Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa
File:                     0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json)
Hash identifier:          3IAoGSN61vtd5ovdXiqz/BE7kNuz5Gl+aM7fxC2rBJ0=
Subject key identifier:   1F:53:A1:49:37:73:F0:D0:A3:6E:B7:A8:37:CD:32:1E:34:D1:F7:DF
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584EFCACCC4F54965889C957F2A0
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     53356
IP address blocks:        45.62.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cc:4f:54:96:58:89:c9:57:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=1f1b03a6-e158-4f6b-97de-a35ca19e485f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:9a:2f:73:96:08:83:95:c4:46:73:ef:c9:
                    7b:24:ab:eb:4e:ae:89:84:42:9a:2b:2f:97:da:b9:
                    28:19:8f:07:df:e2:3c:10:df:cd:ad:32:97:68:f8:
                    d7:67:8b:7b:62:a9:b6:f5:68:51:9c:b4:90:63:d7:
                    06:c8:45:82:70:19:18:47:94:d3:2f:58:9e:b6:af:
                    40:a8:f5:dd:3e:64:d4:ed:eb:10:4d:2c:5b:52:6a:
                    2b:13:74:f1:6a:71:53:7c:b1:57:3e:c3:a2:b1:34:
                    a4:95:f1:05:e0:0e:ce:35:f7:a9:c2:8d:44:bf:59:
                    f3:ab:68:eb:0d:8a:2e:ee:62:7c:ac:2a:46:fc:96:
                    8e:7d:61:d2:51:ff:d7:bc:d6:dc:ee:9b:f8:63:55:
                    29:9c:76:4b:a2:70:7a:77:a3:19:30:9a:b1:2a:78:
                    7f:9b:48:f9:4f:b5:71:e4:57:47:f1:b1:48:44:6c:
                    0b:3a:6c:dc:6e:3c:09:6f:f8:c5:a7:0d:bf:35:3e:
                    bd:d1:93:d2:a2:49:52:65:81:e1:5b:2f:3e:28:ed:
                    a4:59:8c:90:66:6d:98:36:ab:49:03:52:6c:60:d1:
                    b9:82:c2:4c:df:31:a0:52:02:e9:c9:20:47:74:b0:
                    e7:da:ac:90:1e:3e:ea:a5:d9:d3:66:5a:a1:87:86:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:53:A1:49:37:73:F0:D0:A3:6E:B7:A8:37:CD:32:1E:34:D1:F7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:75:c3:ab:8a:ed:c8:eb:e1:9f:6f:a9:2e:6f:3b:42:cd:
         1d:30:38:dd:38:83:28:b5:99:5a:13:5d:e7:bd:c5:58:9b:da:
         55:3f:6e:57:b2:53:29:b8:fb:56:78:e6:c2:19:3a:8e:ca:e8:
         3d:f2:be:b7:0f:1e:49:14:e1:a8:ed:79:4a:eb:12:d6:41:de:
         14:20:ee:fd:c7:d6:d2:87:34:3c:0a:12:ba:0d:53:ef:0f:cf:
         36:6f:63:1e:05:96:ed:b9:b0:39:ca:c6:fc:ca:66:f0:0b:fe:
         00:c4:ff:ed:e1:ae:da:c6:60:56:be:67:92:8b:84:1b:d8:9f:
         59:31:af:c5:cf:9f:ac:74:51:2c:d3:c8:96:4d:2c:de:92:95:
         eb:0f:6f:38:6d:c9:24:26:0f:d0:61:df:31:7b:08:37:b5:4e:
         c6:9b:c3:c5:af:d7:9b:e8:ed:cb:7b:73:45:1b:ee:f6:db:e5:
         35:a5:30:d9:14:a2:59:84:1b:73:e1:b4:b8:8b:d1:af:35:4a:
         64:2a:82:ce:6e:a4:39:06:e5:af:12:40:52:2e:5b:d5:16:d3:
         b6:e5:e5:66:4d:da:81:d4:9c:d1:46:5a:29:13:2e:e5:f2:f0:
         cb:f3:1c:d7:23:9e:71:46:40:15:a3:2a:ac:bc:a9:9b:dd:58:
         85:56:31:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:48:37 2026 by rpki-client