Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa
File:                     b406d167-2ce2-3fa8-862b-3dcec677300a.roa (raw, json)
Hash identifier:          VbNqoenwa7NuCNAani1ItRAnArphTRaYmVk7649ddlA=
Subject key identifier:   35:BE:C5:97:6A:C1:B1:FB:D9:D3:9F:F0:30:38:A0:45:17:43:06:12
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584D8EF55AB3120FE30F6FBCF800
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     53828
IP address blocks:        45.61.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5a:b3:12:0f:e3:0f:6f:bc:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=e8860b2c-0f72-4beb-99cb-30a89eb5d0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:26:b5:d7:58:3a:b3:fe:b8:d4:01:a2:f6:
                    95:7c:cb:c0:cb:3a:fd:04:31:d6:eb:aa:de:cd:34:
                    40:0f:d4:0c:b0:bc:8f:e7:98:29:5a:28:4d:a4:07:
                    cb:c4:32:bb:de:44:59:b4:8b:d1:a6:2a:00:00:a3:
                    c3:48:db:2a:64:e7:8b:40:60:7b:04:1e:10:06:55:
                    f6:af:13:88:3e:9a:cd:54:f1:2a:51:1c:b7:b9:ed:
                    b2:6d:3c:65:37:ce:0b:d7:b4:1c:ce:75:03:76:01:
                    c4:69:72:1d:9f:fc:9c:b0:b8:b0:9a:dc:23:bd:8d:
                    dc:9c:d6:1b:94:3e:bb:33:a9:fa:07:e0:89:ac:86:
                    f8:06:70:e0:2c:63:5c:19:f2:3a:a7:af:1e:ff:fb:
                    99:6a:7b:ea:fb:de:0e:69:f8:cd:1e:1f:f9:25:7d:
                    35:e4:ab:ce:5d:66:67:08:3d:de:51:c6:fe:82:f6:
                    32:39:60:b2:bd:10:a0:e2:a4:99:fc:20:dd:f1:c1:
                    55:ba:bf:1b:85:3c:89:7e:b1:31:bf:8f:d2:10:67:
                    5a:a2:92:0b:04:59:fb:79:39:06:83:41:b7:cf:c5:
                    2f:87:06:fd:c2:f1:6f:f1:64:75:93:57:fc:7a:e3:
                    ec:69:43:c2:6b:fc:bc:7e:d8:73:ce:11:2f:8b:d9:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:C5:97:6A:C1:B1:FB:D9:D3:9F:F0:30:38:A0:45:17:43:06:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/b406d167-2ce2-3fa8-862b-3dcec677300a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:27:df:53:20:23:77:17:fc:e8:c5:b8:fe:4c:9b:6e:a6:01:
         20:cf:39:e3:75:65:b7:20:7a:db:82:e6:c0:eb:5a:34:da:25:
         43:b0:da:92:90:dc:2e:c1:4f:ad:3d:69:4d:25:86:2b:06:9f:
         8f:14:5a:7e:d5:22:16:8f:53:28:66:b1:01:3f:7a:dd:6e:eb:
         52:c1:09:7f:e9:28:68:ba:40:59:23:ee:f5:e7:24:21:7a:76:
         d7:91:8b:62:03:67:45:27:03:84:b9:82:e5:ad:5c:78:38:8f:
         d9:bc:52:c3:0a:0d:d0:9c:fd:10:dd:06:4a:10:d7:61:70:07:
         0a:ef:ef:29:e6:23:d5:a2:20:cd:20:95:02:f8:76:23:3b:ef:
         5f:08:0d:08:94:e6:24:7e:82:d6:44:62:8d:47:e6:e4:31:c6:
         1c:73:af:7d:a1:79:ad:c9:b0:47:d5:45:aa:1c:e5:f8:a3:81:
         6f:be:c0:92:d1:be:19:7e:2a:05:ad:c7:2f:40:1d:56:75:e9:
         70:6d:79:9a:e7:2f:33:ad:44:12:20:46:1b:ec:ee:c1:be:d4:
         e4:30:75:89:2e:2b:df:f0:7d:97:4a:a8:c5:bb:11:6c:cb:8a:
         f0:66:ef:36:40:76:e6:0c:7a:4e:5e:26:db:48:c9:e7:f7:6d:
         21:91:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:58 2026 by rpki-client