c8:90:5a:
         74:1e:7e:73:6b:63:b9:a0:8e:6b:63:ca:71:75:45:59:f8:db:
         2f:58:17:1e:50:1e:fe:38:6a:2a:ca:f7:8f:89:43:1a:95:90:
         1d:99:14:cb:3b:ec:64:51:84:8f:fc:1e:ab:39:dd:7b:c9:b5:
         fb:e6:c8:01:d5:26:97:ce:51:b1:e3:c3:4f:01:0c:a3:c7:a0:
         85:d3:34:08:01:06:6e:66:bb:d1:73:35:53:a3:d2:61:25:20:
         af:f9:d3:31:d5:d3:2b:f1:3f:f2:99:26:15:5a:c0:5b:c3:4e:
         41:62:04:e4:cc:4d:18:64:71:57:76:7b:79:c4:97:1b:f4:74:
         2d:2c:69:34:99:0a:e2:f1:24:14:f9:23:cc:a2:c6:1f:46:36:
         7f:55:58:80:88:bb:f6:9d:69:02:94:66:96:83:9d:3a:db:7f:
         73:c7:14:45:69:3f:69:30:74:3d:c8:26:d2:8d:95:cd:a2:2c:
         d6:67:88:e0:58:7e:4c:05:1c:96:2f:1a:ce:cf:c0:a4:d7:98:
         8e:dc:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:09:59 2026 by rpki-client