Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa
File:                     a5f96039-3bf6-3bd6-9754-bdebf9942236.roa (raw, json)
Hash identifier:          QRhq+wNfpN/Ro3aJwDu+psWF/sGhNXIBvUL+ivE7m40=
Subject key identifier:   74:2C:D9:FE:77:D4:CD:57:16:19:8E:8D:B1:DD:B0:E2:FD:8B:13:FB
Certificate issuer:       /CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
Certificate serial:       010D0C9F4328584E7634CEF1696F7B8531725D40
Authority key identifier: 07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399135
IP address blocks:        45.42.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:ce:f1:69:6f:7b:85:31:72:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=e2497148-a8f8-4f34-adcf-9f5b6465728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:f6:d5:18:f3:42:e9:d5:92:de:c5:d8:ff:
                    bd:55:6b:a4:28:05:67:7e:36:f0:85:76:6b:1e:07:
                    67:a6:7d:53:fa:a2:61:e1:24:a1:73:bd:64:37:d2:
                    94:57:4b:df:50:69:87:0e:11:e2:41:25:36:fd:6b:
                    05:69:38:9d:eb:9c:b5:23:04:e5:c1:eb:88:ba:b4:
                    d5:97:b5:48:ad:ac:42:88:f7:d8:83:39:33:c5:82:
                    9f:11:f6:8e:7f:55:f6:29:31:83:f5:62:44:41:5a:
                    09:8a:f5:69:9b:52:71:67:30:47:65:81:3d:f1:f2:
                    99:61:a3:26:ca:f5:73:5a:9d:57:a8:ef:d8:80:40:
                    74:16:95:46:94:c3:7d:64:1f:7c:0b:26:96:48:41:
                    56:f2:75:d8:02:fa:1a:94:85:77:31:ad:f6:1a:8a:
                    d5:8e:0b:80:d6:2c:7c:45:f1:11:01:a5:f2:e3:b8:
                    88:62:5e:b9:76:c7:4e:8a:7e:c8:b1:5c:45:83:85:
                    f5:9b:20:7e:ce:e1:83:ac:23:7e:9f:f1:bd:92:4a:
                    55:8e:21:b8:74:a6:88:ff:24:0b:2f:cf:91:1d:22:
                    11:8f:69:6c:c3:ed:ec:a5:2b:ba:c5:d1:ae:2c:3f:
                    bf:ff:e3:3e:e5:cc:ff:81:36:5b:ea:2f:0e:09:0d:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2C:D9:FE:77:D4:CD:57:16:19:8E:8D:B1:DD:B0:E2:FD:8B:13:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/a5f96039-3bf6-3bd6-9754-bdebf9942236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.crl

            X509v3 Authority Key Identifier:
                keyid:07:C5:C9:90:64:E9:87:65:CD:5C:91:C6:D0:5D:61:35:4F:69:23:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5f7e789f-ed4b-4ca1-a93b-6f57c7764aa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:94:e2:54:13:67:8f:fb:74:cb:e6:c0:36:88:8c:e4:f5:
         d3:80:96:28:26:04:1a:05:d1:6e:7d:fa:61:3b:0a:08:d3:c5:
         27:ee:05:c7:92:e0:9f:e3:a7:55:ba:d9:dd:24:18:53:99:74:
         ef:e4:2c:aa:48:1a:c0:a7:49:7c:99:4b:99:33:b0:45:c3:2b:
         86:d3:7e:79:7a:fb:d1:c8:98:18:63:3a:65:87:8e:ef:be:e5:
         e5:51:61:f7:96:de:90:f2:09:52:c2:ce:ed:8e:bc:6c:e9:42:
         7a:87:6d:c1:bd:d3:3a:32:69:ef:51:17:c0:3f:cf:2a:86:7c:
         bc:45:8b:bd:a3:06:05:c4:9c:8c:c6:ee:f7:8a:bc:9e:eb:4d:
         86:eb:c8:8c:0c:64:39:d9:55:c8:82:cf:4c:37:78:22:d9:07:
         3d:0d:bf:36:5e:5c:d6:9f:7c:e5:93:1e:b9:77:ec:b4:ed:0f:
         6f:73:68:22:43:4e:55:87:9b:b0:25:29:c8:82:a0:ee:96:25:
         a6:dd:5a:b2:b2:ea:91:ea:06:25:2f:52:51:75:14:0e:ef:e6:
         19:3e:6f:1e:5b:c2:d1:61:de:64:0a:26:64:70:d3:33:a0:2e:
         1f:d9:7e:97:32:ef:41:89:66:67:fc:8f:79:b6:66:b0:32:31:
         76:2d:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:25 2026 by rpki-client