Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9111afc2-3fdc-3efa-ba4e-72f800ca22aa.roa
File:                     9111afc2-3fdc-3efa-ba4e-72f800ca22aa.roa (raw, json)
Hash identifier:          PM0PrY+CAi9k2lks3vKS3IiK5oYcJ9Gz4WllhhWYYls=
Subject key identifier:   73:AE:B6:92:34:90:AB:3E:81:44:16:20:19:75:64:DD:E4:56:AE:28
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584F50DA170C706748FA177B7C80
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9111afc2-3fdc-3efa-ba4e-72f800ca22aa.roa
Signing time:             Sun 27 Sep 2026 16:39:33 +0000
ROA not before:           Sun 27 Sep 2026 16:39:33 +0000
ROA not after:            Sat 26 Dec 2026 17:39:33 +0000
asID:                     14956
IP address blocks:        45.61.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:da:17:0c:70:67:48:fa:17:7b:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Sep 27 16:39:33 2026 GMT
            Not After : Dec 26 17:39:33 2026 GMT
        Subject: CN=d09a6a50-abb6-4746-b00b-0e0f7c57af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:1a:b4:67:81:2f:79:9e:1b:29:0a:29:16:
                    e9:99:64:42:e6:c5:fd:12:27:dc:af:e3:fa:b2:02:
                    25:e0:bd:10:c4:b4:b1:a6:77:ce:d9:dc:74:6e:56:
                    2d:1e:79:d2:3c:55:cb:75:01:94:69:af:02:a4:d8:
                    53:9c:c1:fe:b7:cf:cb:38:4f:00:e1:15:82:59:55:
                    cc:df:ad:28:a5:d3:db:d3:8b:b7:42:4d:23:b3:e5:
                    1f:dc:f9:a0:59:c0:cc:f5:96:2c:3c:a4:e2:15:1c:
                    28:9c:34:5e:ca:dc:3b:1c:70:eb:61:ab:52:89:b7:
                    85:9a:a4:69:a0:76:49:4b:ee:6c:37:21:65:dd:e6:
                    6c:47:3f:9f:50:10:88:9f:75:5e:10:38:84:3c:ed:
                    0d:ca:78:52:1a:c5:e5:c5:06:9a:6c:aa:d7:72:e9:
                    e3:05:92:f7:e6:99:cd:76:b4:89:5c:fb:2a:00:d9:
                    a7:ff:1b:5c:c2:ad:1b:3f:50:8d:b0:3b:f4:c1:ab:
                    34:f0:6c:8d:9c:70:ee:ba:70:5b:b6:c2:84:c0:6d:
                    fb:3a:09:81:0a:21:05:8e:6f:57:bb:57:65:de:81:
                    36:3f:53:7a:15:9d:1c:da:bf:47:55:5c:e7:55:e9:
                    ef:e6:70:36:0a:8e:a3:24:80:cd:ed:28:0e:a2:13:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:B6:92:34:90:AB:3E:81:44:16:20:19:75:64:DD:E4:56:AE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9111afc2-3fdc-3efa-ba4e-72f800ca22aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:de:c8:c7:8c:db:92:a7:ff:44:a9:96:40:ec:8e:e5:15:
         15:e8:71:77:29:88:23:21:39:c3:77:18:a3:d2:14:4f:f4:48:
         f1:ef:94:b8:40:98:61:1f:d5:77:d8:2d:ea:d2:51:0a:d8:cf:
         f9:ec:d4:d5:44:b2:a6:68:18:18:69:d8:89:80:2e:7f:8b:36:
         d4:95:76:7e:57:d6:1e:1c:1f:f5:f9:30:2c:81:19:64:e1:08:
         65:40:3d:a8:5c:6a:f3:ab:d1:c8:bc:a6:b9:45:39:46:a0:ac:
         4a:a8:a3:00:1d:76:7a:0c:e5:5d:1a:41:a1:12:bb:9a:36:e1:
         82:18:11:b7:32:a1:2c:48:00:b0:ea:3a:84:d4:bb:e2:41:e2:
         a3:ec:7e:ca:0d:d0:f7:60:10:84:b0:c6:82:04:38:e9:5b:3e:
         3b:2d:d2:be:55:a8:71:2e:f0:bd:33:d2:98:b2:6d:8f:7e:a9:
         49:5d:96:e6:8c:eb:07:46:74:34:e5:18:eb:d0:fd:4b:0f:ae:
         22:08:cb:52:dc:60:e9:88:26:79:e5:8f:e7:a5:1f:e3:6a:6e:
         34:66:28:78:cd:07:de:d3:1c:0f:a3:a9:06:db:a5:ac:38:a1:
         5d:7a:5f:63:49:ba:e1:4d:a2:4c:b7:a6:54:77:02:7f:50:01:
         c4:2b:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:12:45 2026 by rpki-client