Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
File:                     1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa (raw, json)
Hash identifier:          +a3f4Qb3dupsb5DUZFPSbSD76YUx6FooH/rrfydVUPY=
Subject key identifier:   FE:74:C9:3B:C2:DC:CC:BE:3B:FB:63:BE:14:4D:79:99:CD:25:F2:42
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584D8EF5653C001F73BE4AE9B74A
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     3257
IP address blocks:        45.41.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:65:3c:00:1f:73:be:4a:e9:b7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ca880ad2-2501-4811-896b-8fc1602c741c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:61:ab:79:c6:f5:be:7f:6d:27:d6:73:ff:
                    89:3d:c7:56:5d:3b:55:dd:7b:89:5d:a5:48:36:93:
                    04:f8:d7:35:6c:f8:41:6a:b5:c6:e4:1e:e3:15:68:
                    52:bf:9a:94:0a:95:fe:f2:5d:38:20:06:6a:58:8d:
                    30:d3:fe:ca:65:4b:0c:a9:ac:30:d3:97:26:0b:0d:
                    09:e7:4f:c9:d2:67:51:71:3b:f4:9c:e1:a6:d9:2c:
                    2c:01:0e:8e:a2:d8:68:10:43:02:1f:02:3c:c6:41:
                    d8:34:de:39:b9:c7:8e:d8:33:ee:e3:bf:e4:e6:81:
                    89:fa:00:55:30:f4:71:8f:ef:67:f1:9b:8e:fd:5b:
                    54:36:ec:07:b3:dc:5c:6a:13:23:8c:d9:43:3a:27:
                    7d:69:0d:9f:d9:b0:3e:ed:82:b5:ea:c7:34:8d:78:
                    f9:ec:85:c3:8c:69:3b:a5:d4:94:9e:3e:6a:89:9b:
                    df:c4:1b:56:9a:2b:eb:03:fc:78:08:84:58:31:00:
                    ac:64:8a:30:b6:97:74:cd:d4:0b:71:7f:06:b3:af:
                    ce:e5:86:f8:1f:cf:9b:1f:0f:4a:35:a6:13:66:28:
                    f8:dd:33:da:21:f5:a0:34:48:f8:79:41:43:ad:c5:
                    96:94:a3:15:83:5e:ae:df:c6:6e:7b:a6:b3:84:f7:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:C9:3B:C2:DC:CC:BE:3B:FB:63:BE:14:4D:79:99:CD:25:F2:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/1acbbbc2-02a2-3ea0-972d-85742d4ba60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:e0:fc:1d:40:79:8c:28:d9:7f:5a:44:ff:8c:7c:23:86:
         39:b6:b2:1e:cc:f1:a0:ce:e3:1c:fb:84:96:b2:6e:7e:9e:22:
         e9:bc:6a:18:f5:26:8e:58:57:8b:6f:cf:d2:70:c1:c3:78:46:
         29:cb:aa:bd:05:da:0e:dc:a5:20:d5:35:3b:2e:d2:2a:71:c1:
         2c:f7:81:d9:c5:87:36:d1:40:8a:a5:09:56:77:b5:32:ed:27:
         ea:b7:f0:46:13:75:a5:0b:e8:a9:a8:be:ea:66:96:15:61:64:
         fd:08:71:da:dc:2a:25:1e:b4:cd:e8:65:78:be:0d:01:a8:7d:
         28:80:b6:a9:74:04:72:a3:50:7f:94:3d:12:96:eb:9b:12:74:
         b3:bc:08:40:97:30:87:c6:ba:e6:9a:86:2a:37:b2:37:0d:c1:
         b8:51:fc:7a:84:93:2e:9f:1f:28:37:d4:a9:66:ea:03:d2:10:
         65:dc:02:f7:aa:fb:34:b7:ef:bc:11:3e:98:8e:f5:42:81:55:
         4d:d3:19:89:81:13:a3:86:e4:06:3c:58:02:f8:b6:ce:81:3e:
         6b:64:04:8d:1d:7f:fb:8f:ad:f1:33:c3:b4:c4:a5:04:bd:53:
         bb:fe:d6:25:45:f0:55:8d:6c:40:d6:79:0e:0c:98:2c:c6:04:
         dd:34:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:14 2026 by rpki-client