Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/588d6f78-9b44-3410-bff1-fb5d6f2f0ff6.roa
File:                     588d6f78-9b44-3410-bff1-fb5d6f2f0ff6.roa (raw, json)
Hash identifier:          dAmPgZlsuMyugs4ZlBAlZwp2dfRk0vQXHF68oJ7fcLk=
Subject key identifier:   B9:F9:CD:85:D7:76:97:FC:AE:FB:8D:36:4B:E1:35:59:2E:7E:3F:66
Certificate issuer:       /CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca
Certificate serial:       010D0C9F4328584F374D154708224EFCF5636E00
Authority key identifier: 57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/588d6f78-9b44-3410-bff1-fb5d6f2f0ff6.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     394325
IP address blocks:        45.41.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:15:47:08:22:4e:fc:f5:63:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=34c4eb07-f9e9-407b-8c92-5cc49e449894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:d4:64:54:17:dc:0f:5a:46:46:b9:db:10:
                    67:e9:ff:6d:ad:cc:fd:5b:c4:2f:d4:cc:68:50:0d:
                    af:d4:bf:60:03:0c:29:2f:76:6a:06:10:12:80:6a:
                    97:14:d9:ac:3c:ed:79:68:2f:eb:c4:ac:21:43:73:
                    6c:82:fd:4d:75:b6:97:98:04:c5:86:1d:53:7d:d7:
                    ff:73:6c:31:f6:59:e4:21:5c:e2:3a:cf:2f:93:b1:
                    50:f5:fa:20:78:8f:8b:27:de:d0:2d:05:7e:96:64:
                    89:24:7c:43:dc:ff:ec:9f:d0:8a:21:2d:49:2e:87:
                    d7:61:80:96:55:66:82:44:c1:0d:54:b0:81:8c:6d:
                    18:1b:58:f3:5f:54:0f:e5:26:90:7e:3d:27:c3:4e:
                    28:31:3f:08:b2:54:26:27:4f:d9:83:02:a8:4d:1c:
                    f4:af:eb:47:01:06:32:c7:07:93:0e:06:11:53:f4:
                    84:28:44:f8:62:53:94:1e:bf:9d:77:e5:95:56:ef:
                    2d:96:64:40:d0:15:c5:c3:8d:73:b1:2b:a5:1c:e4:
                    41:87:91:c9:58:5b:bd:b2:50:ea:05:53:6a:f7:b8:
                    47:67:91:3f:bb:14:63:74:18:cc:f8:c6:f7:8d:8a:
                    0c:7d:4e:5e:27:64:27:30:4d:68:51:c2:d9:7d:33:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:CD:85:D7:76:97:FC:AE:FB:8D:36:4B:E1:35:59:2E:7E:3F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/588d6f78-9b44-3410-bff1-fb5d6f2f0ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.crl

            X509v3 Authority Key Identifier:
                keyid:57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:e5:72:12:f1:ac:c6:ec:38:16:d7:40:93:18:14:6b:2f:
         99:fb:b7:6a:07:22:d6:5c:7c:a7:14:74:fd:c0:4a:21:90:dc:
         dc:56:0b:ae:9f:89:b0:39:92:f7:7a:c9:41:19:29:b5:0f:53:
         5e:ef:0f:2e:48:ef:5d:62:13:49:ea:5e:61:70:f5:aa:b7:48:
         3a:30:fb:7d:5a:74:de:fc:41:01:1e:e0:0a:38:91:3a:c4:34:
         c0:ce:d6:0b:8b:20:b8:3e:71:70:aa:6f:3f:39:5c:a6:2c:a2:
         a6:00:95:ab:3a:97:a7:ff:b0:3b:1c:2b:4f:9f:c2:de:0b:bc:
         d8:f2:2e:9b:62:60:11:49:66:4a:0a:a1:6d:50:d9:dc:23:1b:
         c8:3a:41:64:c6:3e:b4:ac:2b:f6:dd:95:d6:6b:86:0a:8e:88:
         9b:4c:86:6d:e1:ef:f9:81:20:24:76:09:df:4f:20:6e:13:a4:
         28:8c:0b:a6:2e:4b:52:8a:01:82:48:34:36:a6:01:72:d4:68:
         7b:fc:f3:dd:c4:3e:a1:d7:c8:25:b9:18:c3:26:6c:d5:e7:fa:
         32:f6:e2:79:81:e9:ae:6b:1c:2b:07:7f:b6:40:89:52:5e:37:
         7a:03:68:19:08:56:ed:20:43:71:fb:92:e5:6d:6e:2d:df:80:
         13:0c:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:57 2026 by rpki-client