Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/e958e279-116d-30d7-b57a-83f13086476a.roa
File:                     e958e279-116d-30d7-b57a-83f13086476a.roa (raw, json)
Hash identifier:          gSFfVJXf9JUzx/9vlx33CSAQRMyRKea/fUDCCOzME8A=
Subject key identifier:   9E:2E:B4:16:CB:E1:BF:E1:13:B7:1E:ED:9F:46:CC:4F:C5:1F:7C:15
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584E89BF94578E271909DF947380
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/e958e279-116d-30d7-b57a-83f13086476a.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     216047
IP address blocks:        45.114.107.0/24 maxlen: 32
                          103.44.89.0/24 maxlen: 32
                          103.54.63.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:94:57:8e:27:19:09:df:94:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=ce71649a-78b0-4928-aaf5-cc0f9338bf4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:be:42:33:91:9c:61:76:94:ba:c6:b6:b0:
                    f0:6f:c4:31:e7:60:1a:4e:e8:c9:cb:bf:15:1a:45:
                    d2:26:27:84:33:e4:d3:66:76:12:b1:3a:c6:85:e1:
                    b9:49:41:46:4b:aa:f8:0e:ae:37:7d:1e:46:de:ea:
                    9f:ec:f0:8c:d3:c2:48:17:bd:95:50:b6:9f:af:41:
                    d9:f3:6a:39:ce:f1:3c:b5:a7:0c:e6:ea:6c:76:de:
                    7a:23:97:09:80:81:a6:41:60:a7:7e:1d:81:69:7e:
                    b2:81:20:96:8a:a1:6e:bf:e2:56:af:41:45:8f:1f:
                    65:29:17:57:2d:46:dc:93:4c:3d:58:92:c0:9a:c4:
                    ff:a4:4a:60:96:16:b1:59:ae:c8:f8:9f:3a:1f:0d:
                    a6:d7:08:06:1d:13:cd:51:a6:db:bc:6c:b9:b3:95:
                    fd:85:db:f7:c6:ea:24:67:6f:61:10:40:94:ea:6d:
                    3e:ae:43:01:e1:0c:91:ae:ed:ef:71:a8:c1:2d:5e:
                    56:df:e8:c5:2a:63:4b:51:76:a5:c4:cf:cf:e6:f0:
                    31:93:6f:38:80:a2:e9:1e:99:8b:a0:9d:2b:52:14:
                    8d:33:e4:7b:80:90:2e:bf:f4:95:7b:5d:e4:0e:43:
                    5a:b3:81:cd:2f:9d:93:08:d1:81:d1:eb:e4:dd:e0:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2E:B4:16:CB:E1:BF:E1:13:B7:1E:ED:9F:46:CC:4F:C5:1F:7C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/e958e279-116d-30d7-b57a-83f13086476a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.107.0/24
                  103.44.89.0/24
                  103.54.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:bd:31:af:86:41:59:db:45:26:c0:9e:c4:5f:ac:fa:ae:
         c5:52:11:e7:06:86:43:33:7a:e4:0b:d7:d1:52:c9:87:e0:48:
         e9:a1:51:29:47:75:32:44:66:8a:f4:28:be:c4:f7:90:9f:92:
         21:65:3a:7c:1a:30:98:2d:40:38:53:c2:95:23:34:1f:c9:92:
         9b:58:ed:cd:0d:43:39:6a:0a:95:58:bb:69:a9:78:0d:d4:ff:
         f3:6c:dd:8c:33:8d:2f:09:4b:d7:c5:b8:98:3a:d6:b0:a0:ff:
         9d:98:ae:1f:41:1a:c0:8b:a2:ef:90:e8:fc:2d:9e:d2:60:6b:
         68:44:5b:c2:be:57:d3:a0:2d:13:77:db:e5:d4:b7:55:d1:76:
         f8:51:30:d5:02:87:3c:00:a0:e5:80:e1:c5:fc:a0:e9:f3:8e:
         3f:7a:1b:07:2b:4e:fe:e4:0c:0e:c6:56:99:65:1c:7a:c8:fb:
         67:1c:b7:1c:2e:65:83:4b:20:4a:65:e9:37:3b:d5:1b:7f:38:
         ed:b9:0d:76:4c:3a:d4:1e:65:cb:13:ba:f5:e2:e6:4c:20:d9:
         9a:49:e0:e8:13:49:34:23:f0:59:d2:e3:ab:e8:ba:34:10:09:
         48:1a:54:aa:55:d4:a8:33:42:09:f0:7e:71:11:9b:e0:c5:76:
         36:ae:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:53:58 2026 by rpki-client