Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/1959ad18-6e74-33ab-9097-89e88d59af96.roa
File:                     1959ad18-6e74-33ab-9097-89e88d59af96.roa (raw, json)
Hash identifier:          D0VkOAmcA6X16TX9AaAlqlly1uppZob/7wrfjRnW/q8=
Subject key identifier:   D4:05:DC:A2:51:D0:9B:DD:03:74:0B:1F:CF:7B:24:4D:F9:F2:C3:EC
Certificate issuer:       /CN=45a751fb-9f4f-4039-a72a-ba87bf7a0bbe
Certificate serial:       010D0C9F4328584DBD05947412D1FC9258318940
Authority key identifier: 38:6B:86:1A:A3:9A:AE:6C:92:7B:15:76:DF:06:AE:02:FF:75:42:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/1959ad18-6e74-33ab-9097-89e88d59af96.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     25787
IP address blocks:        142.249.140.0/22 maxlen: 24
                          162.217.20.0/22 maxlen: 24
                          205.137.252.0/22 maxlen: 24
                          207.90.216.0/22 maxlen: 24
                          2606:1640::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:94:74:12:d1:fc:92:58:31:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a751fb-9f4f-4039-a72a-ba87bf7a0bbe
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=7999a3fb-b957-4342-9ca9-95a29e8b6b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:46:54:08:88:8c:be:0b:27:78:aa:b8:da:
                    40:1d:06:d8:12:e8:58:ee:d0:92:7f:7f:76:b0:a1:
                    10:fb:18:16:22:62:e6:a0:86:db:3d:a8:96:b5:55:
                    fa:bd:55:44:67:93:da:b7:a1:d8:c6:76:14:51:b8:
                    77:45:4b:39:a5:e1:ff:7f:2c:db:11:58:5c:68:65:
                    da:af:75:14:e5:2f:f7:7d:2e:26:f4:21:66:47:94:
                    bb:23:66:77:d7:0b:b0:df:6c:91:56:17:7b:07:d2:
                    f5:1b:35:8c:c1:9a:9c:f8:76:c0:01:96:2f:d1:dc:
                    9f:8b:9a:8c:6b:a6:e9:d3:e9:05:0f:7e:b4:1f:dd:
                    ff:a7:a2:d1:6f:af:76:cc:cb:ae:88:59:2d:05:f4:
                    bc:d2:a5:04:c6:a1:52:9b:20:14:4c:34:fe:e2:8b:
                    bb:c6:48:57:32:df:8e:4d:08:a0:d5:99:4a:36:ea:
                    71:a9:59:b0:c2:ff:5f:7b:8a:26:31:63:fe:d2:b1:
                    ef:05:93:49:eb:9a:9f:b3:28:c3:b7:ef:1e:4e:15:
                    d6:f0:51:ad:10:5a:99:70:06:e5:55:7b:77:0e:b2:
                    fd:b2:7c:5b:97:63:b7:9f:56:b4:2b:5b:d9:95:90:
                    00:a4:2a:a6:0e:d0:44:6f:f2:8f:82:68:a7:5e:8b:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:DC:A2:51:D0:9B:DD:03:74:0B:1F:CF:7B:24:4D:F9:F2:C3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/1959ad18-6e74-33ab-9097-89e88d59af96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.crl

            X509v3 Authority Key Identifier:
                keyid:38:6B:86:1A:A3:9A:AE:6C:92:7B:15:76:DF:06:AE:02:FF:75:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45a751fb-9f4f-4039-a72a-ba87bf7a0bbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.140.0/22
                  162.217.20.0/22
                  205.137.252.0/22
                  207.90.216.0/22
                IPv6:
                  2606:1640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:8c:29:a9:23:26:cd:81:2e:ce:b7:3c:f7:bf:84:b7:cf:
         89:85:a6:0a:a3:4e:05:b0:1a:72:fa:98:6e:d9:bb:8b:51:5c:
         e9:2d:f7:da:38:fc:c3:9a:f0:f4:40:ee:f9:c2:2c:86:bb:f2:
         e3:c8:e8:6b:1d:78:a2:18:06:d8:47:a3:d9:5a:bf:13:bb:e4:
         05:b6:0c:62:af:6d:f5:e8:d1:e0:1f:76:90:7e:0c:37:48:1a:
         82:ed:ff:95:11:e7:b1:4b:9a:98:e1:01:c9:30:d3:6a:10:49:
         78:0e:ab:e4:8d:db:9a:79:a3:8b:c8:b4:be:ad:29:88:85:48:
         07:45:e4:a4:14:fc:2b:95:c4:2d:fe:60:ac:c8:12:b5:d9:b1:
         72:e0:a9:24:ea:87:88:3a:b3:a2:40:4e:97:a8:34:02:02:b5:
         db:32:c2:63:df:d2:3f:e0:f4:9b:cb:88:a1:bc:2a:5d:89:e2:
         2d:c5:c9:6b:00:a1:04:8b:d0:79:b9:86:7a:20:19:bc:ea:05:
         82:0d:3e:2b:8c:17:d5:7e:e8:76:10:1c:1c:59:22:3e:89:5b:
         39:c5:11:61:77:ee:5c:4c:4e:59:61:1c:be:9d:10:74:71:ff:
         b8:54:60:b7:f9:82:98:c9:7c:d1:42:d6:34:21:d6:6a:02:ce:
         61:c3:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:26 2026 by rpki-client