Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/33272cea-61dd-3e54-b0f6-73372c4f56a5.roa
File:                     33272cea-61dd-3e54-b0f6-73372c4f56a5.roa (raw, json)
Hash identifier:          891Y0VVA5Ug49yt9HmIWSBxSKPhV5+btEZLbn7y/aIU=
Subject key identifier:   E9:14:07:53:D8:03:AA:CA:4F:2D:C3:79:BB:82:2B:30:AB:95:88:40
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584EBB11BA84153911682E45BF40
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/33272cea-61dd-3e54-b0f6-73372c4f56a5.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     36007
IP address blocks:        45.61.50.0/24 maxlen: 24
                          2604:bc0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ba:84:15:39:11:68:2e:45:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=9ddefdde-cf8f-4f4c-9188-47c34c941138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:f5:d3:6c:92:ff:18:92:99:0f:26:18:1a:
                    33:ec:85:8a:37:52:17:7c:a3:d3:c3:f0:a4:c8:60:
                    18:e0:a4:3e:7b:a2:5a:3c:28:c2:9c:f3:25:74:f1:
                    95:2d:db:17:e9:5e:a6:8c:c5:04:27:65:ca:1e:a5:
                    45:94:af:0d:b3:17:57:25:03:b0:06:0c:76:b0:89:
                    49:ed:04:d7:82:8f:4e:28:54:69:d1:f7:00:a4:9b:
                    3a:65:a3:2b:08:af:05:26:1c:58:5e:e6:f9:29:7a:
                    91:ff:ca:de:ea:f6:db:37:f1:58:7e:de:2c:4f:01:
                    4b:82:4a:96:7f:8e:cc:5a:7a:7e:c3:b0:7e:3b:93:
                    17:2c:7e:30:8b:75:04:a1:f1:88:b7:1f:90:1f:d6:
                    fe:a7:35:47:1a:69:bc:29:d2:1f:45:90:ed:99:10:
                    08:bb:07:d4:5d:7c:01:6c:5b:7e:61:4b:7c:12:20:
                    ca:1b:a0:5b:90:cb:0d:79:94:de:ff:1f:bb:1a:5a:
                    36:4a:98:32:96:25:8c:2f:32:cf:db:59:de:5e:05:
                    d3:3a:88:4f:b6:c8:66:b8:f5:f8:ef:43:1e:2c:62:
                    50:e0:28:28:ec:d0:73:fe:c2:d8:18:d8:6b:bd:78:
                    09:e3:cb:d9:31:78:a9:d5:d6:c2:f0:66:51:4f:33:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:07:53:D8:03:AA:CA:4F:2D:C3:79:BB:82:2B:30:AB:95:88:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/33272cea-61dd-3e54-b0f6-73372c4f56a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.50.0/24
                IPv6:
                  2604:bc0:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:1c:f7:42:e4:35:3c:fd:a2:4b:77:2f:f8:d2:01:4f:6d:
         73:40:39:a1:d2:5b:79:49:fa:fc:95:dd:0e:b2:2e:a0:eb:2a:
         37:a0:12:ca:e6:12:7b:86:45:0f:0f:0a:45:24:e1:23:94:b9:
         b3:2d:0e:5f:87:a9:cc:18:f5:45:73:a4:d4:5a:34:f3:0b:84:
         c0:c4:51:92:6c:ba:36:75:6d:02:20:a1:02:3a:c9:44:9d:b1:
         59:73:85:91:a6:3c:eb:47:1d:a2:4d:17:04:c8:77:c4:38:c8:
         6b:f2:ad:e3:89:b3:71:b5:7a:ba:9b:78:97:79:d5:5f:b9:6c:
         d9:34:23:13:bd:03:2c:dd:d3:d4:44:b1:9d:cc:ad:da:74:ca:
         51:4f:19:c9:1c:ea:30:0a:31:9b:51:52:ad:64:04:b8:f4:ae:
         4d:43:be:8b:d6:90:c8:fa:01:c8:69:2a:dc:9b:31:4f:b2:1d:
         40:7d:aa:cd:0e:74:78:cf:d6:c2:d8:12:ce:69:0e:95:65:1b:
         8b:73:96:85:55:18:b5:f6:3e:9b:78:a1:1f:28:6a:82:50:85:
         30:86:b3:74:d2:23:cf:35:c3:fa:d1:21:f5:1c:eb:a4:c4:60:
         1c:ea:a2:b1:ba:34:79:12:f8:e0:7a:90:24:83:92:43:fb:d7:
         71:13:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:21:29 2026 by rpki-client