Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa
File:                     0bb6e42d-39c9-3771-b079-96d881d2b624.roa (raw, json)
Hash identifier:          vgiUtUp24qjdpanbSiQdrDYby26K7ElDpkjXTX0w8pM=
Subject key identifier:   FD:3F:01:6B:DD:E2:13:FA:BB:E8:27:56:AD:0E:7B:36:C0:FC:10:CB
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584D386A505F6A6B15D24E88BC78
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     5645
IP address blocks:        108.161.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:50:5f:6a:6b:15:d2:4e:88:bc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=93a6b630-d32b-4ae2-a298-fe00e7a47dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:5e:e6:79:da:d3:79:ce:b7:fc:48:dd:0f:
                    82:84:a5:37:f4:63:38:4c:ea:fd:b6:e2:42:cf:67:
                    ce:b4:b5:57:bd:de:05:32:08:7b:68:7a:46:d5:64:
                    f8:8d:a0:d1:1d:3b:9a:ff:10:48:2a:4a:08:a7:8b:
                    52:dd:7b:9f:5c:54:0e:1b:50:50:22:dd:9b:0b:4f:
                    8e:5b:a9:3f:26:7c:bc:a8:65:f9:8f:04:1e:e0:35:
                    e2:7d:b5:a2:71:1b:13:b6:c2:74:e8:28:87:f3:d5:
                    6d:7f:1e:06:2e:58:e6:fd:e4:a4:c9:99:04:8d:ab:
                    0b:d2:89:9e:bb:93:58:a8:2d:da:ad:dc:d5:42:15:
                    c6:18:67:f0:53:e4:39:f9:b9:16:4e:73:0c:b6:b8:
                    b7:b5:4c:e7:35:c3:66:07:0c:46:30:86:00:df:74:
                    66:ff:3b:c8:78:cc:65:58:d3:19:1f:17:75:0e:bc:
                    08:f8:28:46:8b:f1:b6:d8:64:d4:7b:70:ec:3f:b6:
                    2f:ee:02:a3:fd:b6:3f:2d:b9:6c:c4:af:68:21:c8:
                    1d:a5:a1:14:1a:3d:e2:02:f0:a4:c3:45:90:66:7e:
                    a9:7e:9f:2e:4a:29:99:8b:36:1f:90:88:08:90:62:
                    2c:bd:8e:70:8b:82:6c:1c:12:c5:1a:b5:50:78:5e:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:01:6B:DD:E2:13:FA:BB:E8:27:56:AD:0E:7B:36:C0:FC:10:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:b9:f4:2c:b4:04:54:5e:f0:71:dd:7c:7f:9e:ac:4d:dd:51:
         34:6c:c7:1e:fc:a4:8a:3f:b5:cb:4c:11:e0:8a:4e:54:64:9c:
         55:29:cc:ba:c2:84:cd:3d:59:1c:d0:6b:27:b5:70:ad:76:e9:
         fd:b2:d2:78:9f:45:1e:a3:5e:34:ba:7f:a0:fc:fd:ca:33:18:
         92:ce:2f:38:7a:1e:61:33:40:32:d3:b8:7a:5e:b0:16:bf:93:
         37:da:73:8d:12:61:67:30:cd:03:21:9e:1e:28:89:12:41:07:
         5f:e3:69:13:c9:b9:8f:c8:69:78:5c:bf:3a:71:a7:b4:47:c2:
         56:72:7a:22:fb:a9:49:68:55:c1:a2:0d:5a:1f:8b:f7:ff:2d:
         bb:d3:4c:03:80:54:5a:dc:66:04:7a:1f:e0:ad:30:18:11:8d:
         14:7d:d3:2f:1f:31:d4:a6:71:b1:28:96:bc:84:2c:30:a0:b7:
         3a:21:46:61:28:6a:db:d0:30:ba:84:30:bd:b2:10:cc:8e:59:
         7a:81:f7:1d:87:38:e3:8a:1b:7a:b9:68:a0:0b:31:a6:66:98:
         66:40:0d:76:d3:7d:3a:73:d2:29:ca:ed:9d:f2:01:31:df:a5:
         d5:3a:ce:96:28:70:31:48:80:f3:01:39:e7:75:98:ba:77:a4:
         89:0d:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:47 2026 by rpki-client