Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0a8f5a5e-fa8b-3478-8bff-13d11e07968d.roa
File:                     0a8f5a5e-fa8b-3478-8bff-13d11e07968d.roa (raw, json)
Hash identifier:          ktHnMqc/QKxe2T3vRtd9oWcx5+7dngW0LdqVa6IPJCc=
Subject key identifier:   CF:45:50:92:32:F1:2C:42:88:57:BE:E1:B2:57:E4:20:6B:00:A8:93
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584D738ADD2E26AE83BA4F9E5A80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0a8f5a5e-fa8b-3478-8bff-13d11e07968d.roa
Signing time:             Thu 09 Apr 2026 17:19:20 +0000
ROA not before:           Thu 09 Apr 2026 17:19:20 +0000
ROA not after:            Wed 08 Jul 2026 17:19:20 +0000
asID:                     214024
IP address blocks:        45.62.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:8a:dd:2e:26:ae:83:ba:4f:9e:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Apr  9 17:19:20 2026 GMT
            Not After : Jul  8 17:19:20 2026 GMT
        Subject: CN=d296175b-9f9c-4b99-a966-410084ac5ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:00:e4:42:09:ce:eb:63:99:c3:99:d1:00:7c:
                    27:f9:2f:91:d8:24:21:10:65:cd:8f:fb:fc:79:b6:
                    43:49:ee:53:6f:3c:eb:d2:86:21:10:79:f4:7e:e8:
                    55:73:e9:1a:0c:8b:a7:ba:53:97:00:c8:74:b6:f3:
                    03:9b:21:c9:81:8c:bc:65:fe:55:e9:5e:eb:26:6c:
                    a7:d7:01:20:ab:f7:95:1f:14:66:64:17:44:fe:eb:
                    00:73:e8:f0:a5:12:3d:c2:47:35:96:e7:f0:4d:82:
                    39:ee:ba:4e:bd:4a:29:81:28:4b:61:31:93:43:06:
                    a1:81:e8:29:4e:3b:bf:b7:e5:47:94:81:ce:52:1d:
                    ed:4c:f9:28:b6:c9:80:bb:95:9b:30:83:55:90:b2:
                    eb:10:ce:b4:f0:74:a5:e5:8a:bf:82:17:65:e8:1e:
                    d5:ee:00:7b:62:d4:b7:19:2d:2c:94:38:f3:bb:41:
                    4f:4a:64:e9:af:92:c4:6a:75:e3:87:10:a5:6c:24:
                    c1:74:45:df:3c:b3:d7:82:79:5a:48:92:4a:25:33:
                    a3:92:fa:fc:41:1b:d2:4f:24:e0:f6:e2:72:53:6c:
                    0a:af:84:47:03:00:29:da:cd:4d:f8:0a:62:70:21:
                    36:07:21:f6:c8:14:ad:92:1d:13:80:06:63:ed:4e:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:45:50:92:32:F1:2C:42:88:57:BE:E1:B2:57:E4:20:6B:00:A8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0a8f5a5e-fa8b-3478-8bff-13d11e07968d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:84:e1:c6:a8:0d:5a:a7:23:4f:ff:b5:58:38:31:dc:b4:
         e0:8a:34:1e:46:d8:f3:c6:4d:ac:dd:c8:04:1a:86:99:69:62:
         da:67:cb:65:da:7b:df:f2:1b:d7:82:f2:d3:44:b5:b2:19:6a:
         ea:f3:ff:6f:b5:b7:f0:1b:90:16:75:79:b5:5c:f5:d6:65:1d:
         c2:0f:3e:82:df:6b:10:6c:9e:46:70:27:81:f8:b3:39:d7:a3:
         3f:87:ca:03:46:99:79:64:ee:d9:60:45:d1:7c:9c:ad:07:0d:
         d9:22:28:60:64:2c:39:d3:b1:13:2c:eb:8d:f8:99:d2:8b:c2:
         bf:ed:db:55:95:f5:83:3d:5e:30:db:63:40:a5:52:30:8e:b5:
         cf:81:23:d5:1c:75:10:fa:a2:54:be:6b:65:88:6a:68:e3:9a:
         b5:d9:8e:4a:cc:e3:5d:a7:d1:16:55:2a:7f:fe:13:ea:df:a9:
         47:24:0f:69:cf:e4:c2:ef:74:c7:4b:e7:d1:53:41:9c:ac:e8:
         e6:a0:d3:3e:14:e6:56:24:a4:57:c9:ec:a3:cd:04:8d:d1:68:
         bb:61:0d:21:9b:70:91:7a:2f:b2:c1:bb:c5:9c:13:a1:a3:6f:
         5e:aa:66:fd:2b:30:91:db:47:9d:e3:17:00:1d:eb:1a:3b:0a:
         4a:6b:78:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1zit0uJq6Duk+eWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI2MDQwOTE3MTkyMFoXDTI2MDcwODE3MTkyMFowLzEtMCsGA1UEAxMk
ZDI5NjE3NWItOWY5Yy00Yjk5LWE5NjYtNDEwMDg0YWM1ZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QDkQgnO62OZw5nRAHwn+S+R2CQhEGXNj/v8
ebZDSe5Tbzzr0oYhEHn0fuhVc+kaDIunulOXAMh0tvMDmyHJgYy8Zf5V6V7rJmyn
1wEgq/eVHxRmZBdE/usAc+jwpRI9wkc1lufwTYI57rpOvUopgShLYTGTQwahgegp
Tju/t+VHlIHOUh3tTPkotsmAu5WbMINVkLLrEM608HSl5Yq/ghdl6B7V7gB7YtS3
GS0slDjzu0FPSmTpr5LEanXjhxClbCTBdEXfPLPXgnlaSJJKJTOjkvr8QRvSTyTg
9uJyU2wKr4RHAwAp2s1N+ApicCE2ByH2yBStkh0TgAZj7U78eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9FUJIy8SxCiFe+4bJX5CBrAKiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMGE4ZjVhNWUtZmE4Yi0z
NDc4LThiZmYtMTNkMTFlMDc5NjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHB6hOHGqA1apyNP/7VYODHctOCKNB5G2PPGTazdyAQahplpYtpny2Xa
e9/yG9eC8tNEtbIZaurz/2+1t/AbkBZ1ebVc9dZlHcIPPoLfaxBsnkZwJ4H4sznX
oz+HygNGmXlk7tlgRdF8nK0HDdkiKGBkLDnTsRMs6434mdKLwr/t21WV9YM9XjDb
Y0ClUjCOtc+BI9UcdRD6olS+a2WIamjjmrXZjkrM412n0RZVKn/+E+rfqUckD2nP
5MLvdMdL59FTQZys6Oag0z4U5lYkpFfJ7KPNBI3RaLthDSGbcJF6L7LBu8WcE6Gj
b16qZv0rMJHbR53jFwAd6xo7CkpreG0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:54 2026 by rpki-client