Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d8852fc2-c162-30d0-b7a7-2851a3d30109.roa
File:                     d8852fc2-c162-30d0-b7a7-2851a3d30109.roa (raw, json)
Hash identifier:          XcK7ujLE7MzSa4f0NOuFGkCkw5IqJLNGW0MdQRVj9MQ=
Subject key identifier:   48:EA:F3:20:7B:0B:89:01:6C:57:D6:00:0F:F0:51:90:F3:05:F8:EA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E40F83406EF49A3FEBDFE3B80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d8852fc2-c162-30d0-b7a7-2851a3d30109.roa
Signing time:             Mon 22 Jun 2026 07:20:21 +0000
ROA not before:           Mon 22 Jun 2026 07:20:21 +0000
ROA not after:            Sun 20 Sep 2026 07:20:21 +0000
asID:                     153259
IP address blocks:        45.43.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:40:f8:34:06:ef:49:a3:fe:bd:fe:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 22 07:20:21 2026 GMT
            Not After : Sep 20 07:20:21 2026 GMT
        Subject: CN=60fc579f-4796-4009-9e02-1e571a18add3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:80:07:f8:70:54:66:12:14:10:64:e9:08:
                    c0:bb:d7:20:7d:6a:16:2f:67:7b:7f:5e:40:0b:42:
                    13:c9:d2:a8:f2:fa:47:45:c5:93:27:6a:2a:53:f2:
                    42:3e:ee:dc:53:24:b0:97:a3:08:a3:de:57:fe:c3:
                    74:0b:d9:81:06:05:ac:47:36:f4:2e:0a:d8:4f:f5:
                    58:2c:4a:39:b9:02:13:73:ef:e2:39:9c:74:27:6d:
                    78:7d:c2:df:b6:1d:ef:f7:43:dd:5c:c7:d0:8d:93:
                    d9:31:40:1a:45:89:35:c1:7f:76:78:a9:d6:c3:c7:
                    75:c6:91:3b:f3:37:32:c6:72:9c:6a:ce:f5:0a:c0:
                    38:10:e2:56:57:bf:74:2e:c8:3e:d9:2b:1a:ba:f7:
                    79:a2:23:4d:06:99:57:fa:e2:47:44:e6:d1:0b:28:
                    e9:7d:ad:96:89:c1:02:1f:7b:0a:a1:5b:8a:72:fe:
                    80:c7:1b:af:1b:1d:08:d9:26:7e:26:dd:af:f8:b2:
                    1e:93:24:e5:e8:c9:8f:46:f1:b2:24:9e:6b:80:fd:
                    30:83:1e:f2:d3:cc:7b:22:fb:bd:4f:26:5e:af:91:
                    f1:ee:6f:40:ac:e2:1f:35:8e:2a:25:54:9f:d7:a4:
                    05:de:bf:5d:b8:0d:14:0b:81:bb:33:95:9c:cc:74:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EA:F3:20:7B:0B:89:01:6C:57:D6:00:0F:F0:51:90:F3:05:F8:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d8852fc2-c162-30d0-b7a7-2851a3d30109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:c4:c6:66:37:b5:ac:62:d6:37:f4:44:18:5f:17:ca:8f:
         8f:44:f0:b2:f8:93:c8:e1:37:98:4e:8a:5c:42:c0:96:41:b1:
         3a:1f:9f:5f:b8:b3:3d:d1:c2:0e:0f:11:b7:31:f6:c9:8a:cc:
         14:98:40:37:72:8d:fe:54:89:29:e8:29:d1:e6:bc:5b:d6:91:
         40:04:7d:b4:12:25:bb:32:5f:0d:19:f3:43:3f:03:69:cf:20:
         52:63:8d:2a:2a:ab:cc:e7:3b:42:c5:17:f8:b9:07:33:73:6e:
         50:0a:5f:6e:00:b9:56:9a:67:53:5e:db:72:f5:95:68:1f:71:
         81:57:70:9a:77:a0:97:46:bc:e6:82:f7:ac:0d:cd:cd:00:67:
         cd:94:50:2e:f2:f7:f7:d7:75:bc:35:97:db:da:b9:70:25:ed:
         b2:50:2c:32:36:7a:4b:bb:6c:40:f4:ea:ff:fc:7f:dd:d6:ba:
         b3:31:5d:67:66:5b:27:ff:5e:56:73:89:ab:c2:55:3e:d9:14:
         75:30:a1:1e:da:af:a8:15:c3:8a:21:a4:d9:d6:0c:0b:74:c2:
         40:90:93:5e:12:13:7c:f3:09:3d:26:e1:ae:fb:36:9d:f4:23:
         15:83:54:b9:d8:94:63:ed:20:30:43:a3:c4:53:ed:57:48:23:
         c4:da:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 01:34:39 2026 by rpki-client