Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ac12cfab-fa1f-3d9b-a9d3-204507d2d6fe.roa
File:                     ac12cfab-fa1f-3d9b-a9d3-204507d2d6fe.roa (raw, json)
Hash identifier:          DYQnUjfL+B+vB/obTXaGAzvAYJxLkb9mc/YW6rvKXhw=
Subject key identifier:   14:D3:B3:A2:0F:58:73:B1:3C:1E:4B:C1:10:ED:C7:97:3A:05:D6:FC
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584EDC91FBA8CDADC2B251A7F480
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ac12cfab-fa1f-3d9b-a9d3-204507d2d6fe.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     40065
IP address blocks:        45.58.53.0/24 maxlen: 32
                          202.5.31.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fb:a8:cd:ad:c2:b2:51:a7:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=73845671-1997-4243-86d4-2709ea65eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:e3:17:ad:e4:c3:0f:33:eb:ad:22:79:d9:
                    20:ac:4b:8a:fb:3a:a7:34:89:13:c5:55:c0:9e:6f:
                    3f:07:bb:3d:b8:cd:90:29:ac:5d:90:e0:08:82:ca:
                    88:64:48:9b:94:35:80:fb:bc:37:98:fa:ac:cc:33:
                    f4:4f:be:fb:35:67:5c:4f:a5:fc:6a:e2:93:83:91:
                    82:05:30:e0:89:dc:ce:6c:5e:d1:51:ab:a4:15:c4:
                    2f:a9:3a:36:62:a3:55:3a:ff:6c:38:87:15:33:31:
                    f6:36:de:46:3f:eb:f3:5d:f0:e6:67:d9:59:c4:e4:
                    e2:f9:78:29:0e:e6:e9:98:57:69:ce:02:b0:6f:9d:
                    3e:33:e3:b9:55:3f:9d:45:27:fa:c6:62:3d:70:03:
                    db:98:15:9f:af:94:af:5f:f8:42:9f:9f:eb:35:73:
                    9d:e7:e4:b2:ae:b5:ce:19:62:c4:b0:1d:f2:ea:3d:
                    50:1b:39:bb:14:75:7f:03:83:e2:84:04:e0:8e:93:
                    a4:8d:d4:f8:2d:e2:50:d8:74:70:19:49:68:b3:bf:
                    b5:a9:82:d8:f4:98:7d:0d:56:c9:c8:aa:63:64:25:
                    93:89:cd:c4:62:b3:da:32:a2:df:cd:3d:cf:9a:1c:
                    d7:3d:77:9b:87:a7:4e:46:29:55:f6:d4:9e:fc:fc:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D3:B3:A2:0F:58:73:B1:3C:1E:4B:C1:10:ED:C7:97:3A:05:D6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ac12cfab-fa1f-3d9b-a9d3-204507d2d6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.53.0/24
                  202.5.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:28:4d:1d:ed:00:f8:a8:52:fc:15:04:70:f9:63:c8:0b:
         94:9c:be:a8:32:a8:4d:c5:41:2f:0e:08:af:75:c1:9e:de:36:
         61:cf:43:33:a7:b6:8c:1a:0d:4c:84:93:0c:6d:59:79:04:49:
         a0:66:92:75:2b:d2:3c:77:86:20:8c:8f:0b:31:43:14:a5:44:
         65:67:23:e0:16:ee:dc:df:c4:64:eb:cd:94:4a:64:83:fb:37:
         4f:1a:8b:f9:d1:00:e1:e4:cf:2b:b1:52:01:70:ee:1e:09:7a:
         ee:26:25:39:39:1f:a6:be:5c:b5:32:4c:81:3f:f1:45:58:9f:
         1d:d3:59:91:3a:1b:bc:92:f7:58:dd:31:56:0c:c9:c7:29:65:
         87:dc:32:7a:8f:e4:01:97:c2:d9:5a:44:75:60:d6:57:db:b2:
         5a:5e:9e:5c:1f:5b:84:62:da:22:72:97:65:de:0d:2d:04:1c:
         73:e9:e7:87:d0:6d:ea:b0:97:f3:28:59:8a:e9:de:ad:e3:db:
         63:da:9a:cf:50:3e:e9:02:1b:9e:b9:60:1d:04:e0:fa:f0:9c:
         fe:65:92:10:34:3a:0f:e9:6d:e8:a3:88:01:3b:c0:bb:62:31:
         b4:41:00:83:b0:dd:4a:13:de:79:4f:ce:88:1b:de:46:7a:71:
         6a:63:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:35:06 2026 by rpki-client