Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/52fef34b-697e-344f-8993-524c30491b32.roa
File:                     52fef34b-697e-344f-8993-524c30491b32.roa (raw, json)
Hash identifier:          Qzb/vKQ2JPMaHQ1n4z5A18Ae0LIMsvTY/GqbKfoBvvk=
Subject key identifier:   9A:6E:CA:39:29:10:34:1A:45:E8:A6:72:60:B2:BC:4E:FB:6C:C8:7C
Certificate issuer:       /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
Certificate serial:       010D0C9F4328584EE38C8D2973EA5FF367E81380
Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/52fef34b-697e-344f-8993-524c30491b32.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     46109
IP address blocks:        142.249.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:8d:29:73:ea:5f:f3:67:e8:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=368c7e05-b4a7-470d-9027-f5d7fca51a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:44:ca:79:d4:d2:39:21:9c:d5:2b:85:ce:
                    41:78:63:90:e6:1c:e2:4f:fd:14:51:d7:38:7a:ab:
                    b3:bf:2f:1a:31:6f:ae:a5:68:f2:11:f4:f4:81:ff:
                    b0:aa:a1:dc:50:f5:e9:46:e3:4f:fd:48:86:42:9f:
                    26:11:e7:6e:26:ff:f2:f9:83:08:55:25:26:30:20:
                    e5:dd:9a:5c:05:6e:8a:5d:eb:a8:ab:9d:c5:8c:40:
                    b8:a9:81:16:20:ee:07:eb:f8:60:40:74:4f:f5:ee:
                    67:06:ca:04:5a:de:da:db:f5:b1:df:2d:4e:c4:e2:
                    e0:d9:cc:be:ac:88:9c:d5:bb:e2:01:7e:e8:e1:5e:
                    56:6c:14:04:05:8a:69:2d:2f:48:a0:3f:59:89:18:
                    5e:62:5a:c2:9a:15:f3:69:dc:94:8a:32:28:89:d5:
                    bc:59:8d:c4:bf:66:b4:60:cc:8c:22:40:3f:87:c3:
                    5a:0c:0a:54:2b:94:1c:9c:06:5c:40:3c:9a:0b:97:
                    3d:08:53:e4:b9:59:23:b3:5a:9d:56:89:31:4b:d1:
                    48:53:ca:bf:ab:af:70:31:33:cd:24:d4:2d:70:1b:
                    14:67:a2:1d:80:90:9c:d1:cf:01:f0:e8:0f:c4:7f:
                    0b:3f:0c:7f:e6:d0:44:4a:1c:ed:c3:8e:6f:8c:fe:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:CA:39:29:10:34:1A:45:E8:A6:72:60:B2:BC:4E:FB:6C:C8:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/52fef34b-697e-344f-8993-524c30491b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl

            X509v3 Authority Key Identifier:
                keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:24:a1:11:56:ad:33:e6:db:a2:c6:97:94:9d:32:56:19:de:
         05:b9:b6:be:00:c8:38:9b:9a:08:9e:07:73:68:eb:a2:6f:15:
         45:04:28:96:1e:6d:86:bf:f8:b4:af:99:4b:75:43:20:5e:ac:
         f7:ef:f7:b4:f3:66:c7:9d:65:cd:89:3a:07:c2:e9:f7:38:9a:
         77:84:58:cb:41:43:12:47:b8:ca:eb:e8:b1:db:52:57:39:7c:
         49:cf:33:c2:18:54:2f:b2:07:93:a0:0d:48:61:d0:e9:98:05:
         d5:64:39:ed:97:28:fc:f9:1c:76:d5:35:a5:1f:b4:2b:ee:7d:
         c5:19:c6:62:c1:3a:92:af:a0:7f:27:08:1b:a6:a4:54:bd:61:
         a9:25:6b:4a:80:f7:04:cf:fd:f8:ce:33:fa:8d:e5:86:cf:76:
         18:a7:41:a0:4b:f3:48:f3:59:d0:9c:38:38:81:a1:b9:4c:83:
         f7:65:6d:78:22:5d:98:bc:31:5f:4c:85:d5:86:32:9d:06:25:
         cd:72:36:20:4e:25:51:c2:65:06:52:53:ad:3e:97:82:98:0f:
         05:79:d1:33:e4:67:79:07:73:43:ce:5c:15:6f:fe:b8:95:15:
         fc:13:57:5e:2f:01:bb:5f:08:48:6a:dc:63:1b:e2:5b:28:5e:
         df:aa:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:04:00 2026 by rpki-client