Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
File:                     c830abb1-8081-3ae6-93ef-70c36f800c3c.roa (raw, json)
Hash identifier:          JOPGQYDB3EmwYl9hbv0AGEF18DZ1d1j7TyFlcHDuln0=
Subject key identifier:   A8:63:3D:25:21:0F:6D:1D:6D:3D:64:0C:CC:B2:AF:31:1D:C5:7F:D7
Certificate issuer:       /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial:       010D0C9F4328584E5A49FA446C06933FA0D38C40
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     1299
IP address blocks:        104.245.248.0/21 maxlen: 24
                          146.71.16.0/20 maxlen: 24
                          160.79.80.0/20 maxlen: 24
                          161.115.16.0/20 maxlen: 24
                          192.30.160.0/20 maxlen: 24
                          2606:c440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fa:44:6c:06:93:3f:a0:d3:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=3a9cfdb6-136d-4e68-a3b0-6ef185b6dfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:14:d2:a7:c1:b4:d9:a9:3a:51:97:12:bd:
                    2c:fa:7f:f1:2a:4c:54:96:f5:ed:eb:d6:39:00:e0:
                    43:47:68:98:76:5b:1e:12:81:c5:e9:99:e8:d7:ac:
                    e7:69:b0:48:98:fe:9f:6f:93:d3:3c:f4:99:73:b8:
                    31:57:20:1e:70:e1:70:9e:1a:ab:68:4d:6a:1d:7a:
                    6b:80:12:9c:fa:f8:61:4f:e5:52:b2:06:aa:e2:ac:
                    a9:e6:cd:d8:cb:b6:9f:4a:30:5f:40:df:60:16:f9:
                    31:da:a5:88:50:89:a0:b7:71:ee:b9:2a:61:42:ba:
                    0b:d5:3c:38:ca:f2:72:67:04:98:4f:5f:46:31:dd:
                    d1:ef:14:ef:af:fc:44:6d:44:6f:63:61:f9:20:20:
                    5f:b0:a5:cb:29:9c:0a:f2:37:ed:6d:2c:37:08:4c:
                    da:81:15:6f:9e:33:ef:b3:d8:fa:00:11:88:d2:ad:
                    70:06:bf:74:03:0b:c5:22:8c:db:f3:8f:0b:f3:49:
                    70:b8:8f:3f:58:f8:86:e7:7e:3c:57:63:36:1c:e0:
                    d2:c1:5f:c0:70:bd:88:1e:38:21:1c:7a:e6:85:e9:
                    71:1c:2c:74:c9:ce:c5:dd:6c:e9:a0:38:84:8b:7f:
                    e2:fe:63:8c:c9:f4:24:d5:5d:43:1c:df:44:8a:83:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:63:3D:25:21:0F:6D:1D:6D:3D:64:0C:CC:B2:AF:31:1D:C5:7F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/c830abb1-8081-3ae6-93ef-70c36f800c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl

            X509v3 Authority Key Identifier:
                keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  161.115.16.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:48:b6:25:e9:68:4a:05:e7:9b:7c:51:9b:e3:b0:fb:2c:
         ab:25:3e:6a:07:fb:d2:ff:d6:bc:1e:8d:9d:8a:30:f9:07:6e:
         15:f8:36:f8:ac:80:18:14:b5:2d:32:65:ab:1d:6f:90:f0:ff:
         d0:40:2a:0b:13:12:f5:be:60:af:cb:2e:71:a6:8e:af:9f:9f:
         81:37:ea:11:a1:ff:f9:78:1b:bc:3f:ea:42:30:44:23:48:cd:
         9f:2b:4d:45:48:81:b1:9c:58:36:ba:d9:b6:a2:4c:86:76:e8:
         ae:8c:2f:a8:e2:3b:46:2c:3c:e3:e7:46:13:67:00:68:19:f3:
         d5:24:e7:08:a3:8a:ea:c6:a6:23:0a:6e:b3:7c:2c:5a:4c:ed:
         03:7f:3f:b1:ad:ea:2c:a2:f9:72:59:67:e5:33:10:18:d5:78:
         ca:4d:e3:59:76:0f:2d:47:af:63:2d:1d:19:eb:7f:da:37:e1:
         8e:21:b2:51:77:b2:9d:45:72:4f:7b:d1:81:cc:53:3e:0e:f9:
         71:89:90:09:56:c6:38:d3:3e:b8:dd:a4:67:8b:02:90:46:06:
         32:a9:3a:69:03:27:62:15:31:b9:fe:cf:b5:24:70:12:34:63:
         62:f4:ad:37:24:8a:10:e2:4f:b3:5a:87:68:ec:3d:97:b5:d5:
         61:be:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:04:36 2026 by rpki-client