Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
File:                     d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa (raw, json)
Hash identifier:          Es10cQkNYaENikskP6w2bj94n/9nKxzn85JEA+Uh7wQ=
Subject key identifier:   5D:93:CD:E5:04:7B:86:8D:F0:20:E8:8A:AF:50:50:CB:96:77:00:A9
Certificate issuer:       /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial:       010D0C9F4328584F02421C6DF6570D331220A300
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     398717
IP address blocks:        45.59.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1c:6d:f6:57:0d:33:12:20:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=9c29541b-6262-4e5c-8d7e-931f4e8ec72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:26:f1:82:c6:56:7b:e4:12:49:6b:c2:e0:
                    a6:18:28:eb:d6:70:53:fa:20:65:9c:7d:3e:97:65:
                    d8:93:d2:e0:37:57:57:41:65:7a:e5:b5:68:f7:f7:
                    dc:2d:23:da:7f:14:70:81:4e:3b:b9:5a:ca:83:c2:
                    87:51:71:00:bc:a6:84:e6:dc:0f:6c:51:48:db:69:
                    f5:b6:1b:4b:89:15:15:94:49:13:1b:27:d9:27:2c:
                    fb:ec:cf:fc:1d:4f:80:f5:70:86:e6:c9:3d:57:4e:
                    14:49:c5:d6:23:de:fd:21:99:b9:f3:88:96:71:74:
                    72:06:43:67:9e:40:82:41:e5:ff:b0:1f:bf:72:4d:
                    de:f2:91:7d:23:d6:74:7f:66:bb:72:1b:c1:fb:25:
                    4f:38:fc:f2:30:76:a9:07:e2:3d:8c:d4:d8:d7:b2:
                    d7:b6:13:7e:4a:38:4b:85:07:67:68:91:52:4f:57:
                    bd:d2:42:95:4d:65:60:72:88:0a:2a:6d:1d:ad:1f:
                    74:4d:38:d8:a0:f7:67:bd:fb:c1:28:3a:7a:43:0d:
                    30:f8:98:6a:38:0b:62:48:7b:80:2e:59:34:52:cf:
                    1f:01:56:ac:e5:a5:88:d5:ff:ea:c1:f1:6a:c1:ed:
                    f9:bc:24:5b:ef:8f:24:2e:1e:17:90:76:46:09:cf:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:CD:E5:04:7B:86:8D:F0:20:E8:8A:AF:50:50:CB:96:77:00:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/d10c1b7a-1c69-3be9-a8b9-3d28a2711cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl

            X509v3 Authority Key Identifier:
                keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:23:5b:1f:c9:c5:1b:51:f6:e9:98:8c:f7:12:7a:73:22:b5:
         a7:8f:4b:ef:9b:39:a4:34:71:34:0b:49:2e:d8:f2:cc:35:81:
         6f:a4:85:bb:05:56:27:45:6c:10:85:a4:4e:97:c0:ff:9a:a1:
         05:5f:30:7c:c7:96:a8:9f:89:75:79:bc:38:fe:db:d9:51:5c:
         5d:83:b3:b8:bc:1a:a5:03:1a:84:3a:fb:cc:0c:06:c0:4f:b9:
         49:1b:ea:18:0f:5e:08:42:c1:ee:d0:ad:ea:30:87:d9:df:c5:
         71:b3:ee:32:1c:d5:b7:92:a0:95:d2:77:91:b3:91:b2:64:3b:
         47:3c:e7:db:d3:c2:aa:bb:9a:7d:fb:6a:4b:e8:f7:65:ce:14:
         85:c8:ce:3c:aa:7f:81:ad:08:9c:de:25:84:64:11:4b:a8:0e:
         57:4b:98:5a:33:9e:a3:53:80:df:b2:cc:f6:96:d8:4f:63:eb:
         bb:9e:66:58:86:a6:1c:b5:88:7c:f1:93:8b:81:36:24:36:e3:
         86:2b:d8:e3:15:b0:88:40:91:27:b6:7e:f3:9d:60:7c:32:45:
         b4:23:a1:e6:ac:6d:65:4c:1b:be:ec:a2:75:00:e5:64:ff:11:
         dc:1a:07:24:21:f0:6d:f1:e1:8f:b1:1a:75:db:cf:5d:b6:eb:
         3f:e4:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 18:57:19 2026 by rpki-client