Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fb3574f8-3d10-38ef-9c7d-286f7c03051e.roa
File:                     fb3574f8-3d10-38ef-9c7d-286f7c03051e.roa (raw, json)
Hash identifier:          TlbvUl4hYqXoXi2Zc2yX/EWv72KallS/bQyrcvVKBnE=
Subject key identifier:   19:42:41:EC:93:B2:44:A8:CF:60:DB:58:4E:89:36:3F:8A:D8:B5:0F
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F18D8AA96DA43816DA8AC4970
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fb3574f8-3d10-38ef-9c7d-286f7c03051e.roa
Signing time:             Mon 07 Sep 2026 15:11:24 +0000
ROA not before:           Mon 07 Sep 2026 15:11:24 +0000
ROA not after:            Sun 06 Dec 2026 16:11:24 +0000
asID:                     30088
IP address blocks:        45.43.206.0/24 maxlen: 24
                          45.43.207.0/24 maxlen: 24
                          104.166.69.0/24 maxlen: 24
                          160.202.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:d8:aa:96:da:43:81:6d:a8:ac:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep  7 15:11:24 2026 GMT
            Not After : Dec  6 16:11:24 2026 GMT
        Subject: CN=37ff2f1b-caa6-4318-b9b1-ef489bd6a8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:cb:05:f9:99:4f:88:f7:ce:f1:04:f6:3d:
                    09:a9:af:c9:56:f5:5d:73:ed:8a:ba:86:04:ca:8e:
                    77:61:8b:2f:3f:fa:0b:95:b9:f3:81:0b:8b:4a:a4:
                    60:ca:df:b5:9d:40:8e:c5:35:1f:2a:5f:32:49:a7:
                    f9:a2:ef:68:f1:a2:a4:de:3d:a2:29:6b:db:f1:df:
                    c1:a3:76:48:42:b3:a8:48:79:c4:24:3e:13:a4:4d:
                    10:df:73:59:c9:48:ed:ad:65:78:79:ce:59:23:75:
                    96:61:86:c7:75:56:f3:fd:2b:79:03:73:ba:2d:b2:
                    b9:18:ea:7e:16:70:24:74:78:61:6b:65:25:97:97:
                    12:db:d5:1d:bf:9c:6c:b1:0e:65:ed:d5:3c:36:22:
                    89:61:06:e9:45:24:75:3a:5c:81:59:fd:00:29:66:
                    08:66:9d:8f:ff:2c:c3:75:00:65:19:41:b6:b2:8b:
                    13:cd:93:e3:87:55:7f:c1:26:1a:47:bd:a9:93:f9:
                    a1:6e:df:0d:ea:62:df:99:2e:50:4e:e5:ac:0d:b3:
                    fe:01:9f:92:7f:12:30:ae:2d:67:54:36:da:36:94:
                    d5:83:29:12:20:d7:12:4c:6f:cc:27:38:f7:45:c5:
                    3a:7e:0d:49:d5:9b:83:d4:b4:13:85:ff:33:57:ce:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:41:EC:93:B2:44:A8:CF:60:DB:58:4E:89:36:3F:8A:D8:B5:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/fb3574f8-3d10-38ef-9c7d-286f7c03051e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.206.0/23
                  104.166.69.0/24
                  160.202.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:53:46:3b:f9:81:29:0d:27:af:5d:75:c6:2c:53:6e:e9:8c:
         d8:d7:f6:f0:40:24:6d:3e:59:71:9f:12:c3:55:6b:5b:14:4e:
         ea:e1:4f:1c:c6:7e:ed:59:11:14:9e:dc:4b:85:1a:16:5a:aa:
         4d:54:69:fb:5c:91:f8:81:e3:f7:2c:0a:fa:b7:da:3c:bf:06:
         9e:5e:a5:b8:5d:06:70:75:60:3e:1e:69:e2:bf:1d:ae:dd:97:
         a8:f7:ff:dd:ad:7c:f1:fa:38:75:0d:87:4c:40:b1:c9:d6:42:
         40:47:ab:1c:56:5b:f2:1d:68:ae:0c:a6:8e:3c:8d:f8:2a:ea:
         2e:a6:3e:19:ab:a2:ed:c5:af:ba:47:e0:c9:f1:c3:34:f4:59:
         0b:87:7a:38:e4:46:bf:c9:54:7e:6f:2f:44:14:0b:79:32:5f:
         9c:1f:59:9e:5b:2a:1b:24:04:29:55:6b:dc:35:4d:61:84:de:
         62:84:78:94:dc:65:83:29:2a:c1:58:a7:75:58:8f:97:11:a7:
         b4:8c:fd:90:51:1c:cc:25:25:6c:e1:37:08:10:34:5e:cf:40:
         fe:ff:a3:d8:f1:17:76:b3:51:70:35:8f:f0:fe:3c:51:3c:26:
         b8:a1:ca:fd:60:c3:ae:91:af:a6:ee:92:54:f9:e5:bf:9e:66:
         c1:28:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:47:28 2026 by rpki-client