Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa
File:                     3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa (raw, json)
Hash identifier:          4jeStyiBn27d054NBqrUG1qEDHoO0Mr2CNpZp2TZDjk=
Subject key identifier:   D4:F8:F9:9F:D6:05:20:7D:6B:F7:A2:6E:52:E8:04:38:7E:01:3D:89
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F4973B05A4EADA6FC26946480
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53667
IP address blocks:        45.61.184.0/22 maxlen: 24
                          45.61.188.0/24 maxlen: 24
                          45.61.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b0:5a:4e:ad:a6:fc:26:94:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9d5cd818-df84-43ba-8ba7-9d026f00a167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:f6:c3:a8:d3:37:7e:76:74:29:86:9c:76:
                    55:05:56:8b:9a:23:c3:e6:f1:5c:0b:b9:6c:7b:01:
                    00:38:df:e9:cf:e6:2d:1e:69:4c:72:34:6e:42:6e:
                    a2:e0:d4:85:4c:ed:3a:c7:a3:4e:2c:ca:3f:30:dd:
                    c5:ad:69:e7:5e:4b:b4:dd:ae:7e:11:95:96:f2:4b:
                    e1:73:57:08:20:27:14:e8:c1:da:05:87:f4:96:ab:
                    30:c1:d2:44:35:53:44:f1:dd:00:8b:9a:a2:13:ba:
                    cf:be:fc:6c:fb:98:9b:ae:fe:e8:87:00:d8:b3:a6:
                    d7:47:8b:20:75:67:ed:2c:46:06:41:bd:78:74:98:
                    d3:76:1e:a6:a5:e7:1f:8f:81:86:f0:5b:83:8e:86:
                    06:1d:50:da:54:b6:cf:72:27:44:47:08:dc:28:2a:
                    0f:9e:34:be:5f:cf:b9:fc:7b:3d:7c:0e:54:8a:0d:
                    99:68:08:db:5d:b7:da:db:9b:9a:27:dc:9e:91:b2:
                    3b:47:05:db:34:c4:c6:37:95:87:a7:d2:7f:e3:27:
                    59:ac:d0:5f:2a:b8:56:74:53:3a:10:a4:07:c5:7b:
                    fc:c9:ac:c8:ff:6c:34:b4:80:7f:1c:4c:bb:b3:0f:
                    ee:51:90:83:13:ef:52:aa:44:22:a1:ed:53:56:5c:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:F9:9F:D6:05:20:7D:6B:F7:A2:6E:52:E8:04:38:7E:01:3D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/3fc5a483-4b3c-33da-bb25-1678712f0fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.184.0-45.61.188.255
                  45.61.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:66:97:1e:e3:c7:59:49:c8:0c:54:24:c9:8c:f5:29:cb:3b:
         e7:76:5e:92:4d:55:bc:9d:2e:d0:cc:ca:d0:68:67:4d:0f:2d:
         d2:56:17:b8:da:1e:07:39:20:ea:8a:6f:66:ac:92:bc:93:87:
         75:8e:80:7d:e7:1d:1d:78:51:9c:48:ad:a2:a0:65:09:e6:08:
         d9:59:27:49:87:55:fa:69:cc:47:5a:49:57:f5:3b:d1:86:b2:
         43:e9:aa:7c:4e:54:3a:61:74:9a:5d:cb:5b:df:2e:fd:f9:c3:
         df:3d:d2:c3:7d:5c:c6:aa:0d:68:bf:ed:53:59:af:fa:6c:12:
         ba:56:57:b7:5a:d4:6f:26:8b:6c:22:67:0b:25:87:31:42:4e:
         c0:60:57:96:69:e3:fc:a4:50:7f:5d:9d:2a:f0:8e:af:87:d2:
         bc:b7:a9:2f:58:40:5e:58:ca:9c:c8:06:65:0b:a9:be:2e:f4:
         e2:12:ef:9d:11:40:f7:09:99:76:91:b2:17:70:bc:8b:8b:d4:
         5c:28:2c:9b:38:56:34:95:93:d6:ff:8f:76:66:39:e9:e0:f2:
         82:f9:2d:23:2e:0a:9a:93:22:50:c4:78:fa:80:a4:05:e1:8a:
         6e:75:ef:42:4c:f7:75:15:69:e8:69:22:b6:93:b7:c8:d7:78:
         ad:d8:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:16:28 2026 by rpki-client