Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/01cbe5f2-7782-3dda-9686-cfc6427cb213.roa
File:                     01cbe5f2-7782-3dda-9686-cfc6427cb213.roa (raw, json)
Hash identifier:          /67ZCF2lI2lQQm277VkfcT8WksK6yOwGU+BOSFB/Xgw=
Subject key identifier:   4B:73:D0:02:3F:D7:65:9F:B2:07:88:DA:77:37:26:00:B1:71:65:E6
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584DA11AAF98E217C0EE750D4880
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/01cbe5f2-7782-3dda-9686-cfc6427cb213.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     14956
IP address blocks:        45.59.114.0/24 maxlen: 24
                          45.59.119.0/24 maxlen: 24
                          45.59.122.0/24 maxlen: 24
                          45.59.124.0/24 maxlen: 24
                          45.59.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:af:98:e2:17:c0:ee:75:0d:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=888b4455-70af-4262-8046-7c3fa47a8dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:09:02:67:c6:c0:f6:31:83:23:31:a2:d3:
                    35:05:20:e5:b9:a6:53:77:a3:f9:93:b1:cc:c9:78:
                    ef:40:8b:59:f9:54:b5:f5:b5:72:99:08:30:1c:4c:
                    7f:ba:7b:3a:8a:71:b3:ba:21:f1:55:06:a2:48:f2:
                    a5:73:8a:b0:f0:30:77:65:28:4a:62:2a:40:07:e3:
                    be:73:50:27:cc:db:53:50:ab:dc:28:16:8f:4b:2e:
                    f1:da:15:b7:cd:eb:9f:cd:97:f2:c0:2c:33:9a:bf:
                    93:6c:06:c0:5d:ae:8b:30:ba:a1:b9:bf:24:cc:2f:
                    09:49:c3:21:5b:e8:80:15:b1:49:89:85:bf:29:b0:
                    cd:50:2b:2c:b0:fb:40:fa:c2:dc:de:a3:7e:6a:c0:
                    05:c9:a8:4a:22:3f:1e:84:c0:c2:ee:ff:c6:f2:17:
                    e8:14:5e:49:87:13:b0:6f:b9:93:57:ee:20:9a:d3:
                    15:9b:7d:37:74:14:7c:45:a0:c7:cc:55:92:2c:63:
                    1d:ef:46:b5:3f:90:c5:de:8c:d5:d2:86:da:e2:b3:
                    6f:ef:d6:73:ad:74:0d:35:0e:b2:29:3b:81:2e:90:
                    81:16:df:aa:0c:dd:80:62:1c:42:7b:d7:35:49:26:
                    bf:6a:c8:34:a3:26:56:78:13:08:16:db:1b:2b:a7:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:73:D0:02:3F:D7:65:9F:B2:07:88:DA:77:37:26:00:B1:71:65:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/01cbe5f2-7782-3dda-9686-cfc6427cb213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.114.0/24
                  45.59.119.0/24
                  45.59.122.0/24
                  45.59.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3b:fe:ca:69:50:de:6a:d7:59:f0:4a:cb:c4:52:b0:b7:13:
         7d:05:2c:f1:75:99:11:67:2e:e7:0b:46:1e:c6:97:4f:76:d9:
         d1:af:d5:ed:14:83:54:c7:5b:2f:9c:1e:08:35:2f:57:af:3b:
         99:69:bf:7f:67:8b:c1:4a:59:b4:4b:43:f3:8e:ce:09:c9:17:
         ed:fc:e9:0e:2e:ca:4b:d7:84:f1:14:59:2f:cc:bd:b0:7e:53:
         5c:14:15:8e:48:6e:0d:7e:25:9e:c3:e7:a4:c0:cf:73:f2:da:
         4f:2d:c1:b3:be:74:39:43:e5:82:b7:e9:ac:d4:ad:7c:c5:31:
         19:8c:90:db:5b:d1:f1:26:1e:a4:81:f9:86:73:3b:97:42:05:
         22:e2:d8:97:5a:1f:a2:d6:c8:6a:57:3b:41:c6:d9:96:3a:c1:
         b0:ef:96:7d:2e:9a:e2:2e:38:30:2f:75:46:e6:ff:02:cc:27:
         d8:8b:2b:cb:aa:cb:36:2f:e5:a4:5d:17:a8:b0:4d:0d:d2:f8:
         dc:b6:98:11:fb:ca:34:97:28:59:0a:da:a2:3a:67:f3:33:96:
         f5:fd:b5:ff:3d:77:33:07:68:f1:56:07:1a:1a:0c:f2:14:15:
         e8:f7:8d:f5:e6:39:4a:c0:45:30:05:11:69:2f:1c:77:22:8a:
         21:1b:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:59 2026 by rpki-client