Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/80f4a2d6-0c04-3300-b357-1431dbf7b453.roa
File:                     80f4a2d6-0c04-3300-b357-1431dbf7b453.roa (raw, json)
Hash identifier:          1VrmhZ2aFXy7KNo+mwzrGF8j1PxVvSUAKzf+pJkBJ6g=
Subject key identifier:   7F:02:04:0C:60:E1:3D:8A:5A:0A:F2:2A:ED:F9:D6:D0:10:35:B9:17
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584F093CCAB04D015CEC4CD884E0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/80f4a2d6-0c04-3300-b357-1431dbf7b453.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        45.59.18.0/24 maxlen: 24
                          172.102.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ca:b0:4d:01:5c:ec:4c:d8:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=1d70a402-2162-41ab-b1a5-30ade0f615ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:9c:43:ed:ad:d0:a2:68:c4:02:8f:df:64:
                    36:52:c9:25:dd:51:b5:80:3d:2d:a3:28:fe:c8:df:
                    63:b7:e9:f6:12:dd:c0:d5:d2:03:c3:2b:2f:9a:7c:
                    c7:26:7d:9d:2d:35:e7:c9:b0:40:5c:50:b8:fa:49:
                    6f:b0:66:26:5d:f8:00:7a:4d:e0:5d:ce:ee:4c:9e:
                    2e:4a:d0:e2:fe:a5:c1:b0:cb:fe:86:88:f7:0b:02:
                    4f:f0:f5:31:c2:e1:28:a9:fd:dc:e3:46:aa:ac:d0:
                    c2:d3:c5:54:2e:92:ff:ab:42:57:aa:d1:bd:ac:6a:
                    9e:d7:1f:33:15:dd:18:34:e7:b6:8c:2e:d9:3b:6f:
                    66:96:ee:22:a3:c8:71:0b:ec:7b:36:d0:35:6d:aa:
                    73:ef:0d:02:5e:31:d4:a4:c7:f5:56:a2:2d:81:71:
                    ad:5c:87:5d:a3:30:0a:1f:12:d9:27:7f:57:85:f8:
                    ec:8c:27:73:94:67:30:68:41:dd:5a:e4:3a:d2:95:
                    dc:32:d5:bc:78:81:6f:8d:65:a6:db:bc:91:6e:ff:
                    11:db:63:7d:7e:b0:bd:60:4b:4e:b5:a8:65:bb:eb:
                    be:92:49:22:8b:cd:62:b9:cc:11:80:ab:47:50:74:
                    dd:28:cf:ee:5d:8e:ce:a3:a8:88:74:00:c3:3c:93:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:02:04:0C:60:E1:3D:8A:5A:0A:F2:2A:ED:F9:D6:D0:10:35:B9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/80f4a2d6-0c04-3300-b357-1431dbf7b453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.18.0/24
                  172.102.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:44:58:11:4b:ba:e4:88:f7:8a:40:d3:24:9e:ae:60:f8:ed:
         57:71:65:94:b2:4d:b9:e8:b9:0e:05:42:be:1b:13:07:00:75:
         2e:97:f0:af:24:58:1c:9f:64:a7:4d:b5:e4:6e:ec:c3:f9:f6:
         3c:0a:b8:5d:36:1e:2f:2d:e7:3c:98:76:0c:c0:44:72:09:ac:
         20:78:0e:5d:96:3e:53:5b:ea:73:a7:9d:8e:12:e4:98:32:ee:
         82:e3:29:ac:33:a6:9f:62:28:f9:0f:3d:b3:57:e0:fc:fb:e3:
         35:7c:76:8c:e4:eb:36:41:db:f2:d5:11:4d:3a:1b:50:f8:3a:
         1b:42:2c:ad:d5:fd:b1:c2:2a:13:c5:41:17:84:f5:24:f7:22:
         a6:3d:ac:9b:a9:55:54:3a:28:e3:6e:0c:bf:77:57:e3:cf:26:
         f0:e9:39:b7:35:f2:ee:22:df:7c:c2:1a:e5:96:e1:e1:24:68:
         88:ea:2b:38:61:6a:65:fe:79:96:88:70:c4:a9:78:42:44:cb:
         bf:9c:57:bd:a1:06:cd:2e:e0:02:41:52:cc:c4:3e:a8:eb:7c:
         54:b6:0a:1f:35:5c:0f:39:48:bd:f3:55:46:ea:d1:9f:6d:b6:
         e4:31:be:c1:0d:72:24:2b:7f:c1:41:ad:4e:fd:11:18:c1:b6:
         6d:f8:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:42:11 2026 by rpki-client