Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa
File:                     7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa (raw, json)
Hash identifier:          tO20jz/OJulqEYYMYNzosYUbdlCuPTdRJkzwx9H6cEU=
Subject key identifier:   E6:52:E5:7E:4D:68:BC:E2:9A:A5:D6:84:26:C3:26:DB:DD:44:BC:C2
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F4328584E66D9FF4C27CF9D2CC30C0600
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396356
IP address blocks:        45.126.36.0/24 maxlen: 24
                          45.126.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:d9:ff:4c:27:cf:9d:2c:c3:0c:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=7f189e44-f902-447a-8ec7-33cc1b476b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:f8:d6:19:9a:bf:c1:83:95:ae:55:99:70:
                    fd:c7:ed:c5:37:5f:12:87:a2:fb:af:e6:84:cb:ec:
                    e8:5a:db:b9:68:2f:d7:60:26:4b:05:df:75:ec:00:
                    73:6c:a9:6f:1a:1c:74:72:99:ec:83:68:80:0a:8e:
                    1c:32:d9:5f:89:01:00:82:fc:f7:2a:42:a5:e7:47:
                    27:fc:a1:c2:70:3d:95:7e:f5:48:3b:c3:46:db:69:
                    34:be:3c:69:2f:d0:cb:cf:33:33:be:5a:17:bc:98:
                    48:80:01:87:62:7d:f7:11:1c:40:5a:ab:8b:13:8c:
                    c9:04:a6:f5:f2:a4:76:20:e0:89:c7:cc:b5:08:48:
                    b0:c1:40:9c:a5:97:36:01:2c:83:5d:5a:49:07:66:
                    cd:bb:f8:6b:9f:1c:21:1a:79:6f:07:18:2d:4c:e2:
                    0f:6b:bc:76:75:53:34:b9:ad:25:10:76:66:be:4d:
                    d6:41:3d:e0:5a:b9:8f:69:42:3b:35:b2:11:d6:f7:
                    16:69:16:dd:a9:57:f4:dd:a4:80:a2:2d:cf:4b:50:
                    ce:39:13:af:6d:a8:b2:7e:e2:fc:42:7f:5f:68:53:
                    06:fd:9e:4e:30:1d:25:54:77:2b:8f:05:bb:64:2d:
                    3a:37:ca:e6:3f:eb:bb:cf:64:64:25:d4:b8:f2:d7:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:52:E5:7E:4D:68:BC:E2:9A:A5:D6:84:26:C3:26:DB:DD:44:BC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7c609283-7a4d-3ac5-9b1d-e4c0ef6eefa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.36.0/24
                  45.126.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:eb:ab:a1:91:02:51:59:3f:46:a7:08:b9:82:f8:fd:8d:
         65:a7:f3:40:ca:93:20:f3:70:ca:70:f8:d4:da:d5:49:23:69:
         a8:2b:19:87:c3:ff:aa:64:69:3e:42:6f:42:36:42:be:b7:fb:
         06:6d:df:77:f4:42:d2:36:64:df:d0:75:80:af:cb:61:a5:df:
         76:09:d8:98:5a:74:bf:60:77:f7:e7:7a:aa:33:7c:79:95:9b:
         2d:3d:b4:23:2a:1a:11:d0:6c:61:10:e4:48:02:f7:f5:26:6b:
         1f:b5:a8:df:f1:d4:b4:d7:9b:59:b7:8e:0a:c8:28:cf:53:2c:
         82:03:c9:bb:15:d5:e8:89:61:e9:1f:19:43:f6:fe:d5:51:ea:
         a5:50:48:67:71:3f:40:ea:1d:88:29:89:ca:be:25:f0:30:8c:
         cc:d1:6b:06:86:8b:1c:d1:52:a0:fc:dd:cd:f5:f7:ca:4a:fd:
         b3:3a:a3:40:a5:f5:8d:f2:b6:0e:65:46:49:9e:08:b1:7b:30:
         4b:a7:b3:cd:a4:43:3d:c4:57:ab:56:6c:7a:99:79:54:cb:d1:
         9a:b9:50:2c:45:7f:25:e1:40:af:0d:e8:7d:65:38:35:16:28:
         41:cf:08:04:2e:6a:f2:80:59:26:24:61:e4:20:9f:7e:c8:96:
         19:34:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:25 2026 by rpki-client