Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa
File:                     cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa (raw, json)
Hash identifier:          2Tv3URK4UO1V9ENbHv3f8WX52J2Tm9WzhcYLCFivrvo=
Subject key identifier:   03:05:49:48:7E:12:58:9E:30:94:F9:98:4D:D4:7E:23:F6:9D:4E:FF
Certificate issuer:       /CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
Certificate serial:       010D0C9F4328584DD35B13FF5481B7FC884F3100
Authority key identifier: 8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     395261
IP address blocks:        45.59.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:13:ff:54:81:b7:fc:88:4f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=15342cb5-7980-4192-a5ef-e66dfff8284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:6b:33:6c:54:fd:1b:ba:6c:49:01:f0:c7:
                    cb:65:7f:72:d6:b0:87:7e:50:e5:a8:b4:b7:0f:43:
                    ee:04:24:e3:46:ce:5f:a7:39:57:2a:31:88:0f:08:
                    c0:09:a6:5c:11:ca:4b:55:20:be:61:ed:ca:51:f4:
                    c0:54:8d:fc:7a:b1:d4:d3:04:cd:23:40:17:42:1d:
                    e8:5a:08:84:6e:58:47:9a:d9:a4:ac:c1:d3:ac:92:
                    3d:7e:30:0b:44:f7:c7:60:b0:4f:7e:0d:fc:98:53:
                    b8:75:ee:c2:22:c6:d8:53:62:9d:88:72:1c:bc:ce:
                    e2:39:db:d9:1a:2d:26:69:86:db:ae:f0:a3:22:3a:
                    7f:ea:a1:d2:06:0c:cb:7d:44:36:c2:d7:45:f4:ad:
                    15:2c:b6:a2:fd:55:fd:33:41:6d:32:03:1a:e9:1c:
                    67:89:2c:d4:d5:9a:43:dc:45:c8:17:e7:0d:aa:f1:
                    3b:ef:f5:7f:38:7b:79:e5:0c:a7:cc:a7:24:b7:c6:
                    fc:d5:85:98:02:3f:f9:42:c4:2e:cb:fb:35:9d:b3:
                    6f:5c:51:d9:2a:68:e8:c9:e3:00:a1:e8:84:18:c6:
                    90:0b:ec:b4:c6:3b:2c:c2:87:91:ea:f0:7e:a5:88:
                    b6:c6:e7:45:26:34:1e:af:84:eb:fd:ca:20:f1:e0:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:49:48:7E:12:58:9E:30:94:F9:98:4D:D4:7E:23:F6:9D:4E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/cc72fc23-eab5-35c3-87ca-a93d8e3e825a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:2f:2c:63:f6:3d:1d:86:82:74:27:ef:aa:1f:8b:87:60:
         6a:21:dd:3b:c8:59:6b:fd:2d:4c:ec:75:4a:38:f0:7b:15:4f:
         22:3f:56:86:c9:e3:3b:0a:11:b6:67:32:df:a9:68:e5:cb:d7:
         2e:b3:ad:40:eb:d4:13:19:a9:1e:74:b1:e4:95:3d:21:17:2c:
         65:c0:a5:31:0f:6f:30:c9:18:3b:18:19:57:c4:99:7d:11:db:
         1b:ae:c4:ef:ae:24:e5:75:b8:09:88:56:74:57:a7:76:9a:95:
         ac:5f:4b:92:15:89:c1:0b:ab:5b:e5:6c:f8:03:31:28:c9:35:
         f5:d8:bd:28:a6:79:f5:07:92:e3:69:67:67:d9:88:bc:1f:a3:
         eb:78:54:b7:fa:61:64:09:85:84:80:a4:c4:53:af:75:94:57:
         2e:c9:ad:c5:dd:b5:64:eb:8f:51:b3:2f:be:6d:e4:36:a6:73:
         0b:a7:7e:a1:12:6b:92:a1:09:dd:c4:e2:fb:07:79:bb:ed:fe:
         0c:42:4e:df:43:dd:60:ca:1c:e3:09:f0:10:0d:f4:97:34:27:
         74:94:e6:a7:c1:05:64:1f:b2:34:ae:d5:7b:ea:af:c9:54:27:
         6f:bd:08:36:32:73:24:81:b6:e8:6c:b5:0a:70:5a:06:46:6b:
         d7:05:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:43:17 2026 by rpki-client