Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/f9d3a9ea-e2ce-3c2a-b56b-bed630121cc5.roa
File:                     f9d3a9ea-e2ce-3c2a-b56b-bed630121cc5.roa (raw, json)
Hash identifier:          yfktZktUVfmaX4DtxzrHCm05qd5dkl1oE3zoTcH9Hk4=
Subject key identifier:   77:30:73:2E:EB:24:FC:7D:44:DF:03:B0:A8:29:F6:B5:81:AE:34:D1
Certificate issuer:       /CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
Certificate serial:       010D0C9F4328584E7A64DCC81E9DC85153B30300
Authority key identifier: 8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/f9d3a9ea-e2ce-3c2a-b56b-bed630121cc5.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     399599
IP address blocks:        45.41.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:dc:c8:1e:9d:c8:51:53:b3:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=87243485-fc00-4ebf-87fe-033ca6de02c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:80:e5:3d:03:da:05:0d:d9:75:04:f1:38:
                    25:11:40:c7:d0:a8:cb:62:38:31:60:05:b6:64:a3:
                    9d:f3:72:20:ec:0c:aa:f0:c1:87:83:4b:fd:0a:f2:
                    12:99:48:f9:84:f7:cb:70:14:5b:62:16:50:cb:47:
                    9b:43:f6:87:ef:61:f6:12:90:7c:20:ad:41:d5:3d:
                    8a:c0:66:c8:d6:08:e3:69:07:67:ca:78:8f:a8:3d:
                    20:86:7b:4c:a9:70:6d:53:c9:06:f2:8d:14:59:11:
                    30:a7:70:f7:a8:05:be:51:53:69:7c:38:8b:d2:09:
                    4d:df:09:35:30:c7:b4:b8:83:25:87:3c:29:f4:a3:
                    2b:22:58:22:e7:2d:74:96:51:cf:da:22:30:a4:24:
                    dd:70:dd:62:5e:86:95:77:59:aa:c8:1d:3d:13:94:
                    62:1c:f0:00:3c:af:41:b5:26:2a:98:e6:3e:e4:b8:
                    61:78:5f:f9:16:9e:b3:0f:e7:98:18:04:d2:df:9e:
                    2c:15:7d:1b:4a:7f:da:73:12:1e:dc:7e:ef:ec:00:
                    6a:dc:ad:4c:fd:22:c3:d2:ae:e3:34:dc:67:6c:65:
                    30:a8:83:85:ec:32:d3:28:b7:21:eb:92:96:94:40:
                    15:c3:b7:32:05:9d:b7:0b:0f:0e:c7:8f:13:af:d0:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:73:2E:EB:24:FC:7D:44:DF:03:B0:A8:29:F6:B5:81:AE:34:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/f9d3a9ea-e2ce-3c2a-b56b-bed630121cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:56:51:71:5d:dd:d7:29:f2:06:3c:18:09:9f:d3:9f:56:14:
         b6:38:9b:27:64:41:ac:61:04:63:32:6d:64:4b:19:06:ba:1d:
         5f:e2:70:b2:3e:0e:ce:dc:1f:8f:0f:d1:ac:14:d7:bc:4f:6d:
         d6:a5:c0:d5:41:d9:7c:36:01:6e:41:ae:f6:05:64:88:10:14:
         1e:34:59:c0:a8:96:39:cd:5a:7f:8f:8b:b0:44:52:25:2d:3a:
         c1:66:4c:3b:1e:34:0e:64:6b:73:72:ed:7f:c1:15:80:2a:e9:
         e5:4d:07:e6:27:b1:58:74:5f:8a:c4:18:1f:a6:58:77:6f:ef:
         82:4e:66:63:51:83:e0:d3:65:dd:71:f2:bd:c7:fa:1f:4a:2a:
         41:78:8f:86:17:e3:37:a2:41:80:a6:e3:72:83:e0:c4:3f:2d:
         fd:bf:20:f6:55:6e:82:4f:08:77:b8:91:14:a1:4e:ac:3d:37:
         a7:53:d6:0d:9b:c2:84:f3:07:22:a5:d8:17:cb:46:ec:a9:e2:
         a0:cf:cc:fc:23:22:42:4b:73:2a:c5:0a:3c:64:26:32:8f:d7:
         16:38:76:25:4c:6a:ac:7c:cc:35:d6:c3:77:99:1c:c1:d6:fd:
         56:5f:a6:3f:4e:49:0f:f7:05:f6:c2:83:35:9f:92:69:81:35:
         c1:27:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:01 2026 by rpki-client