Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/05047ecc-fb51-3ef0-bf19-914eda9525c9.roa
File:                     05047ecc-fb51-3ef0-bf19-914eda9525c9.roa (raw, json)
Hash identifier:          rklG0gMAS7NIL7VI2ePzrZ1/J/CgnzDWu/ZRY0PQ+WM=
Subject key identifier:   7E:6A:F8:AF:FA:B6:2E:F5:22:97:68:B9:05:DE:A1:5E:E0:A7:DA:93
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584E360190CE4ED9E5E19AD48700
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/05047ecc-fb51-3ef0-bf19-914eda9525c9.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     25972
IP address blocks:        169.145.42.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:90:ce:4e:d9:e5:e1:9a:d4:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=45596b63-080d-4188-a4ab-103c8db4532e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:e2:76:5a:12:68:74:a0:17:ae:ae:de:1a:
                    36:81:95:b3:e1:17:c8:8c:d7:03:15:ca:e3:ef:9e:
                    1e:77:22:2c:30:6d:68:3a:82:da:09:b4:0c:3e:cd:
                    95:d4:14:b6:8a:88:17:3a:78:64:3c:aa:0c:fb:29:
                    2c:6d:cc:78:78:77:66:d1:2d:51:7f:3e:7e:2e:e4:
                    ed:26:17:67:e5:d1:30:bb:76:57:e7:dc:80:04:50:
                    ef:26:3d:b2:c7:0e:2c:13:8a:e4:4f:7a:ba:83:fc:
                    b2:13:d9:fd:a4:42:f1:d3:b6:47:ea:d3:96:f9:3f:
                    ad:1d:72:76:1c:d1:aa:fd:93:56:6b:73:44:4b:58:
                    3a:91:51:4c:c4:a4:61:31:6e:a8:c9:e0:60:8c:36:
                    12:57:79:09:31:36:91:63:57:2f:28:33:dd:c3:aa:
                    ab:c8:8f:e4:07:b6:fb:c7:90:8a:82:bc:43:20:d6:
                    db:4b:47:f3:b8:e9:19:af:e7:b6:b2:53:bd:15:65:
                    c0:5c:a0:02:e0:7f:c6:d8:10:18:bd:6a:47:e1:fd:
                    85:b2:01:af:29:00:fc:08:93:30:89:3b:92:ce:2c:
                    ec:e7:6d:c8:53:9a:64:47:e9:9e:dc:ba:c0:61:f1:
                    00:b5:8c:38:ba:e5:d4:26:31:22:e3:fa:52:12:a5:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:F8:AF:FA:B6:2E:F5:22:97:68:B9:05:DE:A1:5E:E0:A7:DA:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/05047ecc-fb51-3ef0-bf19-914eda9525c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:64:b5:21:e8:57:75:b8:c5:45:8d:a3:63:4b:1e:a7:3c:87:
         8f:d9:71:20:6f:79:25:5c:cc:8c:97:d4:51:df:46:df:2c:65:
         e8:8f:bf:0b:06:99:f1:de:8a:a0:6e:10:f0:94:85:98:3a:55:
         42:55:74:cd:2c:71:dc:58:11:6a:07:5b:98:94:66:d5:d1:54:
         a5:cf:4f:b4:ca:4a:c0:9c:a1:4b:0d:ad:ac:96:68:c4:c6:61:
         81:7d:2d:80:14:57:06:8d:4e:c6:e9:8f:ea:8a:e7:29:67:13:
         d1:df:8a:07:40:bb:08:24:ac:35:27:9f:55:58:51:f9:aa:dc:
         2e:9b:71:0b:d1:30:74:cf:5a:91:fa:06:b7:de:8e:d5:c0:4a:
         05:0e:3c:16:c5:0b:b2:e7:eb:83:1b:6b:d3:bc:b8:b2:05:6f:
         88:75:c0:46:f3:8c:38:47:97:83:5b:55:14:e8:20:1d:f0:c5:
         e2:a6:87:f9:1a:6b:88:05:bc:da:d7:a5:47:a4:40:54:99:a9:
         e3:9a:eb:02:b7:e5:1c:8c:70:14:2f:1b:0f:be:25:d6:40:3c:
         c1:0c:cf:9c:0e:40:f7:24:91:f9:4b:ed:80:48:57:d6:56:e7:
         8a:30:49:86:e7:b8:25:1c:89:aa:16:6c:cd:7f:93:7b:15:ae:
         de:b0:8a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 20:22:01 2026 by rpki-client