Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/45768e5d-b7fb-3b1f-b09a-8d95821a2427.roa
File:                     45768e5d-b7fb-3b1f-b09a-8d95821a2427.roa (raw, json)
Hash identifier:          oLB55OXK6MveNrOSl8WImgwxMMBBBD9VjXAJ1jCK9Dk=
Subject key identifier:   30:83:98:9C:82:B1:C2:4D:83:27:AD:CC:77:1E:97:F4:7D:9B:B5:80
Certificate issuer:       /CN=4ab46853-eb00-4588-9764-5162930da6b1
Certificate serial:       010D0C9F4328584F427814FC500887A8A8CEC640
Authority key identifier: 4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/45768e5d-b7fb-3b1f-b09a-8d95821a2427.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     7377
IP address blocks:        169.228.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:14:fc:50:08:87:a8:a8:ce:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab46853-eb00-4588-9764-5162930da6b1
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ae56869c-8c0a-43e9-9879-dfeab3a0f18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:33:54:58:65:62:b4:99:38:47:d3:e5:1c:
                    72:30:d9:08:2c:6b:af:b8:39:b2:8c:ac:b9:b6:2a:
                    cc:3a:78:f9:34:5d:78:dd:87:b1:e1:b7:ba:24:ff:
                    92:07:b6:49:85:4a:71:75:33:6d:32:35:a2:ae:2f:
                    37:56:6d:64:44:ee:6e:6a:c2:7b:34:43:e8:26:ef:
                    ac:40:fa:ce:b7:fc:af:a3:0f:ce:6b:c2:3f:de:bb:
                    3f:03:e0:a0:5c:e6:ec:a9:cc:09:99:ed:6d:81:52:
                    ef:be:92:f7:a8:06:a1:fe:0e:3d:1e:e6:31:09:4e:
                    3a:85:57:27:38:e2:af:45:e9:64:ff:ec:f9:ef:e7:
                    84:d3:21:bf:9b:96:fd:15:c9:a6:20:07:08:6c:dd:
                    0d:be:67:4a:1e:51:c1:9c:ad:15:95:a0:31:70:c8:
                    79:b7:c0:9d:09:40:c5:42:1b:f8:b9:e3:ff:9a:17:
                    1b:61:f7:8e:f0:b0:4b:cd:4a:28:0c:b5:9b:e3:31:
                    40:0d:7b:1b:66:e1:78:c7:5e:5e:d2:a3:59:d1:0e:
                    8a:a5:ae:c9:59:42:6a:5c:5f:8b:5d:23:10:7d:e9:
                    0b:36:b5:a0:14:04:c8:a5:c6:db:ca:c1:b9:24:3e:
                    fb:de:8e:67:25:22:f3:2e:2b:54:41:51:62:6a:a1:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:98:9C:82:B1:C2:4D:83:27:AD:CC:77:1E:97:F4:7D:9B:B5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/45768e5d-b7fb-3b1f-b09a-8d95821a2427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl

            X509v3 Authority Key Identifier:
                keyid:4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.228.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:46:15:25:64:47:81:92:71:f2:55:55:af:ac:f8:ba:91:
         5a:06:ca:23:f2:69:ef:61:9b:60:62:21:e5:f8:9c:eb:53:a6:
         51:67:20:20:93:f9:84:d2:c6:35:30:4a:85:00:8f:6e:68:94:
         44:04:a4:eb:53:9a:6b:56:63:4d:ba:b2:c1:6a:c3:12:34:bc:
         27:34:47:bc:db:97:f4:d0:db:fd:ab:d8:76:c6:52:dd:99:12:
         b7:da:c3:fb:dd:a0:4e:b0:e4:ec:1a:3d:ff:12:92:c1:7a:2a:
         af:7d:a2:e4:17:fa:e8:82:87:63:ef:f1:2e:81:c5:34:bb:aa:
         5d:16:9b:ca:ae:21:e2:96:0c:73:dd:bd:43:d9:1e:86:ae:4c:
         34:82:b4:a4:3c:ba:6a:cb:36:d7:b5:e2:db:43:de:c9:43:df:
         eb:f9:1d:35:19:b9:8e:c0:83:f2:f0:27:d9:56:ea:a4:a8:c6:
         a6:ca:71:4a:4b:2e:4e:f1:30:1c:5b:a7:27:4f:90:cb:cd:3a:
         00:dd:64:71:d3:6b:bb:83:4c:0c:bc:fe:15:4e:ef:86:c6:0f:
         e5:3a:17:f5:66:dd:be:3a:2f:80:a7:f2:83:fa:5b:79:45:98:
         a4:b1:46:d6:e4:45:41:20:80:bf:ff:3c:0e:48:97:5c:4d:31:
         0b:02:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:46:48 2026 by rpki-client