Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa
File:                     2519a9cb-4db6-326d-a603-798350bb3d13.roa (raw, json)
Hash identifier:          A7FizFAabpFmMjtuFR5v0vFWgdkFrvaw8gXl3S6hN3Y=
Subject key identifier:   89:6B:8A:83:3B:23:63:56:AA:92:9F:F8:D5:AD:C3:F0:43:B9:60:6D
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584DD4C07332AAF13073C8523E68
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     5650
IP address blocks:        45.59.20.0/24 maxlen: 24
                          172.102.194.0/24 maxlen: 24
                          172.102.209.0/24 maxlen: 24
                          172.102.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:73:32:aa:f1:30:73:c8:52:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=7c63236e-a47b-4877-8604-8d48c8bf908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:93:a1:f9:2d:ce:20:74:4d:de:fb:f1:11:
                    a7:c0:89:59:31:85:5f:4f:09:97:08:c6:29:db:25:
                    e3:c2:b9:39:ee:25:4b:27:0e:68:a2:e0:8e:fb:8f:
                    b1:85:ba:48:4b:35:b2:e0:09:0b:52:d9:33:56:e5:
                    00:3e:6e:91:e7:1c:26:4d:ab:af:07:7e:9e:ab:cf:
                    c3:22:38:9b:82:a0:2c:94:6a:38:f8:50:86:53:da:
                    24:4f:92:18:be:e9:68:6e:17:ff:c6:dd:17:37:60:
                    a1:07:be:c8:27:0c:62:6a:b9:bd:5a:07:41:90:ad:
                    0c:8e:54:33:03:6b:d5:70:62:a8:f3:ed:f4:69:74:
                    64:e0:8f:36:89:f2:db:60:ad:0b:39:a8:ef:02:44:
                    b3:6b:0a:4c:76:05:28:6f:16:3c:4f:c4:e2:b7:9a:
                    80:ab:c2:3f:68:ea:e2:44:ef:83:93:ee:8f:20:67:
                    18:8e:0c:fd:45:42:c3:aa:36:5e:94:f9:f8:5f:80:
                    b1:95:2b:79:87:59:f5:63:4d:74:5a:4c:fe:86:22:
                    3b:4d:7c:20:9e:30:7c:b8:59:76:97:b3:23:e9:bb:
                    bc:49:f7:a6:45:0d:8b:ce:71:bf:38:3f:c5:d9:96:
                    34:76:ea:a0:8c:dc:94:10:f9:a3:21:65:1c:97:7d:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:8A:83:3B:23:63:56:AA:92:9F:F8:D5:AD:C3:F0:43:B9:60:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/2519a9cb-4db6-326d-a603-798350bb3d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.20.0/24
                  172.102.194.0/24
                  172.102.209.0/24
                  172.102.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:da:19:d0:25:a3:c0:16:89:c4:a8:fe:f9:c8:ce:68:48:47:
         c8:64:a1:1a:e3:60:66:18:8d:d6:f4:78:06:e6:d0:de:c8:db:
         12:2e:71:a3:ad:0b:83:c4:b2:34:64:7f:94:c6:f6:41:ad:9a:
         70:93:06:28:5f:c0:6b:63:2f:52:98:4e:f4:fe:1b:d1:d1:fa:
         b6:7a:4c:77:c8:3a:79:88:24:4e:32:df:5f:4d:1f:cc:5f:b8:
         77:62:86:de:6d:09:98:5a:9f:c3:16:46:21:0b:76:7b:0a:d7:
         9d:7e:c5:3f:52:38:77:b4:c1:21:a0:37:b2:d4:e8:65:5e:e8:
         eb:12:ef:07:23:e2:1b:76:ad:3b:cf:a6:04:2f:b6:67:20:d2:
         fd:f1:36:a7:a4:13:3b:dc:71:70:16:3f:4c:42:93:64:e5:85:
         aa:e2:72:56:cf:3c:87:ed:1c:19:3e:0c:38:ff:d6:fd:81:9f:
         4d:27:c7:33:2d:f6:49:83:bd:b7:32:7a:ce:59:25:27:92:30:
         5b:75:21:08:53:51:6f:70:01:7a:6b:31:9d:b6:2f:6c:59:37:
         62:9f:a0:82:7e:cf:53:89:51:fd:78:39:db:df:72:c6:d6:65:
         9e:31:8a:a7:19:23:9d:f8:53:31:aa:38:6e:c3:d0:fa:f7:5f:
         0e:3b:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:18:33 2026 by rpki-client