Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
File:                     bb942bf6-534f-3fae-99be-baac6d52181b.roa (raw, json)
Hash identifier:          /ijfgF70c69/ywaiYzJ5sTbEy44cG41rinnvlBLTucQ=
Subject key identifier:   E9:F3:89:2D:5D:8F:1A:0E:30:C6:90:E8:15:C7:F8:F5:70:9C:C6:4C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4974A86660B1B25131EF5640
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        45.40.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a8:66:60:b1:b2:51:31:ef:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e513f9a1-9771-46ec-85b7-79f182a9328f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:68:ca:3f:ae:08:50:a6:8c:da:4c:cb:19:
                    13:50:84:a5:59:60:3b:c5:c0:e6:08:88:10:99:f0:
                    85:ba:79:7b:d6:49:f7:bb:a5:10:a0:9a:ba:50:f7:
                    e1:32:6d:6a:37:20:47:31:74:a4:21:a4:0d:d0:9f:
                    e5:e0:4b:a4:df:98:dd:90:d8:8d:68:fa:68:5e:12:
                    c4:2e:f8:7e:2a:76:21:27:6b:1e:cd:d9:0a:b4:37:
                    90:aa:a5:1f:96:b8:fb:ab:ff:36:39:44:45:1b:7e:
                    b7:ef:e3:89:38:24:fa:56:0b:08:6a:cb:af:e1:2e:
                    ea:d7:b6:ef:3c:b1:87:a5:f5:f5:54:e9:36:41:d5:
                    ab:01:1f:0c:f4:bf:f7:31:0c:88:d8:b7:a0:c9:8a:
                    8b:f2:99:b0:93:ad:0e:c3:24:e4:3b:6b:3a:bc:dc:
                    b7:28:96:a9:e8:bd:70:37:f0:48:31:19:e2:d6:b0:
                    bd:0b:80:3f:1e:73:40:fd:6e:69:f3:59:03:97:36:
                    6d:62:b7:d3:ed:5f:c8:89:23:4f:86:72:41:f6:89:
                    90:14:de:02:ed:f1:ef:63:17:4e:f3:1a:c7:9a:a0:
                    0f:21:d3:2f:d0:ef:76:67:34:f3:b5:6d:5f:b5:37:
                    0a:0c:e3:4d:20:f5:a4:16:db:53:66:66:45:c9:da:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:89:2D:5D:8F:1A:0E:30:C6:90:E8:15:C7:F8:F5:70:9C:C6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb942bf6-534f-3fae-99be-baac6d52181b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:bb:09:b0:19:25:c2:cf:31:ca:d0:a4:c6:16:98:30:3e:
         90:e5:74:90:c3:bb:31:ed:00:49:14:4a:8f:37:37:ba:98:25:
         3e:df:0e:bf:d7:db:b5:c7:06:f3:df:4f:92:25:f5:9d:8b:d4:
         f1:83:2a:e0:9d:da:ba:62:7e:58:83:42:5d:fb:84:e1:25:ed:
         66:57:1f:53:ef:f2:b9:05:96:6b:dc:22:5d:9e:c6:f1:31:86:
         0e:fc:7e:02:34:4b:96:65:3e:8c:db:5c:fd:f1:1e:cc:00:af:
         11:34:61:5d:55:50:57:dc:d8:86:1e:cb:6a:aa:3e:5b:52:1f:
         31:b8:21:a8:27:20:b2:b0:e2:74:91:d1:40:56:74:f5:ce:cb:
         76:1a:4b:93:b4:11:ed:4b:19:52:68:8f:33:a0:ba:c8:48:1c:
         91:9c:fd:7a:0b:e7:06:7a:14:07:d9:6a:70:3d:4c:ec:23:f7:
         ce:22:8c:3c:6c:56:1b:02:0c:da:d0:61:8d:97:a9:4e:e3:26:
         49:bc:08:1c:85:6c:64:d7:87:71:07:c7:67:8c:ff:11:05:cb:
         80:b3:e2:ab:4e:85:25:94:ce:ac:24:a4:92:c6:d1:4f:20:fe:
         eb:26:24:16:8c:28:a0:f4:2a:7e:7e:19:d0:d3:a8:0c:41:e6:
         35:50:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:58:06 2026 by rpki-client