Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
File:                     db335f49-33b5-3fb9-b874-7f2019b787b7.roa (raw, json)
Hash identifier:          3p+t465q3BRdOxJrdjh7b3iIVASN9KOcAM8lMdb7VNU=
Subject key identifier:   00:1A:07:95:37:48:8E:20:9C:7D:D7:9F:E9:24:E7:F8:B3:C9:78:A3
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584D91C0177BA9548085F42D5100
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     202656
IP address blocks:        209.145.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:17:7b:a9:54:80:85:f4:2d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=c05f01d4-06cd-44aa-a23a-9a2e1293b157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:c4:21:69:2d:33:80:a3:90:a1:b0:eb:54:
                    67:d8:da:a0:2a:df:95:10:67:a0:ec:79:02:73:c3:
                    c6:52:ec:06:29:44:4a:88:f4:b4:0c:60:21:2a:55:
                    63:d3:b5:06:e0:6f:2c:e3:81:77:1d:1f:fc:9d:1b:
                    83:b0:e4:80:e1:fc:e8:c0:0d:47:bd:e6:8a:a3:c3:
                    ef:19:25:1e:ad:7a:93:5b:c6:81:e2:46:6b:b2:13:
                    47:f6:ef:d3:ae:2a:65:1a:e8:da:47:40:ca:f0:1f:
                    b9:78:0c:32:09:1d:c3:bc:fb:cc:ec:ee:20:c8:33:
                    70:0f:b6:00:9f:a9:65:8a:29:5e:01:ec:d4:92:18:
                    2d:71:de:f2:86:b4:a9:ec:c9:4a:93:fb:e7:90:8c:
                    95:1d:2e:e5:58:21:35:b9:87:36:31:72:63:49:46:
                    00:58:38:a9:0a:16:e9:28:5e:07:21:30:2f:c1:4f:
                    53:44:de:1a:84:99:9a:b4:6c:2b:b2:07:39:db:2b:
                    83:30:24:60:59:99:a5:58:ed:1d:71:e2:af:ee:86:
                    a8:de:47:8b:54:6e:0e:d4:58:5f:31:6c:2f:cd:ee:
                    97:b4:1a:44:f7:e4:db:b2:ff:1a:c2:53:4b:a2:b2:
                    5c:da:42:b2:5f:04:33:eb:f4:35:61:c8:d4:20:57:
                    4d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:07:95:37:48:8E:20:9C:7D:D7:9F:E9:24:E7:F8:B3:C9:78:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/db335f49-33b5-3fb9-b874-7f2019b787b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.145.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:98:fe:18:f9:91:7d:62:3d:6a:dd:a0:21:d0:05:08:a4:5d:
         24:48:79:7b:e9:df:18:55:5b:6f:8e:64:e2:8e:69:b2:86:ff:
         c9:93:15:ec:e3:fb:e8:57:db:26:6b:ce:33:c2:25:cf:ce:94:
         46:a3:83:bd:41:15:76:37:45:c3:9e:a6:4f:c1:43:e0:4d:24:
         22:5b:21:c7:24:4a:e7:6f:b9:c8:85:ee:fd:8b:f9:68:8d:c2:
         ec:44:33:42:be:10:dc:64:7e:31:47:b2:3d:eb:8e:1c:ed:8a:
         16:ad:1b:7e:33:be:66:37:3a:4b:53:23:f2:3d:e7:95:7e:05:
         6b:4b:67:02:cc:e3:94:80:d7:7d:e4:8e:dd:79:77:40:b0:16:
         85:22:20:00:98:4e:99:be:fb:20:cf:f9:82:14:5c:42:94:57:
         1f:03:a0:11:39:31:68:7a:69:4f:b8:b4:c2:cc:03:f0:9c:b6:
         d0:2a:c9:98:c7:20:1a:67:5c:43:a1:73:ad:23:88:3e:80:c3:
         cd:bb:58:4f:d8:8f:7d:b8:f5:b5:cb:99:94:bb:81:81:81:92:
         7e:27:e9:95:b0:98:79:a6:e1:ec:2a:fb:f8:46:20:71:2c:8a:
         07:56:ce:ba:74:e1:56:a0:6c:2f:44:fc:99:3f:57:9f:ea:e7:
         57:28:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:40 2026 by rpki-client