Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa
File:                     1f13042a-63a3-3fba-80a8-d5b59def998d.roa (raw, json)
Hash identifier:          MzOWxwuXlqns9h8fP/82jL8OGyIOEb0EvhVRFKWzk9w=
Subject key identifier:   28:ED:1E:39:DE:10:4E:C5:65:F9:05:4D:B7:16:A0:AF:4B:81:FF:ED
Certificate issuer:       /CN=30d537f2-f871-4f81-b20b-ae04610c521d
Certificate serial:       010D0C9F4328584D9E5011AE88A57F214B9B6B80
Authority key identifier: 0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     6079
IP address blocks:        45.41.240.0/22 maxlen: 22
                          216.146.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:11:ae:88:a5:7f:21:4b:9b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d537f2-f871-4f81-b20b-ae04610c521d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=9a8c2f9c-6fc9-463c-9e9d-e890cb7e9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:39:4d:68:55:76:e8:85:0e:91:3d:d8:c5:
                    a7:8a:58:6c:65:5a:05:7e:78:38:f1:0a:29:59:b3:
                    10:10:88:a6:9d:bd:d7:04:04:9a:fb:a0:49:8c:2c:
                    27:1b:99:ee:88:84:46:41:c0:3e:7b:a4:3a:d1:89:
                    dc:f8:07:6e:73:ca:3a:e7:76:14:ba:c8:b7:26:e4:
                    12:9a:a0:70:c4:42:83:f1:0d:9a:4f:8e:75:eb:34:
                    d5:2d:8e:23:b7:dc:63:b9:b6:89:d8:5f:a8:ac:95:
                    36:64:8c:6e:c9:d4:4c:bb:59:dc:b9:4f:69:dd:40:
                    0e:f7:1e:c5:be:cf:a0:42:ac:75:f1:57:c7:78:5b:
                    2b:97:bd:60:5f:e5:e2:b9:b3:6e:02:bc:5f:3f:4a:
                    1f:26:df:43:9c:61:2f:5b:69:c9:9d:bc:9d:b5:67:
                    74:60:6b:53:a9:bf:ad:58:07:2a:0b:a7:7d:ef:7e:
                    06:c9:eb:27:95:6b:04:bf:26:2c:c9:19:2b:33:5d:
                    51:a0:38:91:71:56:4e:3a:7a:cf:0b:31:15:8d:f9:
                    a6:58:85:57:3b:61:34:01:98:d0:08:24:58:47:78:
                    b8:c2:67:9d:6a:3e:e3:3b:a5:e1:fe:e3:2a:3c:ab:
                    57:90:f3:ae:e8:e3:d5:a2:ef:7f:f8:58:d2:7f:8b:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:ED:1E:39:DE:10:4E:C5:65:F9:05:4D:B7:16:A0:AF:4B:81:FF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/1f13042a-63a3-3fba-80a8-d5b59def998d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d/30d537f2-f871-4f81-b20b-ae04610c521d.crl

            X509v3 Authority Key Identifier:
                keyid:0E:D0:C4:A2:39:95:F6:E5:62:0A:06:CA:2B:C9:84:A2:05:E4:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/30d537f2-f871-4f81-b20b-ae04610c521d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.240.0/22
                  216.146.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:5d:a7:ac:5a:3f:9e:3d:93:cc:b7:15:27:5a:76:7d:73:
         74:5a:ce:8d:0a:02:d0:a8:aa:e8:59:d2:09:74:bc:86:01:73:
         d5:c5:4c:23:33:08:28:70:c7:42:be:a9:52:62:18:88:50:db:
         af:43:64:61:68:b8:1f:52:2a:75:13:f1:6a:83:70:fb:7c:33:
         09:e9:1a:60:24:e4:bd:7b:a4:01:00:7f:0e:2d:b6:2c:9a:3b:
         e3:ca:d5:3b:75:e0:12:d4:15:56:6a:97:76:51:60:50:08:24:
         a9:f7:fd:7c:e2:44:6e:50:5b:c0:71:14:8d:00:a2:88:9b:e1:
         cb:80:5d:22:e8:58:5c:d3:79:b0:4c:0b:07:13:f0:25:3c:7d:
         05:f3:d5:49:7f:36:54:a9:e6:88:bb:8c:a7:c5:94:a6:79:ac:
         a4:1d:c8:98:19:bc:5b:aa:af:2b:d0:59:79:99:27:46:3c:a5:
         0d:a7:20:4f:1f:03:05:6e:6b:5d:f5:dd:03:93:1a:89:3e:e4:
         ed:59:1b:49:ac:bc:99:fe:b1:95:cf:bc:f4:f1:82:87:23:c4:
         c1:51:4c:c8:3b:3a:75:c3:8c:d6:82:97:25:66:8f:1b:36:91:
         cf:d3:75:81:ca:0d:fb:cf:ce:3e:af:b8:16:9d:5f:63:2a:ec:
         03:ee:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:18 2026 by rpki-client