Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/02f692e0-b996-3ea4-9704-d1130724b7c7.roa
File:                     02f692e0-b996-3ea4-9704-d1130724b7c7.roa (raw, json)
Hash identifier:          jf8C5d9eo8zXCCPfZAv5XhFv3u1CwhcdFA16u3xUIxY=
Subject key identifier:   4D:21:FF:26:24:89:0D:F4:02:4B:C2:BC:2E:81:BE:02:63:88:84:45
Certificate issuer:       /CN=455e4c10-6e17-49b0-a230-4953ff29c6dd
Certificate serial:       010D0C9F4328584F06723D1DE47ADB842480B240
Authority key identifier: 5F:80:7A:41:EB:83:7C:B4:A1:0E:98:E4:94:CB:F8:ED:4A:C5:6F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/02f692e0-b996-3ea4-9704-d1130724b7c7.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     53914
IP address blocks:        45.33.198.0/23 maxlen: 24
                          104.36.108.0/22 maxlen: 24
                          199.38.216.0/21 maxlen: 24
                          2604:4b80::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/455e4c10-6e17-49b0-a230-4953ff29c6dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/455e4c10-6e17-49b0-a230-4953ff29c6dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:3d:1d:e4:7a:db:84:24:80:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455e4c10-6e17-49b0-a230-4953ff29c6dd
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4fea7de5-4430-42fc-b7da-0c134f7c4450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0f:bd:21:3f:2c:57:a6:db:1b:99:6f:1d:77:
                    dd:43:b6:a8:98:57:f6:8c:2a:9b:85:17:3b:1f:3a:
                    55:bd:dd:62:e0:c6:f3:a1:78:a4:e0:4b:32:79:20:
                    d0:f6:a6:2d:52:52:d0:c1:d2:eb:b7:f7:1f:65:6e:
                    4a:53:96:27:1d:a3:5b:8d:33:19:9c:bf:b1:07:ca:
                    88:b8:97:1e:1b:fb:06:d7:bd:3a:b8:66:39:ae:fe:
                    be:1c:11:98:a7:10:16:31:56:bf:f4:c2:4f:26:64:
                    d0:10:e2:1a:b9:ed:8e:59:fd:1d:90:fa:1e:d3:1a:
                    b8:36:ac:52:ec:47:2d:67:0d:e0:e3:9d:bb:4e:4f:
                    19:c0:1b:fa:4e:53:76:d5:28:83:e6:d2:87:3d:37:
                    d4:f9:c7:b9:a1:0d:b6:39:d2:16:52:d8:58:69:14:
                    95:31:1e:d7:2c:69:89:b8:71:97:09:f7:85:92:3c:
                    22:c7:4d:4e:06:9f:51:f9:52:7d:68:98:d5:e7:b3:
                    80:90:5b:91:7c:bf:3c:4f:0e:36:43:e1:e2:2d:1d:
                    5e:ce:e7:c5:ef:7c:44:dc:4b:58:19:a6:54:dc:41:
                    53:8b:9b:01:50:ea:8d:3e:e1:5a:64:48:a8:9e:27:
                    f3:bc:27:72:b8:0a:aa:5b:9f:f9:11:b2:b8:8f:78:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:FF:26:24:89:0D:F4:02:4B:C2:BC:2E:81:BE:02:63:88:84:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/02f692e0-b996-3ea4-9704-d1130724b7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd/455e4c10-6e17-49b0-a230-4953ff29c6dd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:80:7A:41:EB:83:7C:B4:A1:0E:98:E4:94:CB:F8:ED:4A:C5:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/455e4c10-6e17-49b0-a230-4953ff29c6dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.33.198.0/23
                  104.36.108.0/22
                  199.38.216.0/21
                IPv6:
                  2604:4b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ce:5f:9b:89:1b:b8:79:28:28:10:4c:56:61:4e:88:6d:7d:
         b0:3f:60:08:df:e7:0a:fe:54:52:5e:12:e0:15:23:f8:fa:cc:
         8b:43:81:8a:16:44:cf:ce:fe:cf:1f:c2:83:73:df:5e:c1:7b:
         76:c3:49:05:29:bd:7b:d7:7c:6a:42:d6:61:de:45:73:98:33:
         12:aa:66:91:9a:26:6a:75:22:d2:ea:53:ce:a7:24:af:70:05:
         e4:0c:51:f2:6b:27:cd:43:ad:5f:d9:c4:c8:03:c0:f6:e3:87:
         0e:cb:b9:39:22:24:a5:ee:42:79:e5:ac:1a:52:f4:41:27:dc:
         d4:8e:5c:58:63:30:e7:42:89:58:e3:76:15:31:64:b5:c7:88:
         7c:31:cd:a5:18:6f:33:8a:b7:81:c3:2e:50:ae:56:ae:47:4a:
         95:83:91:1b:3f:45:59:55:f5:41:7f:c0:d9:6b:e8:fe:70:7c:
         df:33:6c:6b:f2:96:df:3a:f8:98:86:39:25:87:89:09:c3:97:
         71:4f:2a:a3:cd:30:c7:fc:f2:0f:d5:af:9d:d4:c4:78:17:ca:
         98:7f:a1:e2:b1:1a:74:03:02:91:4c:22:cb:eb:61:57:d6:7a:
         37:89:57:8d:d0:71:7a:04:5f:b9:42:43:0a:41:f8:3b:22:bc:
         70:59:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:46:57 2026 by rpki-client